Cybersecurity News

Cybersecurity 7 min

CYBERSECURITY · 16 Jun 2026 —

NFCShare: Android Malware Poses as a Bank App Update to Steal Card Data Through Your Phone's NFC Chip

Researchers at D3Lab say a new wave of the NFCShare Android trojan, running since mid-May 2026, poses as banking-app upd...

CY

Cyber Team

16 Jun

Cybersecurity 7 min

CYBERSECURITY · 11 Jun 2026 —

Miasma Returns With 'Phantom Gyp': npm Worm Sidesteps the Install-Script Defences Teams Just Deployed

On 3 June, two days after the Red Hat npm compromise, the Miasma worm returned with a new delivery trick: a 157-byte bin...

CY

Cyber Team

11 Jun

Cybersecurity 6 min

CYBERSECURITY · 7 Jun 2026 —

One Trojan, Three Lures: MyCERT Warns of Android Banking Malware Hitting Maybank and CIMB Users

MyCERT's 6 June advisory details an active Android banking-trojan campaign using three lure brands — Delivery4U, KerjaEx...

CY

Cyber Team

7 Jun

Cybersecurity 5 min

CYBERSECURITY · 7 Jun 2026 —

SolarWinds Serv-U Enters CISA KEV After Active Exploitation Warning

SolarWinds Serv-U CVE-2026-28318 is now in CISA’s Known Exploited Vulnerabilities catalogue after a June 2026 hotfix. Th...

CY

Cyber Team

7 Jun

Cybersecurity 7 min

CYBERSECURITY · 7 Jun 2026 —

CSA Flags GlobalProtect Auth-Bypass CVE-2026-0257 as Critical While Attackers Forge VPN Cookies in the Wild

Singapore's CSA rates a GlobalProtect authentication-bypass flaw critical (9.1) — sterner than Palo Alto's own HIGH rati...

CY

Cyber Team

7 Jun

Cybersecurity 3 min

CYBERSECURITY · 7 Jun 2026 —

Singapore Reviews Binding Cyber Obligations for Interconnected Non-CII Systems

The Cyber Security Agency of Singapore is evaluating whether to extend regulatory requirements to non-critical informati...

CY

Cyber Team

7 Jun

Cybersecurity 5 min

CYBERSECURITY · 6 Jun 2026 —

Cisco Unified CM SSRF Flaw Needs Fast Action Where WebDialer Is Enabled

Cisco has patched CVE-2026-20230, a Unified CM and Unified CM SME server-side request forgery flaw that can lead to root...

CY

Cyber Team

6 Jun

Cybersecurity 5 min

CYBERSECURITY · 6 Jun 2026 —

Google’s June Android Patch Fixes a Zero-Day Under Targeted Exploitation

Google’s June 2026 Android security bulletin includes CVE-2025-48595, a Framework vulnerability flagged for limited, tar...

CY

Cyber Team

6 Jun

Cybersecurity 7 min

CYBERSECURITY · 2 Jun 2026 —

No Zero-Day Required: ShinyHunters' Salesforce Vishing Spree Snares Charter and Carnival in One Week

Two major consumer brands confirmed breaches days apart — Carnival began notifying nearly six million people, and Charte...

CY

Cyber Team

2 Jun

Cybersecurity 3 min

CYBERSECURITY · 1 Jun 2026 —

This week's breaches needed no zero-day. The perimeter is identity now.

A phone call took millions of records out of two large companies this week. A firewall bug let attackers walk past the e...

JE

Jeffrey Tan

1 Jun

Cybersecurity 2 min

CYBERSECURITY · 1 Jun 2026 —

CISA orders agencies to patch an actively exploited Palo Alto firewall flaw by 1 June

Attackers are exploiting a flaw in Palo Alto Networks' PAN-OS that lets them slip past security controls and open an una...

CY

Cyber Team

1 Jun

Cybersecurity 5 min

CYBERSECURITY · 1 Jun 2026 —

Nova Ransomware Claims Indonesia's National Food Agency in Latest Government Sector Hit

Nova ransomware claimed Badan Pangan Nasional — Indonesia's National Food Agency — on 29 May 2026, citing 133 compromise...

CY

Cyber Team

1 Jun