Cybersecurity News

Cybersecurity 8 min

CYBERSECURITY · 17 May 2026 —

EchoLeak: Zero-Click Prompt Injection in Microsoft 365 Copilot Quietly Exfiltrates Enterprise Data

EchoLeak shows a malicious email can trigger Microsoft 365 Copilot into exfiltrating enterprise data without a single us...

CY

Cyber Team

17 May

Cybersecurity 9 min

CYBERSECURITY · 17 May 2026 —

Hackers Reach Anthropic's Restricted Mythos Model Through a Vendor Environment as FSB Calls Briefing

A small group of unauthorised users reached Mythos via a third-party vendor environment on the same day Anthropic announ...

CY

Cyber Team

17 May

Cybersecurity 8 min

CYBERSECURITY · 16 May 2026 —

Anthropic's Project Glasswing Lines Up AWS, Apple, Google, Microsoft, JPMorgan to Test Mythos for Cyber Defence

Project Glasswing pairs Anthropic's restricted Mythos model with a roster of hyperscalers, banks and the Linux Foundatio...

CY

Cyber Team

16 May

Cybersecurity 13 min

CYBERSECURITY · 14 May 2026 —

Exchange Server Zero-Day CVE-2026-42897 — Crafted-Email XSS Spoofs OWA Without User Click

Microsoft disclosed CVE-2026-42897 on 14 May 2026 — an XSS spoofing flaw in Exchange OWA exploited via crafted email. CV...

CY

Cyber Team

14 May

Cybersecurity 12 min

CYBERSECURITY · 12 May 2026 —

Instructure Pays Ransom to ShinyHunters After Canvas Breach Exposes 275 Million Records Across 8,809 Schools

After ShinyHunters stole 3.65TB of data from 8,809 schools using the Canvas LMS, Instructure quietly paid the ransom. Wh...

CY

Cyber Team

12 May

Cybersecurity 9 min

CYBERSECURITY · 8 May 2026 —

ShinyHunters Breach Instructure Canvas: 275 Million Students' Data Stolen in One of Education's Largest Ever Cyberattacks

Hacking group ShinyHunters claims to have stolen data on 275 million people from Canvas LMS operator Instructure, exposi...

CY

Cyber Team

8 May

Cybersecurity 8 min

CYBERSECURITY · 8 May 2026 —

Critical Palo Alto Firewall Zero-Day Actively Exploited by State-Sponsored Hackers — CISA Orders Patch by 9 May

CVE-2026-0300, a critical PAN-OS buffer overflow enabling unauthenticated root-level RCE, is being actively exploited by...

CY

Cyber Team

8 May

Cybersecurity 9 min

CYBERSECURITY · 8 May 2026 —

Iran's MuddyWater Used Microsoft Teams to Run a Fake Ransomware Attack — While Quietly Stealing Your Data

Iran-linked MuddyWater used unsolicited Microsoft Teams chats, screen-sharing, and credential-harvesting to conduct sust...

CY

Cyber Team

8 May

Cybersecurity 8 min

CYBERSECURITY · 8 May 2026 —

AI-Assisted Attacks Are the New Normal: Mandiant M-Trends 2026 Shows Exploit Windows Have Inverted

Mandiant's M-Trends 2026 report confirms 28.3% of CVEs are now exploited within 24 hours of disclosure — and documents t...

CY

Cyber Team

8 May

Cybersecurity 5 min

CYBERSECURITY · 6 May 2026 —

ASEAN Is Short 3.5 Million Cybersecurity Professionals — And the Gap Is Widening

ASEAN Is Short 3.5 Million Cybersecurity Professionals — And the Gap Is Widening. Technical analysis, regional impact, a...

CY

Cyber Team

6 May

Cybersecurity 5 min

CYBERSECURITY · 6 May 2026 —

Ransomware Groups Are Now Using AI to Negotiate Higher Ransom Payments

ASEAN perspective on Ransomware Groups Are Now Using AI to Negotiate Higher Ransom Payments. Technical analysis, regiona...

CY

Cyber Team

6 May

Cybersecurity 5 min

CYBERSECURITY · 6 May 2026 —

ASEAN Cybersecurity Spending Hit 8 Billion in 2025 — Is It Going to the Right Places?

ASEAN perspective on ASEAN Cybersecurity Spending Hit 8 Billion in 2025 — Is It Going to the Right Pl. Technical analysi...

CY

Cyber Team

6 May