Cybersecurity

ASEAN Tech 4 min Tabung Haji Restores Services After Cyberattack but Has Not Said What Was Hit Malaysia's pilgrims fund was offline for about four days. Savings are safe, it says, but three THiJARI functio... DA Daniel Koh 14 Oct ASEAN Tech 4 min Singapore Wants Organisations to Finish Switching to Quantum-Safe Encryption by 2035 The Cyber Security Agency asks exposed organisations for a migration plan by the end of 2027, gives critical i... SA Sarah Chew 14 Oct Cyber Threat Intel 6 min The CVSS score was never meant to be your patch queue Patch everything above 9.0 is the most common vulnerability rule there is, and FIRST — who publish CVSS — writ... PR Priya Nair 16 Sep Cybersecurity 7 min Nobody has required a seven-pass disk wipe since 2006 Disk utilities still offer a seven-pass erase labelled "DoD 5220.22-M". The Department of Defense removed over... KE Kenji Tanaka 16 Sep Cybersecurity 7 min The Stop Rogue AI Act Would Make Companies Inventory Their AI Agents. It Is Voluntary for Almost Everyone. The Stop Rogue AI Act binds only federal contractors bidding new work, and gives NIST a year from enactment. I... PR Priya Nair 5 Sep Health & Wellness 6 min No Pacemaker Stopped Working. New Patients Cannot Be Enrolled. The reporting says the incident has hit pacemakers. Therapy was never involved and existing monitoring still w... AM Amelia Wong 1 Sep Cybersecurity 7 min Half the Carhartt Breach Data Was Fabricated ShinyHunters claimed close to 25 million records. Troy Hunt filtered the dump before loading it and found 12,9... KE Kenji Tanaka 30 Aug Cybersecurity 7 min ASEAN's Record $4.12m Breach Cost Comes From 26 Companies IBM discloses the sample size and the coverage drops it. The comparisons inside the study — 123 days faster de... KE Kenji Tanaka 29 Aug Developer Tools 6 min GitHub's Outage Was Nearly Eight Hours, And A Retry Bug Made It Worse GitHub's incident summary puts the 17 August outage at 13:28 to 21:15 UTC, not the three hours most people saw... KE Kenji Tanaka 24 Aug Cyber Threat Intel 8 min US Agencies Have Until Tuesday To Patch The Windows Flaw Lazarus Is Using CVE-2026-68820 sits in Winsock, the same component North Korean operators abused in 2024. Check Point ties cur... PR Priya Nair 23 Aug Cybersecurity 8 min The Zimbra Patch Was Out For A Month Before Anyone Noticed It Being Exploited CVE-2026-73570 gives an unauthenticated attacker shell commands as the zimbra user, but only where an optional... KE Kenji Tanaka 23 Aug Cybersecurity 8 min The Sandbox Everyone Uses To Run Untrusted JavaScript Can Be Escaped A type-confusion flaw in isolated-vm's ExternalCopy lets sandboxed code corrupt host memory and potentially re... KE Kenji Tanaka 22 Aug Cyber Threat Intel 8 min Attackers Are Using MLflow To Ask The Cloud For Its Own Credentials CVE-2026-64849 is an unauthenticated server-side request forgery in MLflow scoring 9.3. Two days after disclos... PR Priya Nair 22 Aug Cybersecurity 8 min Cisco Found Nine Flaws In Its Own Network Automation Platform. Five Score 10.0. The August hardening release for Crosswork and Secure Workload fixes SQL injection, missing authentication and... KE Kenji Tanaka 22 Aug Cybersecurity 8 min Microsoft Fixed a Perfect-10 Entra ID Flaw Before Telling Anyone It Was Exploited CVE-2026-69836 scores 10.0, needs no account and no user interaction, and was exploited in the wild. Microsoft... KE Kenji Tanaka 22 Aug Cybersecurity 10 min Singapore Will Hold Infrastructure Boards Accountable for Recovery, Not Just Defence CSA said on 22 July that the rewritten Code of Practice will require critical-infrastructure boards to maintai... KE Kenji Tanaka 21 Aug Cyber Threat Intel 8 min Singapore's Banks Got an AI Threat Taskforce Before They Got AI Rules MAS and the Association of Banks stood up the ACT taskforce on 28 July with DBS, OCBC, UOB, SGX, NETS and Bank... PR Priya Nair 21 Aug Cybersecurity 8 min A Ransomware Group Posted Its Demands On The Hospital's Own Facebook Page AnMed closed 83 medical offices after a July attack, with ten still shut a week later. On 11 August the attack... KE Kenji Tanaka 21 Aug Cyber Threat Intel 8 min US Agencies Say AI Is Writing The Exploits For Water Plant Controllers A five-agency advisory names Siemens S7 PLCs at water, energy, chemical and manufacturing sites, with exploita... PR Priya Nair 21 Aug Cybersecurity 5 min Three DNS Records Almost Nobody Publishes DNSSEC, CAA and MTA-STS each protect people who will never know they exist. Across 18 major ASEAN banks, gover... KE Kenji Tanaka 19 Aug Cyber Threat Intel 6 min Can You Prove an Attack Was Prevented? Early warning is what threat intelligence is sold on, and prevention is the least verifiable claim in security... PR Priya Nair 19 Aug Cyber Threat Intel 5 min Who Sells Threat Intelligence Four quite different businesses use the same phrase, which is most of why the market is confusing. A map of th... PR Priya Nair 19 Aug Cybersecurity 6 min What Your Own Domain Tells a Stranger OSINT needs no budget and no access. We ran it against our own domain and found 26 robots.txt rules naming /ad... KE Kenji Tanaka 19 Aug Cyber Threat Intel 5 min What a Threat Actor Name Buys You Reporting names adversaries with real confidence — APT29, Lazarus, Sandworm — and it is worth asking how much... KE Kenji Tanaka 19 Aug