Cybersecurity

Cybersecurity 8 min Langflow Becomes the First AI-Agent Platform on CISA's Exploited-Vulnerability List On 7 July 2026, CISA added an actively-exploited vulnerability in Langflow — a popular open-source framework f... CY Cyber Team 9 Jul Cybersecurity 8 min CVE-2026-8451: A CitrixBleed-Class NetScaler Flaw Was Exploited Within a Day of Disclosure CVE-2026-8451 is a CitrixBleed-class, unauthenticated memory-overread flaw in Citrix NetScaler ADC and Gateway... CY Cyber Team 7 Jul Cybersecurity 9 min Google and the FBI Disrupt NetNut, a 2-Million-Device Residential Proxy Network Fuelled by Smart TVs Google's Threat Intelligence Group, working with the FBI, Lumen and other partners, has disrupted NetNut — a r... CY Cyber Team 6 Jul Cybersecurity 7 min SharePoint RCE CVE-2026-45659 Added to CISA KEV: A 'Less Likely' May Patch Is Now Actively Exploited CISA added CVE-2026-45659, a CVSS 8.8 deserialization remote-code-execution flaw in on-premises Microsoft Shar... CY Cyber Team 6 Jul Cybersecurity 7 min Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245: Netadmin-to-Root, Exploited for Months Before Disclosure Cisco disclosed CVE-2026-20245 on 5 June 2026, a high-severity command-injection flaw in Catalyst SD-WAN Manag... CY Cyber Team 2 Jul Cybersecurity 10 min FortiBleed: FortiGate Credential Exposure Hits Tens of Thousands of Devices — And It Is Not a New CVE FortiBleed is a large-scale credential-exposure campaign against internet-facing Fortinet FortiGate firewalls... CY Cyber Team 2 Jul Cybersecurity 8 min Linux 'pedit COW' (CVE-2026-46331) Hands Local Users Root via Page-Cache Corruption — Patch and Reboot CVE-2026-46331, nicknamed pedit COW, is a Linux kernel local privilege-escalation flaw in the traffic-control... CY Cyber Team 30 Jun Cybersecurity 7 min PTC Windchill and FlexPLM RCE CVE-2026-12569 Is Under Active Attack — Patch Now and Hunt for Webshells CISA added CVE-2026-12569, a critical remote code execution flaw in PTC Windchill PDMLink and FlexPLM, to its... CY Cyber Team 30 Jun Cybersecurity 6 min Cisco Unified CM SSRF Flaw CVE-2026-20230 Is Now Being Exploited — Patch by 28 June and Check for Compromise CISA added CVE-2026-20230, a server-side request forgery flaw in Cisco Unified Communications Manager, to its... CY Cyber Team 30 Jun Cybersecurity 6 min Three Maximum-Severity Ubiquiti UniFi OS Flaws Are Being Exploited — Patch via Bulletin 064 and Check for Compromise CISA added three maximum-severity Ubiquiti UniFi OS vulnerabilities (CVE-2026-34908, -34909 and -34910) to its... CY Cyber Team 30 Jun Cybersecurity 6 min Joomla JCE Flaw CVE-2026-48907 (CVSS 10.0) Is Being Actively Exploited — Patch and Check for Compromise CISA added CVE-2026-48907, a maximum-severity flaw in the Widget Factory Joomla Content Editor extension (JCE... CY Cyber Team 19 Jun Cybersecurity 6 min Palo Alto GlobalProtect Flaw CVE-2026-0257 Is Under Active Exploitation — Patch or Mitigate Now Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, an authentication-bypass flaw in PAN-OS... CY Cyber Team 19 Jun Cybersecurity 6 min One Trojan, Three Lures: MyCERT Warns of Android Banking Malware Hitting Maybank and CIMB Users MyCERT's 6 June advisory details an active Android banking-trojan campaign using three lure brands — Delivery4... CY Cyber Team 7 Jun Cybersecurity 7 min CSA Flags GlobalProtect Auth-Bypass CVE-2026-0257 as Critical While Attackers Forge VPN Cookies in the Wild Singapore's CSA rates a GlobalProtect authentication-bypass flaw critical (9.1) — sterner than Palo Alto's own... CY Cyber Team 7 Jun Cybersecurity 7 min No Zero-Day Required: ShinyHunters' Salesforce Vishing Spree Snares Charter and Carnival in One Week Two major consumer brands confirmed breaches days apart — Carnival began notifying nearly six million people,... CY Cyber Team 2 Jun ASEAN Tech 3 min Singapore is spending to make 12,000 SMEs AI- and cyber-ready. Here is what they actually need. IMDA has lined up Grab and RSM to bring AI training and cyber drills to 12,000 small businesses. I have built... JE Jeffrey Tan 1 Jun AI & ML 3 min Singapore tested government AI agents in a sandbox. The hard part was trust, not capability. Singapore and Google ran AI agents against real government work for four months, on an air-gapped cloud, and p... JE Jeffrey Tan 1 Jun Cybersecurity 3 min This week's breaches needed no zero-day. The perimeter is identity now. A phone call took millions of records out of two large companies this week. A firewall bug let attackers walk... JE Jeffrey Tan 1 Jun Cybersecurity 2 min CISA orders agencies to patch an actively exploited Palo Alto firewall flaw by 1 June Attackers are exploiting a flaw in Palo Alto Networks' PAN-OS that lets them slip past security controls and o... CY Cyber Team 1 Jun Cybersecurity 5 min Microsoft Exchange OWA Zero-Day CVE-2026-42897 Actively Exploited With No Permanent Patch Microsoft confirmed active exploitation of CVE-2026-42897, a cross-site scripting flaw in Exchange's Outlook W... CY Cyber Team 1 Jun Cybersecurity 3 min This week's bugs to patch: a critical OTRS flaw and a Linux root hole on CISA's list A short, practical read of the week's most urgent vulnerabilities: a critical pre-authentication flaw in the O... CY Cyber Team 1 Jun ASEAN Tech 4 min Hong Kong's First Astronaut Is a Police Computer-Forensics PhD — and She's Now Aboard China's Tiangong Station When Shenzhou-23 lifted off on 24 May 2026, one of the three people aboard was Lai Ka-ying — a serving Hong Ko... SA Sarah Chen 30 May Cybersecurity 9 min Threat Brief, Week of 18 May 2026: State-Backed Espionage in Malaysia, a Malware-Signing Takedown, and the Defender Itself Under Fire Our weekly read of the threat landscape: a state-backed actor ran a bespoke espionage operation against Malays... CY Cyber Team 30 May Cybersecurity 6 min An LLM Agent Drove This Real Intrusion: Marimo RCE to Database Dump in Under an Hour On 10 May an internet-exposed marimo notebook was breached through CVE-2026-39987 — and then an autonomous LLM... CY Cyber Team 30 May