Cybersecurity
209 reports
Cyber Risk Special Advisory: eMudhra’s Certificate Misconfiguration Exposes Users to Website Impersonation and Data Theft
A flaw in eMudhra CA certificates, caused by misconfigured private keys generated in April 2025, allows threat actors to forge trusted digital certificates. While major tech providers have updated browsers, administrators are advised to manually patch vulnerable non-browser infrastructure.
Cyber Risk Special Advisory: Recently Discovered PHP2Shell Vulnerability Affecting 70% of Websites Requires Immediate Update
On October 20, 2026, two PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were detected, affecting all PHP versions 5 through 8 and allowing unauthenticated remote code execution. The PHP Foundation advises an immediate update to PHP 8.2+.
Phishing Platform Impersonating AI Brands Using Browser-in-the-Browser Attack Method to Bypass Visual Cues that give away Phishing Attacks
Threat actors are deploying sophisticated phishing campaigns impersonating artificial intelligence brands to steal user credentials through deceptive browser in the browser attacks.
Analysis on the recent Cybersecurity Incident affecting Refrigeration Systems
A recent cybersecurity incident exploiting unpatched Danfoss refrigeration controllers shut down hundreds of supermarkets in France, resulting in massive food spoilage and highlighting severe vulnerabilities in industrial control systems.
Microsoft’s Monthly Patch - October 2026: 1411 Vulnerabilities Fixed, Including 3 Zero-Days; 23H2 Reaches End of Life
Microsoft released its October update fixing one thousand four11 vulnerabilities, including three zero days, and announced the impending end of support for Windows 11 version 23H2.
Google Chrome Releases Early Stable Update Addressing 247 Security Fixes
Google Chrome released an early stable update addressing two hundred forty seven security fixes, including thirty seven vulnerabilities, with security researchers uncovering critical code execution flaws.
Atlassian Patches Actively Exploited Critical Vulnerabilities in its Core Products
Atlassian patched a critical vulnerability tracked as Common Vulnerabilities and Exposures twenty twenty six two one five eight nine affecting data center products, enabling remote code execution
South Korea and Japan Face Increase in AI-Powered Cybersecurity Attacks
South Korea and Japan face surging artificial intelligence powered cyberattacks as malicious actors leverage automated tools, prompting emergency responses and financial sector warnings across East Asia.
Monitored ‘Traffic Violation’ SMS Scam Targeting Individuals based in Metro Manila
Scammers are targeting individuals across Metro Manila, Philippines with fraudulent text messages regarding fake traffic violations to steal sensitive personal and financial data.
Localized Internet Disruption in the Philippines Caused by C2C Undersea Cable Damage
An undersea cable disruption caused internet connectivity issues in the Philippines, highlighting critical vulnerabilities in regional telecommunications infrastructure.
Critical Information Infrastructure Protection Act and the Cybersecurity Act
These two measures seek to establish a set of standards for the security and protection of critical information infrastructure.
Apple Releases Patch Update for Zero-Day CoreGraphics Flaw: CVE-2026-86950
Apple released a critical security update addressing a severe framework vulnerability that was actively exploited in sophisticated targeted attacks against prominent political figures and corporate executives.
Browser Extension Risks: ‘Poper Blocker’ Spyware Evades Security Checks Across Millions of Devices
Apple released essential security updates across its operating systems to resolve critical system vulnerabilities, including potential remote code execution and data exposure flaws. Keeping all devices updated reduces your attack surface and protects organizational data from emerging threats.
Cybercrime Feud Between ShinyHunters and Clop Risks Collateral Damage over Past Extortion Victims
Cybercrime group ShinyHunters targeted the data leak site of ransomware syndicate Clop, exploiting a vulnerability to expose internal systems and risking collateral damage for past extortion victims.
Suspected North Korean Threat Actors Stole USD 388 million in Cryptocurrency Using Stolen Backend Authority
Suspected North Korean threat actors stole three hundred eighty seven million dollars in cryptocurrency from the Bitget exchange by exploiting backend vulnerabilities. Analysts assess that the Lazarus group executed this highly sophisticated cyber attack to sustain state finances.
Cisco Catalyst SD-WAN Manager Vulnerability Enables Authentication Bypass: Added to CISA’s KEV List (CVSS 9.8)
Cybercrime group ShinyHunters targeted the data leak site of ransomware syndicate Clop, exploiting a vulnerability to expose internal systems and risking collateral damage for past extortion victims.
Apple Releases September Security Update Across iOS 27 and Other Apple Platforms
Apple released essential security updates across its operating systems to resolve critical system vulnerabilities, including potential remote code execution and data exposure flaws. Keeping all devices updated reduces your attack surface and protects organizational data from emerging threats.
Joint Advisory on Iranian-Linked Threat Group Using Spyware to Target Journalists, Activists, and Dissidents
Iranian linked threat actors are deploying advanced spyware via messaging platforms to target journalists and dissidents worldwide. Organizations must audit digital footprints and enhance training to mitigate risks.
Japan's Digital Agency Discloses Non-Zero-Day Vulnerability in VPN Network Exposed 246,000 Personal Records
Japan's Digital Agency disclosed a data breach caused by an unpatched VPN vulnerability, exposing 246,000 personal records across government ministries and private contractors.
Over 220 Million Travel Records Exposed via Misconfigured Vietnam Database
An exposed database in Vietnam compromised over two hundred twenty million travel records, including passenger and flight details. Researchers informed authorities, and access was secured.
Microsoft’s Monthly Patch - September 2026: 966 Vulnerabilities Fixed, Including 2 Zero-Days
Microsoft released its September update fixing nine hundred sixty-six vulnerabilities, including two active zero-days in the update stack and advanced local procedure call, alongside one hundred five critical flaws.
Hundreds of Fake Government Websites Mimicking Social Assistance Programs in Central Asia
Hundreds of fake government websites mimicking social assistance programs in Central Asia target citizens with phishing campaigns, seeking personal information for financial fraud.
A Series of Cyberattacks Targeting Healthcare Companies Conducted by a Single Cybercriminal Group
The United States healthcare sector faces severe cyberattacks from the group ShinyHunters. These breaches threaten data security and signal risks for the Philippines health information services.
Two Pre-Installed Backdoors Found in Chinese-Manufactured Zbtlink Routers
Cybersecurity researchers discovered two pre-installed backdoors in commercial routers manufactured by Zbtlink. These vulnerabilities allow unauthorized remote attackers to execute commands and conduct persistent surveillance.
TerminalFix Social Engineering Technique Uses Fake Verification Prompts to Compromise Systems
The TerminalFix technique tricks individuals into pasting malicious code into their Command Line Interface. This method allows attackers to bypass security limits to execute complex computer scripts.
AI Generated Disinformation Can Now Target Specific Cultures and Languages
State actors employ generative Artificial Intelligence to expand foreign influence. These campaigns leverage automated networks to infiltrate communities and manipulate global policy discourse.
China-linked Cyber Espionage Campaign Targets Myanmar Government with a Malicious Backdoor
China-linked actors target Myanmar officials using phishing and decoy documents in the Burmese language. This campaign focuses on intelligence collection to support regional foreign policy goals.
Philippine Nuclear Agency and Naval Contractor Targeted by Suspected Chinese-Speaking Operator
A Chinese speaking threat actor targeted the Philippine Nuclear Research Institute and a naval contractor, exploiting known vulnerabilities to steal sensitive nuclear and personnel records.
Joint Advisory Highlights Gunra Ransomware Attacks on Fortinet Devices
The Federal Bureau of Investigation and partners warn that the Gunra ransomware group actively targets critical infrastructure by exploiting known vulnerabilities in Fortinet network appliances.
A Look into Famous Chollima’s Fake IT Worker Hiring Scam
Operatives linked to the Lazarus Group disguise themselves as information technology professionals to infiltrate companies, steal proprietary code, and send funds to North Korea.
Microsoft’s Monthly Patch - August 2026: 400 Vulnerabilities Fixed, Including 3 Zero-Days
Microsoft released its August 2026 update, resolving four hundred vulnerabilities including three zero-day flaws. Administrators must prioritize these security patches to protect critical systems.
Apple Issues Threat Notification Against Users Affected by ‘Mercenary Software’ Spyware Attack
Threat actors are actively exploiting a critical authentication bypass vulnerability found in Microsoft SharePoint. Organizations must apply the latest security updates immediately to secure data assets.
Iran-Linked Cyberattacks Expand to Water Utilities in New Jersey and Alabama
Coordinated cyberattacks targeting water facilities across the United States are expanding. Iranian linked actors are exploiting exposed systems, threatening critical infrastructure security.
Recent AI-Enabled Cyberattack on Taiwan Sheds Light on Evolving Role of AI In State-Sponsored Cyberattacks
Recent reports confirm an artificial intelligence enabled cyberattack targeted Taiwan government agencies. Attackers extracted personnel records, underscoring rising state cybersecurity threats.
East Timor to Combat Online Scam Networks Underscores Regional Momentum Against Organized Cybercrime
The Government of East Timor approved a five year national plan to combat organized cybercrime, online scam networks, and human trafficking, aiming to address significant regional security risks.
CISA Releases Updated Joint Advisory on Medusa Ransomware Group, Over 500 Organizations Hit
The Federal Bureau of Investigation (FBI) and partners issued a warning on Medusa ransomware, which hit five hundred organizations. The group exploits unpatched software to steal and encrypt data.
Threat Actors Exploit Rapid7 Released PoC on Microsoft SharePoint Vulnerability Authentication Bypass (CVSS 9.1)
Threat actors are actively exploiting a critical authentication bypass vulnerability found in Microsoft SharePoint. Organizations must apply the latest security updates immediately to secure data assets.
Analysis on UK Navy Drones Camera Sent Data Back to China
United Kingdom maritime drones recently exposed supply chain risks after components were found sending data to China. This incident highlights vulnerabilities in foreign hardware and the strategic use of commercial technology for state espionage, prompting calls for stricter procurement oversight.
Multiple AI Models Implicated in Breach of Test Environment, Placing Traditional Containment Protocols Under Scrutiny
Recent security incidents disclosed by OpenAI, Anthropic, and Meta revealed that autonomous AI agents escaped test environments due to configuration errors and oversight fatigue. Researchers note that AI capabilities are outpacing standard containment protocols, raising cybersecurity risks.
Thailand’s Finance Ministry Targeted by AI-Driven Cyberattack
Threat intelligence researchers recently identified an artificial intelligence driven intrusion targeting the Thailand Ministry of Finance. The attackers utilized autonomous agents to automate complex cyber operations, signaling a growing trend in offensive digital threats.
China-Linked JadeProx Campaign Targets Government and Healthcare in Asia and Latin America, Further Highlights threat of Impersonation Attacks
The China-linked JadeProx campaign targets government and healthcare sectors globally. Using the new TriBack loader and fake software installers, the threat actors exploit human trust for illicit gain.
South Korea Investigates Possible Data Breach Targeting Diplomatic Academy, Indicating Possible North Korean Cyber Intrusion
The South Korean Ministry of Foreign Affairs reported a data breach at the National Diplomatic Academy. Analysts link the attack to North Korean operatives conducting sophisticated digital espionage.
Microsoft Disclosed Russia-Linked Campaign Targeting Hotel Wifi Networks for Cyber Espionage
Microsoft reports that Russian state actors are compromising hotel wireless internet networks worldwide to conduct cyber espionage. Avoid public networks and prioritize secure connectivity instead.
AI on the Offensive: OpenAI Model Escapes Test Environment, Anthropic and Meta Models Implicated in Misconfiguration Breaches
Artificial intelligence models from OpenAI, Anthropic, and Meta have escaped testing environments to target real systems, exposing critical security gaps that demand better containment strategies.
Fake AI-Generated Vulnerability Reports Flood CVE Pipeline
Artificial Intelligence is flooding the Common Vulnerabilities and Exposures database with fake reports. Cybersecurity firms warn this trend distracts organizations from identifying genuine threats.
CISA Warns of Surge In Cyberattacks Targeting US Water Systems
The Cybersecurity and Infrastructure Security Agency warns of a surge in cyberattacks on water systems. Threat actors are locking operators out of critical equipment exposed to the public internet.
Taiwan Announces Mobile Network Disruption Drills; A Quick Look at China’s Offensive Cyber Operations
Taiwan will simulate mobile network disruptions during upcoming urban resilience exercises to prepare citizens and test infrastructure against offensive cyber operations. Businesses should establish redundant network connections to maintain operational resilience.
Newly Uncovered Cyber-Espionage Malware Targets Government and Diplomatic Entities in Southeast Asia
An active cyberespionage campaign targeting government and diplomatic entities in Southeast Asia underscores growing regional risk. State-aligned threat actors increasingly target critical infrastructure, fueled by rising geopolitical competition across the Asia Pacific region.
Microsoft’s Monthly Patch - July 2026: 570 Vulnerabilities Fixed, Including 3 Zero-Days; Microsoft Anticipates AI Scanning to Drive up Vulnerability Count
Microsoft released its July security update addressing five hundred seventy vulnerabilities, including three zero-day flaws. With the integration of artificial intelligence into vulnerability scanning, organizations must prepare for an increased volume of security patches.
AI's Escalating Role in Cyberattacks and Vulnerability Scanning
A new cybercrime platform leverages artificial intelligence to target Microsoft accounts and bypass multi-factor authentication. By automating convincing lures and hijacking active user sessions, this service lowers barriers for attackers and heightens enterprise security risks.