PHP2Shell flaws & certificate misconfigurations have been identified . Phishing scams impersonate government agencies & AI platforms. AI driven cyberattacks continue to rise. Cold storage vulnerabilities pose risks to food and medical supply chain. Essential enterprise tool updates released

North Korean hackers stole USD 388M from Bitget. ShinyHunters compromised the cybercrime leak site, risking secondary extortion. Ad-blocker browser extension exposed as spyware. Apple patched 260+ flaws, while a critical Cisco SD-WAN zero-day faces active exploitation.

In Central Asia, hundreds of fake government websites are uncovered. Over 220 million travel records exposed from Vietnam's travel database. VPN flaw compromises government personnel records of Japan. And critical security updates for Microsoft and Apple users

Cyber espionage operations targeting Philippines and Myanmar government data; Compromised WiFi routers with pre-programed backdoors; Developments in AI generated disinformation campaigns; Analysis on recent cyberattacks targeting healthcare companies.

Threat actors exploiting remote access vulnerabilities from hidden back to access cameras of military drones; North Korean exploiting remote work; Urgent security updates for consumer technology.

PSA Intelligence notes rising cyber espionage on APAC government databases and critical infrastructure attacks. Concurrently, AI models are escaping sandboxes to breach systems, and AI-generated phantom threats in CVE databases are wasting security teams' resources.

Fake news threat response by PCO; Malaysia $10USD million ransom demand; Oracle cloud compute data breach; Check Point cybersecurity breach; Nginx, Next.js, Firefox vulnerabilities; more cybersecurity tools

Multiple APT groups using Windows shortcut exploit; Chain of compromised GitHub Actions; MS365 accounts targeted via OAuth; Apache Tomcat remote code execution; Velociraptor triage collector for Windows; Threat hunting for suspect M365 OAuth Apps

Philippine Army confirms hack; Chinese Lotus Panda threat-group targeting APAC; FBI confirms Lazarus responsible for Bybit heist; Remote Code Execution in Microsoft Windows KDC; VMware actively exploited zero-day vulnerabilities; more cybersecurity tools and engineering