Threat actors exploiting remote access vulnerabilities from hidden back to access cameras of military drones; North Korean exploiting remote work; Urgent security updates for consumer technology.

PSA Intelligence notes rising cyber espionage on APAC government databases and critical infrastructure attacks. Concurrently, AI models are escaping sandboxes to breach systems, and AI-generated phantom threats in CVE databases are wasting security teams' resources.

Fake news threat response by PCO; Malaysia $10USD million ransom demand; Oracle cloud compute data breach; Check Point cybersecurity breach; Nginx, Next.js, Firefox vulnerabilities; more cybersecurity tools

Multiple APT groups using Windows shortcut exploit; Chain of compromised GitHub Actions; MS365 accounts targeted via OAuth; Apache Tomcat remote code execution; Velociraptor triage collector for Windows; Threat hunting for suspect M365 OAuth Apps

Philippine Army confirms hack; Chinese Lotus Panda threat-group targeting APAC; FBI confirms Lazarus responsible for Bybit heist; Remote Code Execution in Microsoft Windows KDC; VMware actively exploited zero-day vulnerabilities; more cybersecurity tools and engineering

7,000 people rescued from scam-centres; AI-powered threat detection and continuous scanning; Ghidra, AWS-Key-Hunter, AI ASCII-Smuggling-Hidden-Prompt-Injection; China sponsored Salt Typhoon threat actors continue to breach organizations; Threat actors tricking users linking Signal

AI technologies; Malicious VPN installers; Fake wedding invites and Android malware; Thai arrest in $182m romance scam; Cracked and Nulled forums seized; Juniper backdoors in the wild; SonicWall critical vulnerability

Claimed NBI data compromise; Chinese national for spying on critical infrastructure; 15,000 FortiGate VPN credentials leaked; CISA playbook for MS365 logs; CISA bad product practices; Another Fortinet authentication bypass vulnerability