Cybersecurity news and exploited vulnerabilities, for Malaysia.
Breaches, ransomware, scams and patch-now flaws, written up from the original reports, plus a live mirror of the CISA list of vulnerabilities attackers are already using.
- kev total
- 1768
- added 30d
- 34
- ransomware
- 361
- stories
- 3
Latest threats
- [INFO] Hackers Use Fake Events to Steal Microsoft and Google Accounts news/fake-events-steal-microsoft-google-accounts.md
- [MED] DigiCert Breach Exposes Customer Information and Identity Documents news/digicert-data-breach-exposes-customer-documents.md
- [HIGH] OpenSSH Patches Authentication Bypass on Alpine Linux news/openssh-patches-alpine-linux-bypass.md
Latest KEV additions
- CVE-2024-27834
Apple / Multiple Products
Apple Multiple Products Improper Authentication Vulnerability
- CVE-2026-119977
WordPress / WordPress Core
WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
- CVE-2026-111357
Ivanti / Connect Secure
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
- CVE-2026-118527
Ivanti / Connect Secure
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
- CVE-2026-76418
Cisco / Secure Firewall ASA Software and Cisco Secure FTD Software
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
- CVE-2026-97229
GitLab / Community Edition and Enterprise Edition
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
- CVE-2026-41709
Broadcom / VMware ESX
Broadcom VMWare ESX Insufficient Logging Vulnerability
- CVE-2026-46300
Linux / Kernel
Linux Kernel Missing Initialization of a Variable Vulnerability
- CVE-2026-111497
Google / Brotli
Google Brotli Unchecked Return Value Vulnerability
- CVE-2026-48356
Adobe / Commerce and Magento
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability