Tabung Haji Cyberattack: The 5-Step Playbook That Protects Your Savings
Key TakeawayTabung Haji detected suspicious cyber activity on October 7, suspended every customer channel on October 8 as a precaution, and filed reports with...
FortiGate Vulnerability: 14,700 Hacked Firewalls Sold as Attack Inventory
Roughly 14,700 compromised FortiGate devices were stockpiled for access, Check Point said in March 2026. This week's FortiMail and edge-CVE alerts make the standing-access economy the story every SMB and Filipino home network needs to act on.
Shai-Hulud Worm’s Third Act: Winning the Ultimate 7-Point npm Defense
Key TakeawayA malicious Shai-Hulud build of the tensorlake npm SDK — version 0.5.144, around 12,000 weekly downloads — was published at 01:12 UTC on...
The Gentlemen Ransomware: Winning the Ultimate 90/10 Firewall Deal
Table of ContentsKey TakeawayWho Are The Gentlemen Ransomware Operators?The Gentlemen Ransomware by the NumbersWhy Southeast Asia Keeps Appearing on the Leak SitesThe Weapon Stack:...
AI Agent Security: The Evaluation Perimeter Is the New Attack Surface
Table of ContentsKey Takeaway
The AP Timeline Is Really an Evaluation-Perimeter Story
What the Primary Sources Actually ConfirmAnthropic: a harness failure with real-world consequences
OpenAI: the...
The Scam Call Has a Weak Link: How ASEAN Plans to Trace, Block, and...
ASEAN anti-scam policy is moving beyond national warnings. The region now has a practical blueprint for controlling scam calls and SMS, sharing intelligence between...
AI Scam Economy: 7 Layers of the Fraud Business Behind Modern Scams
Table of ContentsKey Takeaway
The Scam Is No Longer the Whole Product
The 7 Layers of the AI Scam Economy1. Target intelligence and stolen data
2. Identity...
Integrity Technology Group: 10-Agency Advisory Names Hack Supplier
On October 8, 2026, ten government agencies named a China-based contractor, Integrity Technology Group, as the supplier behind years of scanning, intrusion, and email theft — and the DOJ seized its tooling domains the same day. The lesson that outlasts the news cycle is the supplier business model itself.
Cyber Watch #011: One Hundred Days After the SMS OTP Deadline — What Changed,...
SMS OTP is gone from PH banking: the 100-day aftermath of BSP Circular 1213 — the AFASA liability flip, the push-fatigue scam, your 5-check audit.
Philippines Ransomware 2026: AI Now Writes the Attacks — the Five Moves That Still...
Key Takeaway🔥 The doubling: Philippines ransomware claims more than doubled in 2026 — and the newest Philippines ransomware wave is not generic: attackers are...