Windows 10 End of Support: Digitpol Offers Processor Upgrade Service to Enable Windows 11 on...
The Growing Case for Cyber Resilience in Hong Kong Hong Kong, as a major international...
The Privacy Commissioner’s Office has Completed Compliance Checks on 60 Organisations to Ensure AI Security With the...
AI Threats to Wi-Fi Routers As artificial intelligence (AI) continues to evolve, so does its...
Protection of Critical Infrastructures (Computer Systems) Hong Kong Bill March 2025 In March 2025, Hong...
The Rise of AI-Enhanced Cyber Threats Artificial Intelligence is reshaping nearly every industry – but...
What Is Security-as-Code? The days of bolted-on security are numbered. As DevOps becomes the default...
How to identify a potential fraudulent domain in a Business Email Compromise (BEC) scam Identifying...
Cyber Alerts
- Fake Solidity VSCode extension on Open VSX backdoors developers November 3, 2025A remote access trojan dubbed SleepyDuck, and disguised as the well-known Solidity extension in the Open
- 700+ Malicious Android Apps Abusing NFC Relay to Exfiltrate Banking Login Credentials October 30, 2025A sophisticated malware campaign exploiting Near Field Communication technology on Android devices has expanded dramatically since its emergence in April
- This security hole can crash billions of Chromium browsers, and Google hasn't patched it yet October 29, 2025Edge, Atlas, Brave among those affected Exclusive A critical, currently unpatched bug in Chromium'
- Ransomware profits drop as victims stop paying hackers October 27, 2025The number of victims paying ransomware threat actors has reached a new low, with just 23% of the
- Hackers Weaponizing Telegram Messenger with Dangerous Android Malware to Gain Full System Control October 25, 2025A sophisticated backdoor named Android.Backdoor.Baohuo.1.origin has been discovered in maliciously modified versions
- 706,000+ BIND 9 Resolver Instances Vulnerable to Cache Poisoning Exposed Online – PoC Released October 25, 2025A high-severity vulnerability in BIND 9 resolvers has been disclosed, potentially allowing attackers to poison caches and
- Toys “R” Us Canada warns customers' info leaked in data breach October 23, 2025Toys "R" Us Canada has sent notices of a data breach to customers informing them of a security
- Critical Vulnerability in MCP Server Platform Exposes 3,000+ Servers and Thousands of API Keys October 22, 2025A critical vulnerability in Smithery.ai, a popular registry for Model Context Protocol (MCP) servers.
- Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among Targets October 20, 2025The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws to
- TikTok videos continue to push infostealers in ClickFix attacks October 19, 2025Cybercriminals are using TikTok videos disguised as free activation guides for popular software like Windows, Spotify, and Netflix
- Malicious crypto-stealing VSCode extensions resurface on OpenVSX October 14, 2025A threat actor called TigerJack is constantly targeting developers with malicious extensions published on Microsoft's Visual Code (
- Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts October 10, 2025Cybersecurity company Huntress on Friday warned of "widespread compromise" of SonicWall SSL VPN devices to access multiple customer
- New Android spyware ClayRat imitates WhatsApp, TikTok, YouTube October 9, 2025A new Android spyware called ClayRat is luring potential victims by posing as popular apps and services like WhatsApp,
- 7-Zip Vulnerabilities Let Attackers Execute Arbitrary Code Remotely October 9, 2025Two high-severity vulnerabilities have been discovered in the popular open-source file archiver, 7-Zip
- Hackers exploited Zimbra flaw as zero-day using iCalendar files October 4, 2025Researchers monitoring for larger .ICS calendar attachments found that a flaw in Zimbra Collaboration Suite (ZCS)
- Cybercrims claim raid on 28,000 Red Hat repos, say they have sensitive customer files October 4, 2025A hacking crew claims to have broken into Red Hat's private GitLab repositories, exfiltrating some 570GB of
- VMware Tools and Aria Operations Vulnerabilities Let Attackers Escalate Privileges to Root October 1, 2025VMware has released an advisory to address three high-severity vulnerabilities in VMware Aria Operations, VMware Tools,
- WhatsApp 0-Click Vulnerability Exploited Using Malicious DNG File September 28, 2025WhatsApp -click remote code execution (RCE) vulnerability affecting Apple’s iOS, macOS, and iPadOS
- Unitree 機械人爆「殭屍網絡」漏洞 可被黑客遙距控制、自動感染同類 September 28, 2025中國機械人製造商宇樹科技 (Unitree) 旗下多款機
- Akira ransomware breaching MFA-protected SonicWall VPN accounts September 28, 2025Ongoing Akira ransomware attacks targeting SonicWall SSL VPN devices continue to evolve, with the threat actors found to be