> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
Local tech, fintech, e-wallets, and the MY ecosystem. — 21 transmissions
A customer saw RM1,000,315,879 land in his Aeon Bank account. Here is what the bank said, what the law says, and the guardrails a payout system needs.
CTOS confirmed a limited subset of consumer data was accessed; password-reset notices are now reaching account holders. Here is what it means.
Tabung Haji suspended all services after a cyberattack, restored them within days and says savings are safe. What depositors should know and check.
At Pwn2Own Ireland, three teams broke into a fully patched Google Pixel 10 over the network on the same day, splitting $562,500 in prizes.
Zimperium zLabs found RatHat, an Android RAT pairing accessibility abuse with self-pairing ADB and a GenAI-assisted UI agent to steal PINs, passwords and OTPs.
Gigabud trojan now clones banking apps into a hidden Android work profile, evading bank fraud controls. Indonesia saw nearly $1M in losses.
Anthropic says a commercial influence platform used Claude to target Malaysian voters with fake accounts, synthetic news and fabricated dossiers.
GreyNoise tracked AI agents exploiting PaperCut flaws, hitting 440+ instances across 395 organizations in 48 countries. Campaign mechanics and patch guidance.
Apple's first foldable is here. iPhone Duo pairs a 5.4-inch outer display with a 7.6-inch inner display, runs the A20 Pro chip, and starts at RM9,499.
Misi Rakyat says it was hit by a malicious cyberattack. What the Sep 9 statement confirms, what it leaves open, and how it compares to the Sep 8 leak analysis.
Malaysia's amended PDPA creates real engineering duties: breach notification, DPO rules, processor security, cross-border transfers. A practical build guide.
Samples allegedly expose Misi Rakyat customer, rider and vendor data — location, KYC, config. Here is what can actually be established.