Search: “infrastructure”

4 stories in the last 24h

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Threat actor 15 Industry 14 Exploit / PoC 9 Policy & legal 7 Data breach 6 AI industry 6 Advisory 5 AI safety & security 5 Malware 5 Phishing & fraud 5 Vulnerability 4 AI policy 4 AI research 2 Ransomware 2

SeverityAll critical 9 high 20 medium 19 low 4 info 39

Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026

Singapore, Malaysia, and Thailand all tightened cyber compliance in 2026, mandating continuous monitoring and rapid incident reporting for critical infrastructure.

Singapore's CSA issued the Cybersecurity Code of Practice 2026 for Critical Information Infrastructure on 29 July 2026, adding board cyber-resilience duties, annual training, and controls on Interconnected Systems, with most obligations effective by 29 July 2027. Malaysia's Cyber Security Act 2024 requires NACSA-licensed providers, audits, and fast incident notification, with fines up to RM500,000 and up to ten years' imprisonment. Thailand's NCSA cloud security standard has been enforced since 10 September 2026, with a Website Security Standard effective 16 September 2026. The vendor article argues detection speed has become a compliance metric driving demand for real-time threat intelligence.

Cyble09:57 UTC · 4h agoPolicy & legal

US takes down NightmareStresser DDoS-for-hire platform

FBI seized NightmareStresser, a DDoS-for-hire platform with 566,000 users and servers capable of 200 Gbps attacks, under Operation PowerOFF.

US law enforcement seized the nightmare-stresser[.]com and nightmarestresser[.]org domains used by the DDoS-for-hire service. Searchlight Cyber reported in 2023 that NightmareStresser had over 566,000 registered users and 52 dedicated servers launching attacks of up to 200 Gbps against Layer 4 and Layer 7 targets. The FBI said the service was used for hundreds of thousands of actual or attempted DDoS attacks since 2022. The action continues Operation PowerOFF, which began in December 2018 and previously took down DigitalStress, Dstat.cc and dozens of booter domains.

BleepingComputerupdated 13:37 UTC · 24m agofirst 11:33 UTC · 2h agoPolicy & legal 5 sources

Ofcom discovers issuing Online Safety Act fines is easier than collecting them

Ofcom says most Online Safety Act fines totaling over £7 million remain unpaid as platforms structure businesses to evade collection.

Ofcom director of enforcement Suzanne Cater told the House of Lords that the majority of fines issued under the UK Online Safety Act remain uncollected despite over £7 million in penalties on 11 providers. The regulator's largest fine was £1.4 million against 8579 LLC in February. Ofcom is running six enforcement programs and 40 formal investigations covering more than 100 services, including Telegram, TikTok and X, and is working with the UK government to strengthen its enforcement powers.

The Register · Security10:08 UTC · 3h agoPolicy & legal

CISA decides weekly vulnerability bulletin isn't necessary anymore

CISA will discontinue its weekly vulnerability bulletin on September 28, pushing users toward KEV, alerts, and CVE data under risk-based prioritization.

CISA announced its weekly vulnerability bulletin will stop on Monday, September 28, as part of a shift from static CVSS severity scores to a modern, risk-based approach detailed in a June Binding Operational Directive. The directive prioritizes federal remediation based on exposure, exploitation evidence, control granted by exploitation, and whether exploitation can be automated. CISA directs bulletin subscribers to rely instead on its Known Exploited Vulnerabilities catalog, cybersecurity alerts and advisories, and the CVE catalog, requiring users to enable those subscriptions in GovDelivery or Granicus to avoid missing critical notices.

The Register · SecuritySep 16, 20:33 UTC · 17h agoPolicy & legal