AI and Tech Summaries - AI Weekly Malaysia

Summaries

Short AI and tech summaries with source links, signal scores, and why each update matters for builders, founders, and Malaysian tech workers.

Window

Today Yesterday This week Last week This month Last month All time

Showing 1-1 of 1 results

Date	Provider	Score	Summary
12 Aug 2026, 10:32 PM	The Register	5.5	Uber Freight keeps on trucking after extortion crew breaks in Uber Freight is investigating a data breach claimed by the Helix extortion group, which says it stole nearly 1 million files from mailboxes, OneDrive accounts, and accounts receivable systems. Uber Freight says operations were never disrupted and the incident was contained. Helix is linked by Google Threat Intelligence to a cluster (UNC6671) that uses vishing—posing as IT helpdesk staff—to run device code phishing against employees, then siphons data from Microsoft 365 and Okta. Why: If your org uses Okta or Microsoft 365, this is a concrete reminder that device code phishing via fake IT helpdesk calls is an active, working attack path—not a theoretical one. Train staff to reject unsolicited device code prompts and verify any 'mandatory security migration' call through an internal channel before entering codes. security okta microsoft-365 phishing incident

Date

Provider

Score

Summary

12 Aug 2026, 10:32 PM

The Register

5.5

Uber Freight keeps on trucking after extortion crew breaks in

Uber Freight is investigating a data breach claimed by the Helix extortion group, which says it stole nearly 1 million files from mailboxes, OneDrive accounts, and accounts receivable systems. Uber Freight says operations were never disrupted and the incident was contained. Helix is linked by Google Threat Intelligence to a cluster (UNC6671) that uses vishing—posing as IT helpdesk staff—to run device code phishing against employees, then siphons data from Microsoft 365 and Okta.

Why: If your org uses Okta or Microsoft 365, this is a concrete reminder that device code phishing via fake IT helpdesk calls is an active, working attack path—not a theoretical one. Train staff to reject unsolicited device code prompts and verify any 'mandatory security migration' call through an internal channel before entering codes.