AI and Tech Summaries - AI Weekly Malaysia

Summaries

Short AI and tech summaries with source links, signal scores, and why each update matters for builders, founders, and Malaysian tech workers.

Window

Today Yesterday This week Last week This month Last month All time

Showing 1-2 of 2 results

Date	Provider	Score	Summary
01 Oct 2026, 1:21 PM	The Hacker News	4.0	Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft Bitget confirmed that the $387.5 million drained from its hot and warm wallets on September 24, 2026 was enabled by a zero-day in unnamed third-party security products, per a SlowMist investigation. Attackers used the flaw to read a database password from an environment variable, run hidden scripts on at least three nodes starting August 31, 2026, obtain high-level internal credentials, and issue withdrawal commands that bypassed existing risk controls. Funds were taken across 11 blockchains and 13 assets, and only about $632,700 was frozen by Circle, Tether, and NEAR Intents. Why: If you or a Malaysian client keep operating funds on a centralized exchange or rely on crypto rails for payouts, the concrete number here is the recovery rate: roughly $632,700 frozen against $387.5 million taken, under 0.2%. The breach did not come from Bitget's own code — it came from a third-party security product that had database credentials reachable as an environment variable — so the decision that changes is how you vet and segment vendors that sit inside your credential path, and how much you leave in hot wallets versus cold. security crypto supply-chain zero-day incident-response
02 Oct 2026, 1:49 PM	The Hacker News	2.5	Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes CISA added CVE-2026-104286 (CVSS 9.8), a path-traversal (CWE-22) plus NULL-byte (CWE-158) flaw in Fortinet FortiMail, to its Known Exploited Vulnerabilities catalog on October 1, 2026 after confirming active exploitation. Crafted HTTP/HTTPS requests let unauthenticated attackers write arbitrary files on the underlying system; affected branches are 8.0.0-8.0.1, 7.6.0-7.6.6, 7.4.0-7.4.8, and 7.2.0-7.2.9, with fixes not yet shipped for several of them. Fortinet's listed indicators of compromise include two IPs (79.141.169.187, 45.129.0.192) and newly added files such as /data/etc/ld.so.preload and /data/bin/webconsole. Why: This is only actionable if you or a client actually run a FortiMail gateway, and the operational catch is that some branches have no patch yet: 7.2.x must move to the 7.4 branch, while 8.0.x, 7.6.x, and 7.4.x are told to wait for 8.0.2, 7.6.7, and 7.4.9 respectively. Until then the documented workarounds are disabling the IBE feature via 'config system encryption ibe / set status disable' and removing the management interface from internet exposure. The added /data/etc/ld.so.preload file is a persistence mechanism worth grepping for on any affected appliance, and FCEB agencies were given a patch deadline of October 4, 2026. Everyone else in this audience can skip it. security vulnerability zero-day fortinet infrastructure

Date

Provider

Score

Summary

01 Oct 2026, 1:21 PM

The Hacker News

4.0

Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft

Bitget confirmed that the $387.5 million drained from its hot and warm wallets on September 24, 2026 was enabled by a zero-day in unnamed third-party security products, per a SlowMist investigation. Attackers used the flaw to read a database password from an environment variable, run hidden scripts on at least three nodes starting August 31, 2026, obtain high-level internal credentials, and issue withdrawal commands that bypassed existing risk controls. Funds were taken across 11 blockchains and 13 assets, and only about $632,700 was frozen by Circle, Tether, and NEAR Intents.

Why: If you or a Malaysian client keep operating funds on a centralized exchange or rely on crypto rails for payouts, the concrete number here is the recovery rate: roughly $632,700 frozen against $387.5 million taken, under 0.2%. The breach did not come from Bitget's own code — it came from a third-party security product that had database credentials reachable as an environment variable — so the decision that changes is how you vet and segment vendors that sit inside your credential path, and how much you leave in hot wallets versus cold.

02 Oct 2026, 1:49 PM

The Hacker News

2.5

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

CISA added CVE-2026-104286 (CVSS 9.8), a path-traversal (CWE-22) plus NULL-byte (CWE-158) flaw in Fortinet FortiMail, to its Known Exploited Vulnerabilities catalog on October 1, 2026 after confirming active exploitation. Crafted HTTP/HTTPS requests let unauthenticated attackers write arbitrary files on the underlying system; affected branches are 8.0.0-8.0.1, 7.6.0-7.6.6, 7.4.0-7.4.8, and 7.2.0-7.2.9, with fixes not yet shipped for several of them. Fortinet's listed indicators of compromise include two IPs (79.141.169.187, 45.129.0.192) and newly added files such as /data/etc/ld.so.preload and /data/bin/webconsole.

Why: This is only actionable if you or a client actually run a FortiMail gateway, and the operational catch is that some branches have no patch yet: 7.2.x must move to the 7.4 branch, while 8.0.x, 7.6.x, and 7.4.x are told to wait for 8.0.2, 7.6.7, and 7.4.9 respectively. Until then the documented workarounds are disabling the IBE feature via 'config system encryption ibe / set status disable' and removing the management interface from internet exposure. The added /data/etc/ld.so.preload file is a persistence mechanism worth grepping for on any affected appliance, and FCEB agencies were given a patch deadline of October 4, 2026. Everyone else in this audience can skip it.

security vulnerability zero-day fortinet infrastructure