Fixics Solutions (s) Pte Ltd

29/04/2026

Beware.

https://therecord.media/microsoft-teams-hackers-mandiant

Hackers are impersonating Microsoft Teams help desk workers to trick victims into installing data-stealing malware, researchers found.

09/04/2026

Very technical but do u have the “roadblocks”?

https://blog.talosintelligence.com/qilin-edr-killer/

This blog provides an in-depth analysis of the malicious “msimg32.dll” used in Qilin ransomware attacks, which is a multi-stage infection chain targeting EDR systems.

04/04/2026

It is mandatory.

https://www.pcworld.com/article/3106357/microsoft-will-force-update-pcs-to-windows-11-25h2-you-cant-opt-out.html #

The reason? For security purposes. The "intelligent rollout" of the mandatory update is being conducted via machine learning.

20/03/2026

A very good guideline.

https://www.cisa.gov/news-events/alerts/2026/03/18/cisa-urges-endpoint-management-system-hardening-after-cyberattack-against-us-organization

Secure .gov websites use HTTPS A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

04/03/2026

Android folks

https://source.android.com/docs/security/bulletin/2026/2026-03-01

Effective in 2026, to align with our trunk stable development model and ensure platform stability for the ecosystem, we will publish source code to AOSP in Q2 and Q4. For building and contributing to AOSP, we recommend utilizing android-latest-release instead of aosp-main. The android-latest-release...

26/02/2026

SG SMEs, are you ready ?

Leaked documents suggest 255 Singapore firms linked to critical infrastructure hit.

https://www.youtube.com/watch?v=sXlowndwfHA

255 Singapore organisations linked to critical information infrastructure are said to have been compromised, according to documents leaked onto the dark web....

05/02/2026

Needed.

https://www.bleepingcomputer.com/news/security/hackers-compromise-nginx-servers-to-redirect-user-traffic/amp/

A threat actor is compromising NGINX servers in a campaign that hijacks user traffic and reroutes it through the attacker's backend infrastructure.

04/02/2026

Beware.skills.

https://www.bleepingcomputer.com/news/security/malicious-moltbot-skills-used-to-push-password-stealing-malware/

More than 230 malicious packages for the personal AI assistant OpenClaw (formerly known as Moltbot and ClawdBot) have been published in less than a week on the tool's official registry and on GitHub.

23/01/2026

Icymi. Patch.

https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios

Fortinet is proactively communicating to customers to share analysis regarding single sign-on (SSO) abuse on FortiOS.…

17/01/2026

Think security.Always.

https://www.darkreading.com/remote-workforce/ai-vulnerability-servicenow

The ITSM giant tacked agentic AI onto a largely unguarded legacy chatbot, exposing customers' data and connected systems.

08/01/2026

Year 2026, new tactics , extra defence.

#2026