29.9 C
Kuala Lumpur
Sunday, December 14, 2025
Facebook Linkedin Twitter
Home Blog

Seven critical vulnerabilities open ChatGPT to data theft and hijacking

By
News Hub Asia Reporter
-

Tenable, the exposure management company, discovered seven vulnerabilities and attack techniques during testing of OpenAI’s ChatGPT-4o, several of which were later found to persist in ChatGPT-5. Collectively known as HackedGPT, these flaws expose users to privacy risks by bypassing built-in safety mechanisms. While OpenAI has remediated some of the issues identified, others had not been addressed at the time of publication, leaving certain exposure paths open. If exploited, they could allow attackers to secretly steal personal data, including stored chats and memories.

The vulnerabilities reveal a new class of AI attack called indirect prompt injection, where hidden instructions in external websites or comments can trick the model into performing unauthorised actions. These flaws affect ChatGPT’s web browsing and memory features, which process live internet data and store user information, creating opportunities for manipulation and data exposure.

Photo for illustration purposes only. | Photo by Boitumelo/Unsplash/NHA File Photo

Tenable researchers show that these attacks can occur silently in two ways: “0-click” attacks, where simply asking ChatGPT a question triggers the compromise, and “1-click” attacks, where clicking a malicious link activates hidden commands. Even more concerning is a technique called Persistent Memory Injection, where harmful instructions are saved in ChatGPT’s long-term memory and remain active after the user closes the app. This lets attackers plant lasting threats that can expose private information across future sessions until removed. Together, these flaws show how attackers could bypass OpenAI’s safeguards and access users’ private histories.

“HackedGPT exposes a fundamental weakness in how large language models judge what information to trust,” said Moshe Bernstein, Senior Research Engineer at Tenable. “Individually, these flaws seem small — but together they form a complete attack chain, from injection and evasion to data theft and persistence. It shows that AI systems aren’t just potential targets; they can be turned into attack tools that silently harvest information from everyday chats or browsing.”

HackedGPT: the seven vulnerabilities and attack techniques identified by Tenable research

  1. Indirect prompt injection via trusted sites
    Attackers hide commands inside legitimate-looking online content such as blog comments or public posts. When ChatGPT browses that content, it unknowingly follows those hidden instructions. In short, ChatGPT can be tricked into doing what an attacker tells it to, just by reading a compromised page.
  1. 0-click indirect prompt injection in search context
    A user doesn’t have to click or do anything special to be exposed. When ChatGPT searches the web for answers, it can encounter a page with hidden malicious code. Simply asking a question could cause the model to follow those instructions and leak private data — what researchers call a single-prompt compromise.
  1. Prompt injection via 1-click

A single click can trigger an attack. Hidden commands embedded in seemingly harmless links, like https://chatgpt.com/?q={Prompt}, can make ChatGPT execute malicious actions without realising it. One click is enough to let an attacker take control of your chat.

  1. Safety mechanism bypass
    ChatGPT normally validates links and blocks unsafe sites. Attackers bypass that by using trusted wrapper URLs (for example, Bing’s bing.com/ck/a?…) which hide the real destination. ChatGPT trusts the wrapper, displays the apparently safe link, and can be led to a malicious site.
  2. Conversation injection
    ChatGPT uses two systems — SearchGPT for browsing and ChatGPT for conversation. Attackers can use SearchGPT to insert hidden instructions that ChatGPT later reads as part of the conversation. In effect, the AI ends up “prompt-injecting itself,” following commands the user never wrote.
  3. Malicious content hiding
    A formatting bug allows attackers to conceal malicious instructions inside code or markdown text. The user sees a clean message, but ChatGPT still reads and executes the hidden content.
  4. Persistent memory injection
    ChatGPT’s memory feature stores past interactions. Attackers can plant malicious instructions in that long-term memory, causing the model to repeat those commands across sessions and continuously leak private data until the memory is cleared.

Potential impact of exploiting HackedGPT

Hundreds of millions of people use ChatGPT daily for business, research, and personal communication. If exploited, these flaws could:

  • Insert hidden commands into conversations or long-term memories.
  • Steal sensitive data from chat histories or connected services such as Google Drive or Gmail.
  • Exfiltrate information through browsing and web integrations.
  • Manipulate responses to spread misinformation or influence users.

Tenable Research conducted its investigation under responsible disclosure practices. OpenAI has remediated some of the vulnerabilities identified, but several remain active in ChatGPT-5 or had not been addressed at the time of publication, leaving certain exposure paths open.

Tenable advises AI vendors to harden defences against prompt injection by verifying that safety mechanisms such as url_safe work as intended and by isolating browsing, search, and memory features to prevent cross-context attacks.

Recommendations for security teams

Tenable advises security professionals to:

  • Treat AI tools as live attack surfaces, not passive assistants.
  • Audit and monitor AI integrations for manipulation or data leakage.
  • Investigate unusual requests or outputs that could signal prompt injection.
  • Test and reinforce defences against injection and exfiltration paths.
  • Establish governance and data-classification controls for AI use.

“This research isn’t just about exposing flaws, it’s about changing how we secure AI,” Bernstein added. “People and organisations alike need to assume that AI tools can be manipulated and design controls accordingly. That means governance, data safeguards, and continuous testing to make sure these systems work for us, not against us.”

Source: Tenable (Press Release)

    The Mirage of Marketing

    By
    News Hub Asia Reporter
    -

    Unmasking Exaggerated Claims in Property Development – (a report from Gunaprasath Bupalan of Emjay Communications)  

    The public’s appetite for aspirational living has made property development a sphere rife with seductive, yet often misleading, narratives. From glossy brochures to virtual reality tours, the marketing of a new project is less about the brick-and-mortar reality and more about selling a dream.

    For the serious investor and the hopeful homeowner, the ability to discern genuine value from the illusion is their most potent defence against the disappointment of their decision, which is sadly often the case. This endemic issue is rooted in what property strategists term the “short-term way” to business success. This philosophy is fundamentally one of expediency, of the developer focusing on securing immediate capital and achieving quick sales with less regard for the project’s long-term utility, sustainability and value.

    In his talk to REHDA Institute, Peter Chan elaborated that “short-term way” depended on the leveraging of “Connections,” embracing “Use of short cuts,” and, most detrimentally, relying on “Exaggerated marketing” and deliberate “Misrepresentations”. The immediate success generated by this approach—rapid sell-outs and high initial returns—can easily influence the developer and blind the trusting purchaser in his decision.

    Peter Chan

    The exaggeration used in the short-term approach is rarely crude; it is creative and often a nuanced manipulation of facts. Developers may utilise selective images or photography to eliminate views of encroaching developments, overstate the future impact of planned infrastructure, or promise luxurious facilities that are either scaled back or never fully delivered due to cost constraints. The buyer commits to a multi-year investment based on a fleeting vision, only to find the reality compromised by delays, downgrades, or outright omissions.

    A perpetual point of contention lies in the delivery of common amenities. When a development faces hopeful expectations or unreasonable demands, the developer is often placed in a defensive position. Although frequently misled into complicated situations, the decisive and conclusive determinant must be what is detailed in the Sales and Purchase Agreement (SPA). What is provided in the SPA is the indisputable requirement of what has been contractually accepted, agreed and binding on both the developer and the purchaser. We would highlight that Peter Chan and The Haven had bequeathed to the development way beyond what was contractual and listed in the SPA. When the development was completed, he revealed to the purchasers in an AGM the list of additional facilities—which were not contractually stipulated in the original Sale and Purchase Agreement (SPA) amounting to RM 36 million.

    Every promise made to the parcel owners was not only met but exceeded.

    The condition of this world is indeed exposed when one of the purchasers chose to find fault and claimed at a Tribunal that a tennis court had been promised and not provided for. This was indeed untenable and shocking as the decision and approval to build and pay for the tennis court was proposed by the participants themselves in the AGM and was voted on and approved. Appallingly, 8 of her collaborators took up their case in the High Court on the same claim. As the burden of proof and substantiation borne by the consumers is illogical, heavy and onerous, their intention of initiating the claim must be suspicious.

    As the talk delivered, Peter Chan presented the viable counter to this endemic practice as the “long term way” to development, a strategy based on “Effort, Commitment, Creativity, Perseverance and Truth.” He emphasized that truth is not a negotiable ethical addendum; it is a foundation to life and to real success – success in proper business. When a project is built on transparent, verifiable facts, the marketing naturally becomes a sincere reflection of its quality, design, and assured durability. This consistency ensures that buyer expectations are not just met at the point of handover, but maintained over the property’s lifecycle. Such was the delivery of The Haven to its purchasers. Every promise made to the parcel owners was not only met but exceeded. It is little wonder for one renowned publication to have pronounced Peter, the legatee, “Developer Extraordinaire”.

      Palo Alto Networks and Cyberlite partner to launch AI safety in the classroom toolkit

      By
      News Hub Asia Reporter
      -

      Palo Alto Networks, the global cybersecurity leader, and Cyberlite, a specialised cyber safety and AI education provider, today announced the launch of the AI Safety in the Classroom Toolkit. This groundbreaking resource is a crucial extension of Palo Alto Networks’ mission to protect our digital way of life and sets a new standard for corporate commitment to community digital safety.

      Photo by Palo Alto Networks/NHA File Photo

      The speed and scale at which AI is accelerating threats necessitates a fundamental shift in education. Research from Palo Alto Networks’ Unit 42 underscores this urgency, revealing how AI is rapidly transforming the threat landscape. For example, the Unit 42 Global Incident Response Report consistently identifies social engineering as a top initial access vector, and threat actors are increasingly using generative AI to create highly sophisticated, personalised attacks like convincing deepfakes. Equipping students to recognise and resist these advanced, AI-driven manipulations is critical to protecting the “human factor” in security.

      This toolkit directly addresses that urgent need. Palo Alto Networks is deeply committed to driving social impact through cybersecurity education, supporting students with the skills they need to protect their digital future and become good digital citizens. The AI Safety in the Classroom Toolkit, now available in English and Bahasa Indonesia, builds on the successful, long-standing partnership between Palo Alto Networks and Cyberlite, which has already distributed over 100,000 “Ready, Get Set, Connect!” cybersafety workbooks to schools across the Asia Pacific region.

      “Our partnership with Palo Alto Networks represents a significant leap forward in our shared mission to empower the next generation with the skills to navigate the complexities of the digital world,” said Michelle Yao, Co-Founder of Cyberlite. “The AI Safety in the Classroom Toolkit is a direct response to the urgent need for practical, accessible resources that empower educators in the classroom, teaching students the critical thinking skills needed to be safe and ethical AI users. This collaboration reinforces our belief that cyber safety is a shared responsibility, and by working together, we can build a more secure digital future for all.”

      “The AI Safety in the Classroom Toolkit is designed to empower educators, parents, and community instructors who are not cybersecurity or AI experts,” said Lisa Sim, Vice President, Marketing, Asia-Pacific and Japan and, Director, CyberFit Nation at Palo Alto Networks. “The materials are intentionally easy to use, making it simple for them to become ‘rock stars’ in lesson delivery and integrate these vital learning resources into the education curriculum.”

      The toolkit’s 30-minute modular lessons are engineered to build critical thinking skills, helping students become informed, ethical, and safe AI users. The hands-on, practical lessons cover real-world risks, including:

      • The foundations of generative AI and prompt engineering.
      • Recognising bias.
      • Detecting deepfakes and digital clones.
      • Exploring how recommendation engines impact privacy and personalisation.

      Source: Palo Alto Networks (Press Release)

        Mastercard introduces first-ever threat intelligence solution to combat payment fraud at scale

        By
        News Hub Asia Reporter
        -

        Mastercard announced the launch of Mastercard Threat Intelligence, the first threat intelligence offering applied to payments at scale. The solution combines Mastercard’s global fraud insights with cyber threat intelligence from Recorded Future, empowering financial institutions across Asia-Pacific (APAC) to detect, prevent and respond to cyber-enabled fraud with greater speed and accuracy.

        Photo for illustration purposes only | Photo by Vitaly Gariev/Unsplash/NHA File Photo

        The intelligence gap between cyber and fraud teams remains critical. Sixty percent of global fraud and risk executives are notified of cyber data breaches only after fraud losses begin, a figure that rises to 67 per cent across APAC. Similarly, 83 per cent of APAC financial institution leaders report frustration with the lack of real-time cyber threat intelligence (CTI) integration.

        “Payment fraud is no longer just a payment system issue — it’s a cybersecurity challenge that directly impacts an organisation’s bottom line,” Matthew Driver, executive vice president of Services, Asia Pacific at Mastercard said. “Mastercard Threat Intelligence bridges communication gaps, enabling fraud and security teams to work together seamlessly to stop fraud before it happens.”

        “Asia Pacific is seeing a surge in cyber-enabled fraud, and the need for integrated intelligence has never been more urgent,” said Aditi Sawhney, senior vice president of Security Solutions, Asia Pacific at Mastercard. “We’re helping our customers move from fragmented responses to unified, intelligence-led defense strategies that strengthen resilience across the payments ecosystem.”

        Mastercard Threat Intelligence offers customers the following key features:

        • Card testing detection: Real-time alerts and proactive declines of fraudulent test transactions, reducing downstream fraud and protecting cardholders.
        • Digital skimming intelligence: Quantitative data to assess skimmer impacts and disrupt card-related malware, leveraging Mastercard’s industry partnerships.
        • Merchant threat intelligence: Targeted insights to assess merchant risk and enable faster incident response.
        • Payment ecosystem threat intelligence: Weekly reports on emerging threats and vulnerabilities across the global payments landscape.
        • Payment intelligence reports: Actionable case studies and fraud trend analysis to inform strategy and strengthen defenses.

        Operational silos continue to challenge risk resilience. Two in three fraud and risk leaders worldwide highlighted silos as a top concern, with 72 per cent of APAC leaders citing this entrenched issue as their highest priority.

        “Operational silos within the fraud and cyber teams continue to plague risk leaders as a high concern,” said Driver. “With Mastercard Threat Intelligence, we’re giving our customers the global visibility, threat intelligence and tools to prevent fraud and operate securely in a connected world.”

        Despite the challenges, APAC leaders are also seeing the benefits of improved integration. Most (89 per cent) institutions in the region report faster fraud defense responses following integration efforts, leading all global regions in speed gains.

        The launch of Mastercard Threat Intelligence comes less than a year after Mastercard finalised its acquisition of Recorded Future, and demonstrates the companies’ commitment to delivering a unified, intelligence-led approach to securing the digital economy.

        During market testing over the course of six months, Mastercard’s intelligence data helped ecosystem partners identify and take down malicious domains tied to the theft of payment card data, which had impacted nearly 9,500 ecommerce sites and were linked to an estimated USD 120 million in fraud losses.

        Source: Mastercard

          Online Safety IRL develops a new generation of changemakers to combat AI-driven scams.

          By
          News Hub Asia Reporter
          -

          A new cohort of 35 young changemakers and content creators is being equipped to lead online safety advocacy through the Online Safety IRL: Scam Edition fellowship programme. As trusted voices in their communities, these fellows have the potential to collectively reach over five million users online to raise scam awareness and shape safer digital behaviours.

          35 content creators and youth leaders will be trained to amplify scam awareness and digital safety under the Online Safety IRL:Scam Edition programme jointly driven by Ministry of Communications, CelcomDigi Berhad, Meta Platfrom Inc, Ration:Cause and Tonton. | Photo by Ministry of Communications/NHA File Photo

          The programme is jointly driven by the Ministry of Communications, CelcomDigi Berhad, Meta Platforms, Inc. and Ratio:Cause, alongside media partner – Tonton, to grow a strong network of digital safety advocates and maximise impact through a multi-stakeholder approach.

          Building on the success of its first edition which impacted over 2.8 million Malaysians through digital safety awareness content, the second edition returns with a focus to address the growing threat of financial scams, particularly those driven by AI technologies. The fellows will undergo an immersive fellowship involving expert-led masterclasses, field immersions, mentorship and community outreach, to build on their scam-spotting skills and understanding of AI’s dual role in scams and safety.

          Minister of Communications, YB Datuk Fahmi Fadzil said, “Scams affect everyone, and protecting Malaysians requires us all to work together. This programme shows what’s possible when government, industry, and communities unite to build awareness and strengthen online safety for all.”

          CelcomDigi’s Head of Sustainability, Philip Ling said, “Content creators and youth leaders are powerful changemakers with their ability to reach and influence communities both online and offline. We have seen the impact driven by peer-led advocacy in shaping how Malaysians navigate the digital world. Through Online Safety IRL, we are helping to grow a dynamic network of advocates who can continue to spark conversations, shift behaviours, and make the internet safer for everyone. CelcomDigi remains committed to fostering a safer and more secure digital environment for all. We will continue to develop strategic partnerships to build a trusted digital society.”

          Meta’s Head of Public Policy for Malaysia and Brunei, Daniel Lim said, “Protecting people online is a collective effort, and we strive to equip the next generation with the skills and awareness they need to navigate online spaces confidently. Through the Online Safety IRL programme, we’re proud to support young leaders and creators as they champion scam awareness and inspire safer online behaviour in their communities. Together with our partners, we’re building a more secure and informed digital future for all Malaysians.”

          Executive Director at Ratio: Cause, New Su Shern said, “The success of our first edition proved to us how powerful collaboration can be when different stakeholders come together with purpose. This programme has never been just about awareness, it’s about changing how Malaysians think, act and look out for one another online. This year, we’re expanding that impact even further, reaching more people across the country through a more diverse group of creators and youth fellows. Together with the Ministry of Communications, Meta, CelcomDigi and Tonton, we’re making scam resilience not just a campaign, but a nationwide movement powered by voices of our own communities.”

          The programme comprises two separate fellowship tracks, designed respectively for content creators and youths across Malaysia. Content creators will go through a 3-month fellowship which consists of:

          • MYR 8,000 grant to support content creation on scam awareness
          • Expert masterclasses on topics such as scam psychology, AI-generated fraud, and ethical content creation
          • Exclusive networking opportunities with corporate partners, government agencies, and like-minded creators
          • The youths will undergo a 6-month fellowship which includes:
          • Expert masterclasses focusing on community outreach and advocacy, in addition to topics on scam psychology, AI-generated fraud and more
          • Mentorship from programme partners and industry experts
          • Hands-on opportunity to design a community project on scam awareness

          Featuring ‘Is This Legit?’, a scam awareness game by Meta.

          Along with the launch of Online Safety IRL: Scam Edition, Meta also proudly presented their latest scam awareness game called ‘Is This Legit?’, now available in Bahasa Malaysia for the local audience. This is an interactive experience designed to equip online communities with skills to identify and avoid common scams. By engaging players through art and creativity, Meta aims to embed critical scam-spotting knowledge in their long-term memory, leading to lasting behavioural change.

          Source: Ministry of Communication

            APAC’s digital economies: Where rapid innovation is increasing exposure to sophisticated fraud

            By
            News Hub Asia Reporter
            -

            Today, Sumsub, a global verification and anti-fraud leader, released the second edition of its Global Fraud Index, revealing that Asia-Pacific has dropped from third to fourth place globally in fraud protection amid rising exposure to fraudulent activities. The region now ranks just above Africa and trails Europe, the Middle East, and the Americas. The report, produced in collaboration with Statista and the Digital Assets Association (DAA) Singapore, examines fraud risk across 112 countries to help regulatory bodies, governments, and businesses better understand and prevent fraud.

            There’s been an explosion of fraud worldwide - are business leaders ready to lead the fight against it? Sumsub’s What The Fraud summit is Asia-Pacific’s first event for fraud fighters, fintech innovators, crypto leaders, AI experts, regulators, and compliance professionals.
            There’s been an explosion of fraud worldwide – are business leaders ready to lead the fight against it? Sumsub’s What The Fraud summit is Asia-Pacific’s first event for fraud fighters, fintech innovators, crypto leaders, AI experts, regulators, and compliance professionals.

            While some markets like New Zealand and Thailand have strengthened their fraud protection, several of the region’s leading digital economies, including Singapore, Japan, Indonesia, and Malaysia have experienced significant declines in their rankings, highlighting the widening gap between rapid digital growth and the implementation of robust fraud prevention measures to safeguard users against increasingly sophisticated fraud.

            “This year’s Global Fraud Index shows that fraud protection isn’t about geography, it’s about governance. At the same time, fraudsters are getting their hands on increasingly powerful AI tools. What was once a niche threat has become commonplace”, said Timothy Owens, Tech and AI Industry Expert, and Senior Research Lead Technology and TeleCommunications at Statista. “For technology leaders, the message is clear: treat fraud exposure like system uptime. It requires constant monitoring. Verification systems, information sharing between organisations, and robust incident response aren’t optional anymore; they’re fundamental components of operating in today’s digital environment.”

            Despite its decline in overall ranking, Singapore leads globally in the Government Intervention pillar, surpassing countries such as Luxembourg, Denmark, Finland, Norway, and the Netherlands. This underscores the city-state’s commitment to building a robust anti-fraud infrastructure, strengthening regulatory frameworks, and fostering public-private collaboration to safeguard its digital economy against increasingly sophisticated threats.

            Key highlights of the 2025 Global Fraud Index study include:

            • Top APAC countries most protected against fraud are: New Zealand (#7), Singapore (#10), Australia (#15), South Korea (#27), Japan (#28)
            • Top APAC countries least protected against fraud are: Sri Lanka (#103), Bangladesh (#106), India (#109), Indonesia (#111), and Pakistan (#112)
            • New Zealand rose significantly from #12 in 2024 to #7 in 2025, Thailand climbed 25 positions (from #58 to #33) year-over-year
            • Singapore dropped from #1 in 2024 to #10 in 2025
            • Japan fell 15 positions (from #13 to #28), Indonesia declined 11 places (from #100 to #111)
            • Malaysia experienced the most drastic decline, falling from #34 to #86
            • Pakistan holds the last position in the Index for the second consecutive year
            • Europe has the largest concentration of countries in the list of 15 most protected ones
            • The U.S. has the highest government AI readiness index across the globe.

            “The findings of the 2025 Global Fraud Index are a stark reminder of the escalating challenges we face in the digital economy. The marked decline in rankings for key APAC hubs like Singapore, Malaysia, and Indonesia highlights a pressing need for a unified response to the growing threat of sophisticated fraud. This isn’t just about statistics; it’s about protecting businesses and building the trust necessary for the digital asset ecosystem to thrive,” said Chia Hock Lai, Co-Chairman, Digital Assets Association. “As an association committed to fostering a secure digital environment, these results reinforce our mission. We are proud to collaborate with Sumsub on this critical initiative, which generates awareness and provides actionable insights for both industry stakeholders and regulators. The DAA will intensify its efforts to collaborate with government bodies and technology providers to champion robust anti-fraud infrastructure and enhance the accessibility of essential KYC/AML services throughout the region.”

            “The 2025 Global Fraud Index provides a comprehensive view of fraud risks worldwide, highlighting both emerging threats and the effectiveness of preventative measures. By benchmarking markets globally, it offers businesses and regulators actionable insights to strengthen anti-fraud strategies, protect consumers, and maintain trust in the rapidly evolving digital economy,” said Penny Chai, Vice President, APAC, Sumsub. “The findings also underscore the unique challenges faced by APAC’s fast-growing digital economies, where rapid innovation is increasing exposure to sophisticated fraud. Effective government intervention, combined with public-private collaboration, is critical to ensuring these markets remain secure and resilient.”

            Building on last year’s well-received edition, the 2025 Global Fraud Index expands its scope to include nine new countries, including the Philippines, Vietnam, Kenya, Uganda, and Nigeria. The research integrates Sumsub’s internal verification data with insights from external sources including the World Bank, Transparency International, and Oxford Insights, providing a comprehensive view of global fraud exposure and government response capabilities.

            You can find additional data-driven insights, explore interactive maps and infographics as well as build country-specific comparisons here: https://sumsub.com/global-fraud-index-2025.

            In addition, Sumsub’s inaugural What The Fraud Summit that will facilitate the public-private partnerships and knowledge sharing critical to strengthening fraud prevention, will be taking place in Singapore from November 19 to 20, 2025. Learn more about the WTF Summit and ticket details: https://sumsub.com/wtf-summit/.

            Methodology of 2025 Global Fraud Index study

            The Global Fraud Index uses both internal and external data. Sumsub’s internal data is based on volumes of over 1 million checks conducted daily on the platform. The majority of data is from 2024-2025, with one indicator from 2023. External sources include The World Bank, The Heritage Foundation, Oxford Insights, Transparency International, Numbeo and other databases.

            The Index consists of 4 main pillars of analysis for each country. Those include not only the country’s fraud rate itself, but also incorporate ‘The Fraud Triangle’ hypothesis. This widely-used model reflects how certain factors – namely, pressure, opportunity, and rationalization – contribute to higher fraud rates and corruption. In digital fraud, this triangle manifests through lower digital resources accessibility, less efficient government intervention, and higher economic instability scores.

            Please find more details on Methodology here: https://sumsub.com/global-fraud-index/methodology-2025/.

              “Splendid Sichuan, Land of Abundance” Cultural and Tourism Brand Logo Makes Its Overseas Debut Sichuan Culture and Tourism Shines at Malaysia

              By
              News Hub Asia Reporter
              -

              From September 5 to 7, 2025, the MATTA Fair, Malaysia’s largest international tourism exhibition, was held in Kuala Lumpur. Covering 40,000 square meters with 1,794 booths, the fair brought together nearly 300 tourism organizations and enterprises from more than 20 countries and regions worldwide.

              At this year’s fair, Sichuan highlighted its cultural and tourism brand “Splendid Sichuan, Land of Abundance” through diverse forms of presentation, including visual displays, interactive experiences, and cultural showcases. The Sichuan booth created a distinctive and appealing exhibition space that stood out within the “Nihao! China” national exhibition area. With its striking brand imagery and immersive cultural experiences, the booth attracted keen interest and enthusiastic responses from international visitors.

              The booth design seamlessly combined Sichuan’s traditional charm with modern aesthetics. A themed photo zone recreated the atmosphere of a traditional Sichuan teahouse, where panda mascots warmly welcomed guests and invited them to enjoy tea. Interactive activities such as panda painting, intangible cultural heritage rubbing, and Chengdu-themed graffiti drew large numbers of visitors to participate. The “Splendid Sichuan, Land of Abundance” brand logo and large-scale visuals created a powerful visual impact, prompting many visitors to take photos and share them on social media.

              Speech by Mr. Wang Chengping, Deputy Director-General, Sichuan Provincial Department of Culture and Tourism

              On the first day of the fair, the “Splendid Sichuan, Land of Abundance” Cultural and Tourism Public Promotion in Malaysia was held concurrently. More than 100 attendees were present, including Han Ning, Director of the China Cultural Center in Kuala Lumpur; Lee Thai Hung, Deputy Director General of Tourism Malaysia; Nigel Wong Chun Teim, President of the Malaysian Association of Tour and Travel Agents; as well as representatives from local travel agencies, airlines, media outlets, and the public. In his remarks, Wang Chengping, Deputy Director General of the Sichuan Provincial Department of Culture and Tourism, emphasized that Malaysia is one of Sichuan’s key inbound tourist markets. He noted that the launch of the cultural tourism brand logo provides an opportunity to further deepen practical cooperation with Malaysia in the cultural and tourism sectors, with the goal of achieving mutual promotion of resources, two-way tourist flows, and shared market benefits.

              Speech by Mr. Samuel Lee Thai Hung, Deputy Director-General (Promotions II), Tourism Malaysia

              The regional synergy of the “Ba-Shu Cultural and Tourism Corridor” was also fully demonstrated. The exhibition highlighted the cultural charm and premium tourism resources of Sichuan and Chongqing, characterized by “international flair, Chinese essence, and Ba-Shu heritage.” The two regions jointly promoted cross-regional themed routes such as “Exploring the Twin Cities by High-Speed Rail,” offering visitors a convenient “one-stop, two-destination” travel option.”

              Interactive Experience Projects

              This participation marked the first official overseas promotion of the “Splendid Sichuan, Land of Abundance” cultural and tourism brand since its global launch on August 14, 2025. Its successful debut in Malaysia further enhanced Sichuan’s visibility and appeal in the international tourism market.

                The Haven Resort’s Visionary Leadership Propels Ipoh to Global Tourism Prominence

                By
                News Hub Asia Reporter
                -

                A Strategic Catalyst Transforming a Historic City into a Premier International Destination

                By Gunaprasath Bupalan

                The Haven Resort – Ipoh, Malaysia.

                Ipoh, a city steeped in the rich history of tin mining, has witnessed a remarkable resurgence in recent years, blossoming into a captivating destination that draws travellers from both within Malaysia and across the globe. At the heart of this transformation lies The Haven Resort, a luxurious sanctuary that has not only redefined the standards of hospitality in the region but has also emerged as a significant catalyst in propelling Ipoh to the forefront of Malaysia’s tourism industry and bolstering its economic landscape.

                The Haven Resort has been instrumental in attracting a diverse influx of tourists to Ipoh, drawn by its unique proposition of opulent accommodations nestled amidst the breathtaking panorama of dramatic limestone hills and verdant tropical rainforests. This distinctive blend of luxury and natural beauty has resonated strongly with both domestic holidaymakers seeking a tranquil escape and international adventurers eager to explore Malaysia’s hidden gems.

                Where beauty and comfort meet.

                The resort’s success in attracting foreign visitors is particularly noteworthy. Prior to 2023, The Haven had proudly welcomed over 80,000 international guests from more than 60 different nations. This impressive figure has continued to climb, with recent reports indicating that The Haven has now hosted over 150,000 foreign tourists from a wider spectrum of over 120 countries. This significant influx of international visitors underscores The Haven’s growing global appeal and its effectiveness in positioning Ipoh as a destination of international standing.

                Further amplifying its global reach and commitment to excellence, The Haven Resort has forged a strategic alliance with TUI BLUE, a renowned international hotel chain. This collaboration is a testament to The Haven’s ambition to continuously elevate its quality of service and hospitality standards, thereby attracting an even broader audience of discerning international travellers. By aligning with a globally recognized brand, The Haven is not only enhancing its operational efficiency but is also tapping into a vast network of potential customers, further solidifying Ipoh’s position on the international tourism radar.

                The Haven’s unwavering dedication to providing exceptional experiences has been consistently recognized through numerous prestigious accolades. The resort has consistently ranked within the top 1% of hotels worldwide by TripAdvisor. To date, The Haven has garnered an impressive collection of over 63 international and local awards, a clear indication of its commitment to excellence in all aspects of its operations. These accolades not only enhance the resort’s reputation as a premier destination but also contribute significantly to elevating Ipoh’s overall image as a world-class tourist hub, attracting more attention and credibility to the region.

                The Haven Resort has been instrumental in attracting a diverse influx of tourists to Ipoh, drawn by its unique proposition of opulent accommodations nestled amidst the breathtaking panorama of dramatic limestone hills and verdant tropical rainforests.

                The positive ripple effect of The Haven Resort extends far beyond the realm of tourism, making substantial contributions to the economic vitality of Ipoh. The significant increase in tourist arrivals, directly attributable to The Haven’s allure, translates into increased spending within the local economy. These tourists patronize a wide array of local businesses, including restaurants, retail outlets, transportation services, and various other tourism-related enterprises. This surge in economic activity provides a vital boost to the local economy, fostering growth and sustainability.

                Unknown to most, one great benefaction of The Haven Resort to Ipoh is the provision of a most worthwhile vocation for the local community. The Haven does not merely provide a service of livelihood; the role and training provided nurtures its staff not only for work excellence but for the inculcation of deep and worthwhile qualities and attributes even for eternal life.

                Beyond direct employment within the resort, the increased tourism activity has also spurred further employment opportunities in supporting industries, such as tour operators, local guides, and suppliers of goods and services. This injection of employment opportunities contributes significantly to the socio-economic well-being of the population in the local region.

                The presence of a high-caliber resort like The Haven also has the potential to positively influence property values in the surrounding areas. The enhanced appeal and desirability of Ipoh as a tourist destination, partly driven by the presence of such a prestigious establishment, has led to a large appreciation in property values, benefiting local homeowners and attracting further development and investment in the area.

                The Haven’s success story has indeed served as a catalyst for further investment and development in Ipoh. Following its success, more than 45 high-rise developments have evolved, including Sunway’s medical center, Onsen Suites, a shopping center being built that will be Perak’s largest and even a university. These developments will undoubtedly strengthen its position as a prominent tourist destination.

                Peter Chan, Chief Executive Officer of The Haven Resort.

                The visionary leadership of Peter Chan, the Chief Executive Officer of The Haven, has been a driving force behind the resort’s remarkable success and its profound positive impact on Ipoh. His unwavering vision and steadfast commitment to creating a world-class destination have been instrumental in reshaping Ipoh’s tourism landscape and elevating its profile on the national and international stage. His strategic direction and dedication to excellence have been pivotal in transforming Ipoh from a relatively lesser-known city into a thriving tourism hub.

                “The Haven Resort stands as a powerful testament to the transformative potential of strategic tourism development. By offering a unique and luxurious experience that seamlessly blends natural beauty with world-class hospitality, The Haven has not only successfully attracted a significant influx of visitors from across the globe but has also played a pivotal role in revitalizing Ipoh’s economy and firmly establishing its position as a prominent and increasingly sought-after destination on the Malaysian map,” Chan proudly explains.

                The resort’s continued commitment to excellence, coupled with its strategic collaborations and visionary leadership, promises to further enhance Ipoh’s appeal as a premier tourist destination for years to come, contributing significantly to the nation’s tourism industry and overall economic prosperity.

                For more information on The Haven Resort, or to book your unforgettable stay, please log on to https://tuibluethehavenipoh.com/

                -end-

                 

                  It’s getting darker: Nation-state APTs employ dark AI, says Kaspersky expert

                  By
                  News Hub Asia Reporter
                  -

                  Brace for more sophisticated and stealthy attacks driven by the rise of dark artificial intelligence (AI) in APAC. This is among the key findings shared by global cybersecurity and digital privacy company Kaspersky.

                  “Since ChatGPT gained global popularity in 2023, we have observed several useful adoptions of AI, from mundane tasks like video creation to technical threat detections and analysis. In the same breath, bad actors are using it to enhance their attacking capabilities. We are entering an era in cybersecurity and in our society where AI is the shield and dark AI is the sword,” says Sergey Lozhkin, head of Global Research and Analysis Team (GReAT) for META and APAC at Kaspersky.

                  Sergey Lozhkin, head of Global Research and Analysis Team (GReAT) for META and APAC at Kaspersky. | Photo by Kaspersky - 19 August 2025 / NHA File Photo
                  Sergey Lozhkin, head of Global Research and Analysis Team (GReAT) for META and APAC at Kaspersky. | Photo by Kaspersky – 19 August 2025 / NHA File Photo

                  Dark AI refers to the local or remote deployment of non-restricted large language models (LLMs) within a full framework or chatbot system that is used for malicious, unethical, or unauthorised purposes. These systems operate outside standard safety, compliance, or governance controls, often enabling capabilities such as deception, manipulation, cyberattacks, or data abuse without oversight.

                  Dark AI in action

                  Lozhkin shared the most common and well-known malicious use of AI today comes in the form of Black Hat GPTs, which emerged as early as mid-2023. These are AI models that are intentionally built, modified, or used to perform unethical, illegal, or malicious activities such as generating malicious codes, crafting fluent and persuasive phishing emails for both mass and targeted attacks, creating voice and video deepfakes, and even supporting Red Team operations.

                  Black Hat GPTs can be or private or semi-private AI models. Known examples include WormGPT, DarkBard, FraudGPT, and Xanthorox, designed or adapted to support cybercrime, fraud, and malicious automation.

                  Aside from the typical dark uses of AI, Lozhkin revealed that Kaspersky experts are now observing a darker trend – nation-state actors leveraging LLMs in their campaigns.

                  “OpenAI recently revealed it has disrupted over 20 covert influence and cyber operations attempting to misuse its AI tools. We can expect threat actors to create more clever ways of weaponising generative AI operating in both public and private threat ecosystems. We should brace for it,” he explains.

                  Open AI’s report revealed that the malicious actors have used LLMs to craft convincing fake personas, respond in real-time to targets, and produce multilingual content designed to deceive victims and bypass traditional security filters.

                  “AI doesn’t inherently know right from wrong; it’s a tool that follows prompts. Even when safeguards are in place, we know APTs are persistent attackers. As dark AI tools become more accessible and capable, it’s crucial for organisations and individuals in Asia Pacific to strengthen cybersecurity hygiene, invest in threat detection powered by AI itself, and stay educated on how these technologies can be exploited,” Lozhkin adds.

                  To help organisations defend themselves against dark AI and AI-enabled cyber threats, Kaspersky experts suggest:

                  To be updated on the latest threats using dark AI, visit https://www.kaspersky.com/.

                  Source: Kaspersky

                    MCMC to meet TikTok over concerns on child involvement in PK Battle trend: Malaysian Comms Minister

                    By
                    News Hub Asia Reporter
                    -

                    The Malaysian Communications and Multimedia Commission (MCMC) will soon hold discussions with TikTok’s management to address growing parental concerns over the rising popularity of the PK Battle (Personal Knockout Battle) trend among young users of the platform.

                    Communications Minister Datuk Fahmi Fadzil said the ministry views the matter seriously, especially following reports that children are spending substantial amounts of money on virtual gifts in order to participate in the trend, Bernama reported.

                    He revealed that an official directive was issued this morning, and the government expects a response from TikTok representatives within the week.

                    “This issue has been reported by the media, and we are taking it seriously. Since TikTok has obtained its operating licence here, they need to come forward to provide an explanation and state what steps can be taken to resolve this problem,” he said during a press conference after visiting the Kubang Semang National Information Dissemination Centre (NADI) today.

                    Communications Minister Datuk Fahmi Fadzil (second from left) during a visit to the Kubang Semang Digital Economy Centre (Nadi) today. - Bernama pic, 30 June 2025 (via Scoop.my) | NHA File Photo
                    Communications Minister Datuk Fahmi Fadzil (second from left) during a visit to the Kubang Semang Digital Economy Centre (Nadi) today. – Bernama pic, 30 June 2025 (via Scoop.my) | NHA File Photo

                    Also present were Communications Ministry secretary-general Datuk Mohamad Fauzi Md Isa and Information Department director-general Julina Johan.

                    Fahmi stressed that the government remains committed to safeguarding minors from harmful or inappropriate content on social media platforms.

                    “That is why we have consistently said that children under 13 should not have accounts on TikTok, Instagram, or any other social media platform. They are highly impressionable and can easily be drawn into trends like PK Battle without understanding the consequences,” he said.

                    On 28 May, the non-governmental organisation Pertubuhan Damai Revolusi Masyarakat submitted a memorandum to Istana Negara, urging royal intervention to ban the PK Battle feature in Malaysia. The group also appealed to the government to consider the matter, arguing that the trend undermines social values and encourages cyberbullying and humiliation.

                    Separately, Fahmi provided an update on the establishment of the Malaysian Media Council (MMM), stating that efforts are ongoing despite some delays due to financial procedures.

                    He said Mohamad Fauzi has been tasked with identifying suitable mechanisms to ensure the smooth allocation of funds to the council. Under the new law, the MMM will also be allowed to secure financing through any legal channel.

                    “I hope that within the next one to two months, we’ll be able to hold at least a few preliminary meetings. However, within six months of its formation, the council’s founding board must conduct a selection process to appoint the office bearers,” he said.

                    Fahmi added that the government has yet to hold detailed discussions on the matter to allow the founding board adequate space to deliberate on key issues. A formal dialogue is expected to take place in the coming weeks.

                    The Malaysian Media Council was made possible following the passing of the Malaysian Media Council Bill in the Dewan Rakyat on 26 February and subsequently in the Dewan Negara on 19 March. The Bill received royal assent and was gazetted shortly after.

                    Fahmi officially announced the enforcement of the law on 14 June, in conjunction with the 2025 National Journalists’ Day (Hawana), describing it as a landmark reform that would bring significant benefits to journalists and media practitioners nationwide.

                    This article was originally published by Scoop.my on 30 June 2025. News Hub Asia's new seal logo is a black spot with the letters 'NHA' inscribed in the centre with three diagonal dots in white.

                      123...144Page 1 of 144
                      © All Rights Reserved. NewsHubAsia.com | Designed by Net Focus Technology