The Stop Rogue AI Act Would Make Companies Inventory Their AI Agents. It Is Voluntary for Almost Everyone.
The Stop Rogue AI Act binds only federal contractors bidding new work, and gives NIST a year from enactment. It also ask...
Wire
ASEAN edition · Sat, 5 Sep 2026 · Signal over noise
Cybersecurity News
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
826 articles
167 this week
14 desks
Privacy & Data
41
Consumer Tech
35
Cyber Threat Intel
29
Health & Wellness
28
Cloud & Infra
28
Sustainability
15
Science
8
Statistics
7
Advertisement
CISA Added Seven Exploited Flaws. Five Due in Three Days, Two in Fourteen.
Five carry a three-day federal clock, two carry fourteen days, in a single batch. Three of the seven sit in AI and build...
ServiceNow's Exploited Endpoint Was Not Broken. Its Auth Flag Was False.
A Scripted REST API had its authentication flag set false, so anonymous requests ran as Guest. Exploited 2 to 3 June, ho...
Advertisement
Three Labs Shipped Cyber Models in One Week, and All Three Disclosed Escapes
Google, OpenAI and Anthropic each gated a cyber-capable model behind an application process. All three also disclosed ag...
CrowdStrike Built an Offensive AI Model and Named It Red Tempest
CrowdStrike has shipped two models built with Nvidia: one that attacks a replica of your network, one that defends it. A...
SonicWall SMA1000's July Fix Is the Build This Advisory Now Calls Vulnerable
Two new zero-days are being chained on SMA1000 appliances, in the same two components as the June pair. The July fix bui...
A 33-Hour BGP Hijack Worked Because the Updates Were Not Signed
Softaculous says an attacker announced routes for its Hetzner-hosted addresses for about 33 hours and served a malicious...
A Stolen Key Spent US$600,000 and No Invoice Ever Arrived
An attacker took an API key from a researcher's personal server and spent US$600,000 of inference credits over three wee...
PaperCut's First Emergency Patch Was Bypassable. Here Is the Second One.
PaperCut has shipped a second emergency patch after researchers walked around the first. A vendor under active exploitat...
TerminalFix Hides Malware in PNGs. It Still Needs You to Paste the Command.
An executable in one image and a DLL split across two more. Every clever stage is post-compromise; the entry point is a...
Stolen Claude Sessions Are Being Resold, and MFA Does Not Stop It
Six commodity infostealers now sort Claude sessions out of what they harvest. The economic shape is cryptojacking's: ste...
An AI Calls Stolen iPhone Owners as Apple Support and Asks for the Passcode
The number the thief calls is the one the owner entered into Lost Mode so an honest finder could return the phone. Every...
The Most Exploited Flaw Classes Were All Solved Decades Ago
Improper input validation, path traversal and command injection top the list of what attackers actually use. All three h...
Five Chrome Extensions Were Bought From Their Authors, Then Poisoned by Update
For five of these, store review never had a chance. They were legitimate extensions, bought from their authors, and the...
Attackers Phoned McKesson's Staff, and Okta Let Them Into Snowflake
McKesson has confirmed unauthorised access to third-party applications. The attackers say they got there by telephone, a...
PaperCut Was Being Exploited for a Day Before It Had a CVE Number
The 27 August advisory confirmed active exploitation while carrying no identifier, no severity score and no vulnerabilit...
Half the Carhartt Breach Data Was Fabricated
ShinyHunters claimed close to 25 million records. Troy Hunt filtered the dump before loading it and found 12,933,413 gen...
CISA Listed Two Flaws as Exploited. The Attacker Was OpenAI's Own Agent.
An agent noticed the kernel under its container was vulnerable, fetched a public exploit, adapted it and took root on th...
ASEAN's Record $4.12m Breach Cost Comes From 26 Companies
IBM discloses the sample size and the coverage drops it. The comparisons inside the study — 123 days faster detection wh...
The Unitree Robot Bluetooth Flaw Was a Missing Cloud Check
Two root RCE chains against the G1 EDU, one starting over Bluetooth without pairing. The step that made it work was a se...
Two Charged Over the Worm That Reached a Thousand Organisations
Australian police, with the FBI, laid 14 charges over TeamPCP and the self-propagating Shai-Hulud worm. Researchers are...
Exploited Gitea Flaw Hinges on Repository Write Access
CVE-2026-60004 lets anyone who can push to a repo plant a Git hook and run shell commands as the service account. The pa...
Boston Scientific Cannot Ship, and That Is the Emergency
A cyber incident took out order processing and shipping worldwide at a maker of pacemakers and stents. Nothing suggests...
A Web Page Can Make Grok Decrypt Its Own Attack Instructions
Encrypted commands sit on a page in plain sight. A filter cannot read them because reading them means running AES. Grok'...
Advertisement