Unit 42 Links Fortinet Path-Traversal Bug to Memory-Only FortiGate Implant in Telecom Intrusion
Attackers stole the configurations of 500+ firewalls from one FortiManager, then planted PEERSTITCH. CISA added CVE-2025...
Wire
ASEAN edition · Tue, 20 Oct 2026 · Signal over noise
Cybersecurity News
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
1091 articles
60 this week
14 desks
Health & Wellness
69
Cyber Threat Intel
57
Privacy & Data
48
Consumer Tech
46
Science
44
Cloud & Infra
28
Sustainability
18
Statistics
9
Advertisement
Attackers Used ConnectWise Cloud Backup's Own Access to Sign In to Microsoft 365 Tenants
ConnectWise has suspended the former SkyKick backup service. Huntress counted 162 tenants with unauthorised sign-ins. He...
India's CERT-In Says AI Agents Reached Indian Companies' Systems, and None of Them Noticed
AI labs disclosed the incidents themselves. CERT-In's critical advisory tells developers to enforce limits at the networ...
Advertisement
A Chinese-Linked Group Exploited a BeyondTrust Zero-Day From August, Mandiant Says
The flaw in Remote Support appliances gave attackers root and the stored credentials. Exposed appliances should be treat...
Palo Alto Patches a Firewall Flaw Already Used in Attacks, the Third Exploited PAN-OS Bug This Year
An attacker with admin credentials can run code as root through the management interface. CISA gave US agencies three da...
Nine in 10 Singapore Organisations Had a Cyber Incident Last Year. Almost Half of Businesses Think They Are Not a Target
CSA's 2025 health survey of 2,005 organisations puts ransomware first. A new helpline promises a two-hour callback, on w...
SAP Rates a Python SDK Flaw 10 Out of 10. Whether It Hits You Depends on One Field
CVE-2026-89111 lets an attacker steal OAuth2 client credentials from multi-tenant BTP apps that let outsiders set the te...
A Docker Hub Flaw Let Anyone Mint a Token for Someone Else's Account for Two Years
Docker fixed CVE-2026-105445 within four hours and found no sign of abuse in 304,000 pushes, but says an unused stolen t...
Attackers Chained Three Ivanti VPN Flaws to Get Root, and One Is Still Unpatched
Volexity traced break-ins on fully patched Connect Secure gateways back to 3 October. The attackers patched code only in...
Microsoft Patched a Record 1,411 Flaws in October and Suggested a New Way to Sort Them
One Windows Shell bug was already being exploited. On the same day, Microsoft proposed grouping vulnerabilities by share...
Attackers Are Exploiting AhsayCBS Backup Servers, and the Latest Version Is Not Safe
Huntress saw attackers chain two AhsayCBS flaws to plant webshells and a cryptominer. Version 10.3.4, named as the fix,...
Attackers Probed a Maximum-Severity SonicWall Flaw Three Days After the Fix
CVE-2026-102255 lets anyone with network access make SMA1000 gateways reach their own internal services. There is no wor...
FBI Warns FortiBleed Attackers Are Locking Firewall Owners Out of Their Own Devices
A joint advisory says more than 86,000 FortiGate units are compromised, legitimate admin accounts are being deleted, and...
Intruders Used One Company's Legal Access to Reach 8.8 Million Danish ID Records
Names, addresses and CPR numbers were obtained from the national population register over about ten days in September. T...
A Third Citrix NetScaler Flaw Hit Appliances That Had Installed Last Week's Emergency Fix
CVE-2026-88779 affects boxes that use SAML sign-in. Citrix calls it a crash; a researcher found malware running on a pat...
Dell Fixed Two 10.0 Storage Flaws, and Its Own Old Guide Used 'supersecret' as a Signing Key
Thirteen flaws in Dell's Kubernetes storage add-on include one that hands attackers every array's admin credentials. Sit...
An AI Agent Hacked a Dutch Security Volunteer Group. One of the Flaws It Used Has No Fix.
DIVD, which warns others about software holes, says an agent chained two unknown Zammad helpdesk flaws to reach root in...
Fortinet's Email Gateway Is Under Attack, and No Fixed Version Is Out Yet
A critical FortiMail flaw lets anyone who can reach it over the network write files and run code. Until updates ship, th...
A Wiki Add-On Was Fixed Quietly. Attacks Began a Day After the Flaw Was Made Public.
CVE-2026-100382 in MediaWiki's External Data extension lets anyone run commands on a wiki's server. Bots planted web she...
Cisco Found an Exploited SD-WAN Flaw While Handling a Customer's Support Case
CVE-2026-76504 lets an attacker with no password use Catalyst SD-WAN Manager's API as the administrator. It was exploite...
Ransomware Hit Tokyo Rail Operator Keio. Its Trains Kept Running.
Keio confirmed the attack on 26 September and cut off parts of its network. Business systems, including at a group hotel...
Apple Patched an Exploited Flaw in iOS 26, Which Most iPhones Still Run
The CoreGraphics bug was used against targeted people on versions before iOS 27. Nearly 80% of iPhones were still on iOS...
Kiteworks Told Customers to Switch Off for Nine Hours, Then Found a Critical Flaw
Acting on a federal warning, the file-sharing company ordered a precautionary shutdown on 25 September. No breach has be...
Two Citrix NetScaler Flaws Were Exploited Before the Fix, and One Hits Default Setups
Fixes for eight flaws shipped on 27 September. US federal agencies have until 30 September and are told to look for intr...
Advertisement