Singapore's Cyber Command Ran Its First Scam Sweep. It Was the Third in Six Weeks
Singapore stood up a dedicated Cyber Command on 3 July. Its first islandwide scam sweep was the third such operation in...
Wire
ASEAN edition · Tue, 18 Aug 2026 · Signal over noise
Cybersecurity News
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
529 articles
83 this week
14 desks
Health & Wellness
18
Privacy & Data
16
Cloud & Infra
16
Cyber Threat Intel
13
Consumer Tech
10
Sustainability
5
Statistics
4
Science
3
Advertisement
The Coldcard Entropy Failure Was a Build-Configuration Bug, Not a Cryptography Bug
A macro was defined and set to zero. One guard tested whether it existed rather than what it held, the linker bound sile...
Attackers Sweep 1,367 Bitcoin From Coldcard Wallets After Five-Year Firmware Flaw
Three waves of automated sweeps have taken about $89 million in bitcoin from 4,585 addresses since 30 July. The cause is...
A Password Was Built Into Cisco's Firewall Manager. It Is Being Exploited, and Agencies Had Three Days to Fix It
CVE-2026-20316 scores 5.3 — a medium. CISA still gave federal agencies three days and told them to check for compromise....
Vulnerability Disclosures Will Pass Last Year's Record by August. The Share Anyone Actually Exploits Is Falling
AI code scanning has pushed disclosures to 45,207 in seven months. Our own count of the exploited-vulnerabilities catalo...
Thirty Minnesota Water Utilities Were Hit in One Weekend. The Flaw at the Centre Is Five Years Old and Has No Patch
A coordinated attack reached operational technology at more than 30 municipal water systems. One plant went offline for...
Four SharePoint Flaws Entered CISA's Catalogue in Twenty-Two Days — One Left a Single Working Day
CVE-2026-50522 was exploited hours after proof-of-concept code appeared, and stolen machine keys survive the patch. Our...
Check Point Confirms an Exploited SmartConsole Bypass — Its Second KEV Entry in Forty-Four Days
The advisory is exemplary and the hotfix shipped the same day. The pattern behind it is the story: two of Check Point's...
CISA's Patch Deadlines Collapsed From 21 Days to Three — and It Started Four Months Before the Directive That Gets the Credit
We measured every deadline in the KEV catalog's 1,653 entries. The 21-day window was retired on 5 March; BOD 26-04 arriv...
Japan Logged 19,417 Data-Breach Reports in FY2025 — What the Second-Highest Total on Record Does and Doesn't Tell You
Japan's privacy regulator recorded 19,417 breach notifications in FY2025, the second-highest on record but down 7.6% yea...
Two Rival Powers, One Police Force: Researchers Say China- and India-Linked Groups Separately Spied on Pakistani Law Enforcement
SentinelLabs reports that suspected China-nexus and India-nexus groups ran separate espionage campaigns against Pakistan...
Taiwan Charges Two Executives Over a LINE-Account Leasing Scheme Prosecutors Link to Chinese Cyber-Espionage
Taiwanese investigators have issued deferred prosecution orders against two executives who, prosecutors allege, leased l...
£29 Million of Damage From a Phone Call: Two Scattered Spider Members Jailed Over the TfL Hack
Two Scattered Spider members were sentenced to five and a half years each on 16 July for the 2024 Transport for London a...
Microsoft's Largest-Ever Patch Tuesday: 600-Plus Fixes, Two Live Zero-Days, and a Triage Problem
Microsoft's July update fixed more than 600 CVEs — its biggest ever — including two zero-days already under attack in AD...
A Cyberattack on One Cold-Chain Operator Emptied KFC Japan's Shelves — the Cost of a Single Logistics Chokepoint
Nichirei, Japan's largest cold-chain logistics operator, was hit by a cyberattack on 13 July. Containing it meant discon...
A Nuclear Plant's Blueprints Leaked — but the Breach Was at a Contractor, Not the Reactor
An extortion group posted files it claims come from a Kudankulam contractor's servers. India says no nuclear safety syst...
Qantas Was Breached, but Australia's Privacy Regulator Declined a Formal Investigation — Governance Was the Deciding Factor
Australia's privacy regulator closed its inquiry into the 2025 Qantas breach on 16 July without opening a formal investi...
One PeopleSoft Zero-Day, 100-Plus Victims: The July Breach Disclosures Trace to a Single Oracle Flaw
Nissan, NAIC and a wave of universities are disclosing breaches that trace to one Oracle PeopleSoft zero-day, CVE-2026-3...
Accenture Says It Remediated an 'Isolated Matter' — a Seller Claims 35GB of Source Code and Cloud Keys
A forum seller claims to have taken 35GB of Accenture source code and cloud credentials; Accenture acknowledges an isola...
Adobe ColdFusion CVE-2026-48282: A Perfect-Score Path-Traversal Flaw CISA Says Is Being Exploited
CISA added a maximum-severity Adobe ColdFusion path-traversal flaw to its exploited-vulnerabilities catalog on 7 July, w...
Langflow Becomes the First AI-Agent Platform on CISA's Exploited-Vulnerability List
On 7 July 2026, CISA added an actively-exploited vulnerability in Langflow — a popular open-source framework for buildin...
CVE-2026-8451: A CitrixBleed-Class NetScaler Flaw Was Exploited Within a Day of Disclosure
CVE-2026-8451 is a CitrixBleed-class, unauthenticated memory-overread flaw in Citrix NetScaler ADC and Gateway appliance...
Google and the FBI Disrupt NetNut, a 2-Million-Device Residential Proxy Network Fuelled by Smart TVs
Google's Threat Intelligence Group, working with the FBI, Lumen and other partners, has disrupted NetNut — a residential...
SharePoint RCE CVE-2026-45659 Added to CISA KEV: A 'Less Likely' May Patch Is Now Actively Exploited
CISA added CVE-2026-45659, a CVSS 8.8 deserialization remote-code-execution flaw in on-premises Microsoft SharePoint Ser...
Advertisement