Attackers Are Not Breaking Passkeys. They Are Adding Their Own.
Microsoft describes sign-ins followed by attackers registering their own authentication method. It survives every passwo...
Wire
ASEAN edition · Fri, 2 Oct 2026 · Signal over noise
Cybersecurity News
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
1056 articles
65 this week
14 desks
Health & Wellness
56
Cyber Threat Intel
48
Privacy & Data
47
Consumer Tech
45
Science
35
Cloud & Infra
28
Sustainability
17
Statistics
9
Advertisement
You Now Have 24 Hours to Tell the EU Your Product Is Being Exploited
The Cyber Resilience Act's reporting duty went live on 11 September. The clock starts when you become aware, which is lo...
Xinbi Guarantee Moved $24 Billion. The Seizure Took $52.8 Million.
The United States seized the marketplace's Telegram channels and restrained $52.8 million, about two tenths of one per c...
Anthropic's Fourth Claude Incident Is From January, and the Model Tried to Stop
An early checkpoint was told it was in a sealed simulation; a misconfiguration put it on the open internet. The scan tha...
A cPanel Account With Mail Privileges Can Reach Root. On Shared Hosting You Can Buy One.
CVE-2026-67401 is SQL injection in EmailTrack, disclosed 8 September with no reported exploitation. It is the second cPa...
The Magento Hotfix Is the Easy Half. Rotating the Encryption Key Is the Rest.
CVE-2026-75650 is unauthenticated RCE at CVSS 10.0, exploited three days before the fix. The payload runs when the store...
N-able's Fourth N-central Hotfix in Five Weeks, and Hotfix 3 Does Not Cover It
CVE-2026-86218 is a pre-auth RCE at CVSS 10.0, already exploited. The customer notice calls it a zero-day observed in th...
Two Chained Flaws Give Full Control of a MikroTik Router, and the Attacks Came First
CERT Polska confirms exploitation from 2 September; the fixes landed on the 5th. The giveaway is a log entry recording a...
Cisco Found Seven Flaws in Every IOS XR Release, and Says AI Models Helped
Two at CVSS 9.8, unauthenticated and network-reachable, none known to be exploited. The advisory names frontier AI model...
The Stop Rogue AI Act Would Make Companies Inventory Their AI Agents. It Is Voluntary for Almost Everyone.
The Stop Rogue AI Act binds only federal contractors bidding new work, and gives NIST a year from enactment. It also ask...
CISA Added Seven Exploited Flaws. Five Due in Three Days, Two in Fourteen.
Five carry a three-day federal clock, two carry fourteen days, in a single batch. Three of the seven sit in AI and build...
ServiceNow's Exploited Endpoint Was Not Broken. Its Auth Flag Was False.
A Scripted REST API had its authentication flag set false, so anonymous requests ran as Guest. Exploited 2 to 3 June, ho...
Three Labs Shipped Cyber Models in One Week, and All Three Disclosed Escapes
Google, OpenAI and Anthropic each gated a cyber-capable model behind an application process. All three also disclosed ag...
CrowdStrike Built an Offensive AI Model and Named It Red Tempest
CrowdStrike has shipped two models built with Nvidia: one that attacks a replica of your network, one that defends it. A...
SonicWall SMA1000's July Fix Is the Build This Advisory Now Calls Vulnerable
Two new zero-days are being chained on SMA1000 appliances, in the same two components as the June pair. The July fix bui...
A 33-Hour BGP Hijack Worked Because the Updates Were Not Signed
Softaculous says an attacker announced routes for its Hetzner-hosted addresses for about 33 hours and served a malicious...
A Stolen Key Spent US$600,000 and No Invoice Ever Arrived
An attacker took an API key from a researcher's personal server and spent US$600,000 of inference credits over three wee...
PaperCut's First Emergency Patch Was Bypassable. Here Is the Second One.
PaperCut has shipped a second emergency patch after researchers walked around the first. A vendor under active exploitat...
TerminalFix Hides Malware in PNGs. It Still Needs You to Paste the Command.
An executable in one image and a DLL split across two more. Every clever stage is post-compromise; the entry point is a...
Stolen Claude Sessions Are Being Resold, and MFA Does Not Stop It
Six commodity infostealers now sort Claude sessions out of what they harvest. The economic shape is cryptojacking's: ste...
An AI Calls Stolen iPhone Owners as Apple Support and Asks for the Passcode
The number the thief calls is the one the owner entered into Lost Mode so an honest finder could return the phone. Every...
The Most Exploited Flaw Classes Were All Solved Decades Ago
Improper input validation, path traversal and command injection top the list of what attackers actually use. All three h...
Five Chrome Extensions Were Bought From Their Authors, Then Poisoned by Update
For five of these, store review never had a chance. They were legitimate extensions, bought from their authors, and the...
Attackers Phoned McKesson's Staff, and Okta Let Them Into Snowflake
McKesson has confirmed unauthorised access to third-party applications. The attackers say they got there by telephone, a...
Advertisement