Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245: Netadmin-to-Root, Exploited for Months Before Disclosure
Cisco disclosed CVE-2026-20245 on 5 June 2026, a high-severity command-injection flaw in Catalyst SD-WAN Manager that Ma...
Wire
ASEAN edition · Tue, 18 Aug 2026 · Signal over noise
Cybersecurity News
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
529 articles
83 this week
14 desks
Health & Wellness
18
Privacy & Data
16
Cloud & Infra
16
Cyber Threat Intel
13
Consumer Tech
10
Sustainability
5
Statistics
4
Science
3
Advertisement
FortiBleed: FortiGate Credential Exposure Hits Tens of Thousands of Devices — And It Is Not a New CVE
FortiBleed is a large-scale credential-exposure campaign against internet-facing Fortinet FortiGate firewalls and SSL VP...
Linux 'pedit COW' (CVE-2026-46331) Hands Local Users Root via Page-Cache Corruption — Patch and Reboot
CVE-2026-46331, nicknamed pedit COW, is a Linux kernel local privilege-escalation flaw in the traffic-control act_pedit...
PTC Windchill and FlexPLM RCE CVE-2026-12569 Is Under Active Attack — Patch Now and Hunt for Webshells
CISA added CVE-2026-12569, a critical remote code execution flaw in PTC Windchill PDMLink and FlexPLM, to its Known Expl...
Cisco Unified CM SSRF Flaw CVE-2026-20230 Is Now Being Exploited — Patch by 28 June and Check for Compromise
CISA added CVE-2026-20230, a server-side request forgery flaw in Cisco Unified Communications Manager, to its Known Expl...
Three Maximum-Severity Ubiquiti UniFi OS Flaws Are Being Exploited — Patch via Bulletin 064 and Check for Compromise
CISA added three maximum-severity Ubiquiti UniFi OS vulnerabilities (CVE-2026-34908, -34909 and -34910) to its Known Exp...
Joomla JCE Flaw CVE-2026-48907 (CVSS 10.0) Is Being Actively Exploited — Patch and Check for Compromise
CISA added CVE-2026-48907, a maximum-severity flaw in the Widget Factory Joomla Content Editor extension (JCE / JCE Pro)...
Palo Alto GlobalProtect Flaw CVE-2026-0257 Is Under Active Exploitation — Patch or Mitigate Now
Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, an authentication-bypass flaw in PAN-OS GlobalPro...
Oracle Patches Actively Exploited PeopleSoft Zero-Day (CVE-2026-35273) as Data-Theft Campaign Hits Universities
Oracle issued an out-of-band alert on 10 June for CVE-2026-35273, a CVSS 9.8 unauthenticated remote-code-execution flaw...
NFCShare: Android Malware Poses as a Bank App Update to Steal Card Data Through Your Phone's NFC Chip
Researchers at D3Lab say a new wave of the NFCShare Android trojan, running since mid-May 2026, poses as banking-app upd...
Miasma Returns With 'Phantom Gyp': npm Worm Sidesteps the Install-Script Defences Teams Just Deployed
On 3 June, two days after the Red Hat npm compromise, the Miasma worm returned with a new delivery trick: a 157-byte bin...
One Trojan, Three Lures: MyCERT Warns of Android Banking Malware Hitting Maybank and CIMB Users
MyCERT's 6 June advisory details an active Android banking-trojan campaign using three lure brands — Delivery4U, KerjaEx...
SolarWinds Serv-U Enters CISA KEV After Active Exploitation Warning
SolarWinds Serv-U CVE-2026-28318 is now in CISA’s Known Exploited Vulnerabilities catalogue after a June 2026 hotfix. Th...
CSA Flags GlobalProtect Auth-Bypass CVE-2026-0257 as Critical While Attackers Forge VPN Cookies in the Wild
Singapore's CSA rates a GlobalProtect authentication-bypass flaw critical (9.1) — sterner than Palo Alto's own HIGH rati...
Singapore Reviews Binding Cyber Obligations for Interconnected Non-CII Systems
The Cyber Security Agency of Singapore is evaluating whether to extend regulatory requirements to non-critical informati...
Cisco Unified CM SSRF Flaw Needs Fast Action Where WebDialer Is Enabled
Cisco has patched CVE-2026-20230, a Unified CM and Unified CM SME server-side request forgery flaw that can lead to root...
Google’s June Android Patch Fixes a Zero-Day Under Targeted Exploitation
Google’s June 2026 Android security bulletin includes CVE-2025-48595, a Framework vulnerability flagged for limited, tar...
No Zero-Day Required: ShinyHunters' Salesforce Vishing Spree Snares Charter and Carnival in One Week
Two major consumer brands confirmed breaches days apart — Carnival began notifying nearly six million people, and Charte...
This week's breaches needed no zero-day. The perimeter is identity now.
A phone call took millions of records out of two large companies this week. A firewall bug let attackers walk past the e...
CISA orders agencies to patch an actively exploited Palo Alto firewall flaw by 1 June
Attackers are exploiting a flaw in Palo Alto Networks' PAN-OS that lets them slip past security controls and open an una...
Nova Ransomware Claims Indonesia's National Food Agency in Latest Government Sector Hit
Nova ransomware claimed Badan Pangan Nasional — Indonesia's National Food Agency — on 29 May 2026, citing 133 compromise...
VNCERT: SOC Systems Failed to Catch Breaches at Two Vietnamese Ministries, Millions of Records Stolen
Vietnam's national cybersecurity authority disclosed on 22 May 2026 that hackers breached two ministerial-level agencies...
Morpheus Ransomware Steals 680 GB from HDFC AMC; Bombay HC Issues Temporary Injunction
On 16 May 2026 HDFC AMC's IT administrator detected anomalies in the company's infrastructure and received an extortion...
CERT-In Orders 12-Hour Patching Window as AI Shrinks Exploit Timelines to Hours
India's national cybersecurity agency has told organisations running internet-facing systems to patch, mitigate, or isol...
Advertisement