Cisco Patches Sixth SD-WAN Zero-Day of 2026 as UAT-8616 Gains Admin Access via CVSS 10.0 Auth Bypass
Cisco has disclosed CVE-2026-20182, a CVSS 10.0 authentication bypass in its Catalyst SD-WAN Controller — the sixth acti...
Wire
ASEAN edition · Tue, 18 Aug 2026 · Signal over noise
Cybersecurity News
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
529 articles
83 this week
14 desks
Health & Wellness
18
Privacy & Data
16
Cloud & Infra
16
Cyber Threat Intel
13
Consumer Tech
10
Sustainability
5
Statistics
4
Science
3
Advertisement
Microsoft Exchange OWA Zero-Day CVE-2026-42897 Actively Exploited With No Permanent Patch
Microsoft confirmed active exploitation of CVE-2026-42897, a cross-site scripting flaw in Exchange's Outlook Web Access...
LiteSpeed cPanel Plugin Zero-Day CVE-2026-48172: Maximum-Severity Root Escalation Under Active Exploitation
CVE-2026-48172 in the LiteSpeed User-End cPanel Plugin carries a CVSS v4.0 score of 10.0 and was added to CISA's KEV cat...
SHADOW-EARTH-053: China-Aligned Espionage Campaign Hits Government and Defence Networks Across ASEAN and Beyond
A China-aligned intrusion cluster designated SHADOW-EARTH-053 maintained covert access inside government ministries, def...
This week's bugs to patch: a critical OTRS flaw and a Linux root hole on CISA's list
A short, practical read of the week's most urgent vulnerabilities: a critical pre-authentication flaw in the OTRS servic...
Threat Brief, Week of 18 May 2026: State-Backed Espionage in Malaysia, a Malware-Signing Takedown, and the Defender Itself Under Fire
Our weekly read of the threat landscape: a state-backed actor ran a bespoke espionage operation against Malaysian govern...
An LLM Agent Drove This Real Intrusion: Marimo RCE to Database Dump in Under an Hour
On 10 May an internet-exposed marimo notebook was breached through CVE-2026-39987 — and then an autonomous LLM agent too...
The AI SOC arms race lands in ASEAN: Flocks, Claude, and the agentic security stack of mid-2026
On 6 May 2026, Singapore-headquartered ThreatBook launched Flocks and SafeSkill — landing in an AI SOC category that alr...
Three supply-chain incidents this week: Megalodon, Robinsons, and the Laravel-Lang Composer compromise
Megalodon pushed 5,718 malicious commits into 5,561 GitHub repos in six hours. The Payload ransomware group listed Singa...
Laravel-Lang Supply Chain Attack — 233 Versions Backdoored Across 700 Repos in a Composer-Autoload Trick
On 22 May 2026, an attacker rewrote version tags across the Laravel-Lang ecosystem to deliver a 5,900-line PHP credentia...
Megalodon Campaign Backdoors 5,561 GitHub Repos in Six Hours — Inside the Largest GitHub Actions Supply-Chain Attack on Record
An automated campaign called Megalodon pushed 5,718 malicious commits to 5,561 GitHub repos between 18-21 May 2026, exfi...
Pwn2Own Berlin 2026 Pays Out $1.4M Across Three Days — Chrome Sandbox, Tesla Infotainment, Linux Kernel All Fall
The OffensiveCon Pwn2Own contest wrapped on Wednesday with $1.4 million paid out across 27 zero-days. A Chrome sandbox e...
Anthropic Says It Disrupted the First Reported AI-Orchestrated Cyber-Espionage Campaign Using Claude
In a public write-up, Anthropic describes threat actors who induced Claude — by posing as defensive testers — into mappi...
AWS Confirms First Production Prompt-Injection Compromise in Bedrock Agents — Enterprise Customer Exfiltrated Documents
In a quietly-published security bulletin, AWS confirmed an indirect prompt-injection attack in production Bedrock Agents...
Google Documents First Observed AI-Developed Zero-Day Exploit Tied to a Planned Mass-Exploitation Campaign
Google's Threat Intelligence Group has described what it believes is the first case of an AI-developed zero-day exploit...
Cisco Patches Sixth SD-WAN Zero-Day of 2026 — UAT-8616 Attribution from Talos
Cisco shipped an emergency advisory for CVE-2026-20182 on 15 May 2026, a peering authentication bypass in Catalyst SD-WA...
CISA Orders Federal Agencies to Patch Linux Kernel "Copy Fail" Zero-Day Within Two Weeks
A 732-byte Python script is all an unprivileged local user needs to take root on Ubuntu 24.04, RHEL 10.1, SUSE 16 and ne...
EchoLeak: Zero-Click Prompt Injection in Microsoft 365 Copilot Quietly Exfiltrates Enterprise Data
EchoLeak shows a malicious email can trigger Microsoft 365 Copilot into exfiltrating enterprise data without a single us...
Hackers Reach Anthropic's Restricted Mythos Model Through a Vendor Environment as FSB Calls Briefing
A small group of unauthorised users reached Mythos via a third-party vendor environment on the same day Anthropic announ...
Anthropic's Project Glasswing Lines Up AWS, Apple, Google, Microsoft, JPMorgan to Test Mythos for Cyber Defence
Project Glasswing pairs Anthropic's restricted Mythos model with a roster of hyperscalers, banks and the Linux Foundatio...
Exchange Server Zero-Day CVE-2026-42897 — Crafted-Email XSS Spoofs OWA Without User Click
Microsoft disclosed CVE-2026-42897 on 14 May 2026 — an XSS spoofing flaw in Exchange OWA exploited via crafted email. CV...
Instructure Pays Ransom to ShinyHunters After Canvas Breach Exposes 275 Million Records Across 8,809 Schools
After ShinyHunters stole 3.65TB of data from 8,809 schools using the Canvas LMS, Instructure quietly paid the ransom. Wh...
ShinyHunters Breach Instructure Canvas: 275 Million Students' Data Stolen in One of Education's Largest Ever Cyberattacks
Hacking group ShinyHunters claims to have stolen data on 275 million people from Canvas LMS operator Instructure, exposi...
Critical Palo Alto Firewall Zero-Day Actively Exploited by State-Sponsored Hackers — CISA Orders Patch by 9 May
CVE-2026-0300, a critical PAN-OS buffer overflow enabling unauthenticated root-level RCE, is being actively exploited by...
Advertisement