Vulnerability Disclosures Will Pass Last Year's Record by August. The Share Anyone Actually Exploits Is Falling
AI code scanning has pushed disclosures to 45,207 in seven months. Our own count of the exploited-vulnerabilities catalo...
Wire
ASEAN edition · Fri, 2 Oct 2026 · Signal over noise
Cybersecurity News
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
1056 articles
65 this week
14 desks
Health & Wellness
56
Cyber Threat Intel
48
Privacy & Data
47
Consumer Tech
45
Science
35
Cloud & Infra
28
Sustainability
17
Statistics
9
Advertisement
Thirty Minnesota Water Utilities Were Hit in One Weekend. The Flaw at the Centre Is Five Years Old and Has No Patch
A coordinated attack reached operational technology at more than 30 municipal water systems. One plant went offline for...
Four SharePoint Flaws Entered CISA's Catalogue in Twenty-Two Days — One Left a Single Working Day
CVE-2026-50522 was exploited hours after proof-of-concept code appeared, and stolen machine keys survive the patch. Our...
Check Point Confirms an Exploited SmartConsole Bypass — Its Second KEV Entry in Forty-Four Days
The advisory is exemplary and the hotfix shipped the same day. The pattern behind it is the story: two of Check Point's...
CISA's Patch Deadlines Collapsed From 21 Days to Three — and It Started Four Months Before the Directive That Gets the Credit
We measured every deadline in the KEV catalog's 1,653 entries. The 21-day window was retired on 5 March; BOD 26-04 arriv...
Japan Logged 19,417 Data-Breach Reports in FY2025 — What the Second-Highest Total on Record Does and Doesn't Tell You
Japan's privacy regulator recorded 19,417 breach notifications in FY2025, the second-highest on record but down 7.6% yea...
Two Rival Powers, One Police Force: Researchers Say China- and India-Linked Groups Separately Spied on Pakistani Law Enforcement
SentinelLabs reports that suspected China-nexus and India-nexus groups ran separate espionage campaigns against Pakistan...
Taiwan Charges Two Executives Over a LINE-Account Leasing Scheme Prosecutors Link to Chinese Cyber-Espionage
Taiwanese investigators have issued deferred prosecution orders against two executives who, prosecutors allege, leased l...
£29 Million of Damage From a Phone Call: Two Scattered Spider Members Jailed Over the TfL Hack
Two Scattered Spider members were sentenced to five and a half years each on 16 July for the 2024 Transport for London a...
Microsoft's Largest-Ever Patch Tuesday: 600-Plus Fixes, Two Live Zero-Days, and a Triage Problem
Microsoft's July update fixed more than 600 CVEs — its biggest ever — including two zero-days already under attack in AD...
A Cyberattack on One Cold-Chain Operator Emptied KFC Japan's Shelves — the Cost of a Single Logistics Chokepoint
Nichirei, Japan's largest cold-chain logistics operator, was hit by a cyberattack on 13 July. Containing it meant discon...
A Nuclear Plant's Blueprints Leaked — but the Breach Was at a Contractor, Not the Reactor
An extortion group posted files it claims come from a Kudankulam contractor's servers. India says no nuclear safety syst...
Qantas Was Breached, but Australia's Privacy Regulator Declined a Formal Investigation — Governance Was the Deciding Factor
Australia's privacy regulator closed its inquiry into the 2025 Qantas breach on 16 July without opening a formal investi...
One PeopleSoft Zero-Day, 100-Plus Victims: The July Breach Disclosures Trace to a Single Oracle Flaw
Nissan, NAIC and a wave of universities are disclosing breaches that trace to one Oracle PeopleSoft zero-day, CVE-2026-3...
Accenture Says It Remediated an 'Isolated Matter' — a Seller Claims 35GB of Source Code and Cloud Keys
A forum seller claims to have taken 35GB of Accenture source code and cloud credentials; Accenture acknowledges an isola...
Adobe ColdFusion CVE-2026-48282: A Perfect-Score Path-Traversal Flaw CISA Says Is Being Exploited
CISA added a maximum-severity Adobe ColdFusion path-traversal flaw to its exploited-vulnerabilities catalog on 7 July, w...
Langflow Becomes the First AI-Agent Platform on CISA's Exploited-Vulnerability List
On 7 July 2026, CISA added an actively-exploited vulnerability in Langflow — a popular open-source framework for buildin...
CVE-2026-8451: A CitrixBleed-Class NetScaler Flaw Was Exploited Within a Day of Disclosure
CVE-2026-8451 is a CitrixBleed-class, unauthenticated memory-overread flaw in Citrix NetScaler ADC and Gateway appliance...
Google and the FBI Disrupt NetNut, a 2-Million-Device Residential Proxy Network Fuelled by Smart TVs
Google's Threat Intelligence Group, working with the FBI, Lumen and other partners, has disrupted NetNut — a residential...
SharePoint RCE CVE-2026-45659 Added to CISA KEV: A 'Less Likely' May Patch Is Now Actively Exploited
CISA added CVE-2026-45659, a CVSS 8.8 deserialization remote-code-execution flaw in on-premises Microsoft SharePoint Ser...
Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245: Netadmin-to-Root, Exploited for Months Before Disclosure
Cisco disclosed CVE-2026-20245 on 5 June 2026, a high-severity command-injection flaw in Catalyst SD-WAN Manager that Ma...
FortiBleed: FortiGate Credential Exposure Hits Tens of Thousands of Devices — And It Is Not a New CVE
FortiBleed is a large-scale credential-exposure campaign against internet-facing Fortinet FortiGate firewalls and SSL VP...
Linux 'pedit COW' (CVE-2026-46331) Hands Local Users Root via Page-Cache Corruption — Patch and Reboot
CVE-2026-46331, nicknamed pedit COW, is a Linux kernel local privilege-escalation flaw in the traffic-control act_pedit...
PTC Windchill and FlexPLM RCE CVE-2026-12569 Is Under Active Attack — Patch Now and Hunt for Webshells
CISA added CVE-2026-12569, a critical remote code execution flaw in PTC Windchill PDMLink and FlexPLM, to its Known Expl...
Advertisement