One Trojan, Three Lures: MyCERT Warns of Android Banking Malware Hitting Maybank and CIMB Users
MyCERT's 6 June advisory details an active Android banking-trojan campaign using three lure brands — Delivery4U, KerjaEx...
Wire
ASEAN edition · Tue, 20 Oct 2026 · Signal over noise
Cybersecurity News
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
1091 articles
60 this week
14 desks
Health & Wellness
69
Cyber Threat Intel
57
Privacy & Data
48
Consumer Tech
46
Science
44
Cloud & Infra
28
Sustainability
18
Statistics
9
Advertisement
SolarWinds Serv-U Enters CISA KEV After Active Exploitation Warning
SolarWinds Serv-U CVE-2026-28318 is now in CISA’s Known Exploited Vulnerabilities catalogue after a June 2026 hotfix. Th...
CSA Flags GlobalProtect Auth-Bypass CVE-2026-0257 as Critical While Attackers Forge VPN Cookies in the Wild
Singapore's CSA rates a GlobalProtect authentication-bypass flaw critical (9.1) — sterner than Palo Alto's own HIGH rati...
Singapore Reviews Binding Cyber Obligations for Interconnected Non-CII Systems
The Cyber Security Agency of Singapore is evaluating whether to extend regulatory requirements to non-critical informati...
Cisco Unified CM SSRF Flaw Needs Fast Action Where WebDialer Is Enabled
Cisco has patched CVE-2026-20230, a Unified CM and Unified CM SME server-side request forgery flaw that can lead to root...
Google’s June Android Patch Fixes a Zero-Day Under Targeted Exploitation
Google’s June 2026 Android security bulletin includes CVE-2025-48595, a Framework vulnerability flagged for limited, tar...
LiteSpeed cPanel Plugin Zero-Day CVE-2026-48172: Maximum-Severity Root Escalation Under Active Exploitation
CVE-2026-48172 in the LiteSpeed User-End cPanel Plugin carries a CVSS v4.0 score of 10.0 and was added to CISA's KEV cat...
CERT-In Urges 12-Hour Patching Window as AI Shrinks Exploit Timelines to Hours
India's CERT-In has told organisations to patch, mitigate or isolate known-exploited flaws on internet-facing systems wi...
Cisco Patches Sixth SD-WAN Zero-Day of 2026 as UAT-8616 Gains Admin Access via CVSS 10.0 Auth Bypass
Cisco has disclosed CVE-2026-20182, a CVSS 10.0 authentication bypass in its Catalyst SD-WAN Controller and the sixth ex...
Microsoft Exchange OWA Zero-Day CVE-2026-42897 Actively Exploited With No Permanent Patch
Microsoft confirmed active exploitation of CVE-2026-42897, an XSS flaw in Exchange's Outlook Web Access, on 14 May 2026...
Nova Ransomware Claims Indonesia's National Food Agency in Latest Government Sector Hit
Nova ransomware listed Badan Pangan Nasional (Bapanas), Indonesia's National Food Agency, on its leak site on 29 May 202...
VNCERT: SOC Systems Failed to Catch Breaches at Two Vietnamese Ministries, Millions of Records Allegedly Stolen
Vietnam's national cybersecurity authority said on 22 May 2026 that hackers breached two ministerial-level agencies and...
Morpheus Ransomware Group Claims 680 GB Theft from HDFC AMC; Bombay HC Issues Temporary Injunction
On 16 May 2026 HDFC AMC's IT administrator detected anomalies in the company's infrastructure and received an extortion...
The breaches confirmed this week needed no zero-day. The perimeter is identity now.
Two large companies confirmed this week that social-engineering attacks took millions of customer records, and a firewal...
Bugs to Patch Now: A Critical OTRS Flaw and a Linux Root Hole on CISA's List
A short, practical read of two urgent vulnerabilities: a critical pre-authentication flaw in the OTRS service desk, and...
CISA orders agencies to patch an actively exploited Palo Alto firewall flaw by 1 June
Attackers are exploiting a flaw in Palo Alto Networks' PAN-OS that lets them slip past security controls and open an una...
No Zero-Day Required: Charter and Carnival Confirm Breaches as ShinyHunters Claims Both
Charter and Carnival confirmed breaches days apart, and ShinyHunters claims both. Carnival is notifying nearly six milli...
SHADOW-EARTH-053: China-Aligned Espionage Campaign Hits Government and Defence-Linked Networks Across ASEAN and Beyond
TrendAI says China-aligned SHADOW-EARTH-053 has targeted government and critical infrastructure in eight countries since...
Threat Brief, Week of 18 May 2026: Suspected State-Backed Espionage in Malaysia, a Malware-Signing Takedown, and the Defender Itself Under Fire
Our weekly threat read: suspected state-backed espionage against Malaysian government networks, a Microsoft malware-sign...
An LLM Agent Drove This Real Intrusion: Marimo RCE to Database Dump in Under an Hour
On 10 May an internet-exposed marimo notebook was breached through CVE-2026-39987 — and then an autonomous LLM agent too...
The AI SOC arms race lands in ASEAN: Flocks, Claude, and the agentic security stack of mid-2026
On 6 May 2026, ThreatBook launched Flocks and SafeSkill into an AI SOC category that already includes Claude-backed Acce...
Two Supply-Chain Incidents This Week: Megalodon and the Laravel-Lang Composer Compromise
Megalodon pushed 5,718 malicious commits into 5,561 GitHub repos in six hours. Four Laravel-Lang Composer packages were...
Laravel-Lang Supply Chain Attack — Hundreds of Versions Backdoored Across Four Repos in a Composer-Autoload Trick
On 22 May 2026, an attacker rewrote version tags across the Laravel-Lang ecosystem to deliver a 5,900-line PHP credentia...
Instructure Reaches Agreement With ShinyHunters After Canvas Breach Exposes 275 Million Records Across 8,809 Schools
After ShinyHunters stole 3.65TB of data from 8,809 schools using the Canvas LMS, Instructure reached an agreement with t...
Advertisement