Exchange Server Zero-Day CVE-2026-42897 — Crafted-Email XSS in OWA Exploited in the Wild
Microsoft disclosed CVE-2026-42897 on 14 May 2026 — an XSS spoofing flaw in Exchange OWA exploited via crafted email. CV...
Wire
ASEAN edition · Tue, 20 Oct 2026 · Signal over noise
Cybersecurity News
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
1091 articles
60 this week
14 desks
Health & Wellness
69
Cyber Threat Intel
57
Privacy & Data
48
Consumer Tech
46
Science
44
Cloud & Infra
28
Sustainability
18
Statistics
9
Advertisement
Megalodon Campaign Backdoors 5,561 GitHub Repos in Six Hours — Inside a Mass GitHub Actions Supply-Chain Attack
An automated campaign called Megalodon pushed 5,718 malicious commits to 5,561 GitHub repos on 18 May 2026, exfiltrating...
Anthropic's Project Glasswing Lines Up AWS, Apple, Google, Microsoft, JPMorgan to Test Mythos for Cyber Defence
Project Glasswing pairs Anthropic's restricted Mythos model with a roster of hyperscalers, banks and the Linux Foundatio...
EchoLeak: How a Zero-Click Prompt Injection in Microsoft 365 Copilot Exfiltrated Enterprise Data
EchoLeak (CVE-2025-32711), fixed by Microsoft in 2025, showed a malicious email could make Microsoft 365 Copilot leak en...
Anthropic Says It Disrupted the First Reported AI-Orchestrated Cyber-Espionage Campaign Using Claude
Anthropic's November 2025 report says a Chinese state-sponsored group it calls GTG-1002 used Claude Code to run 80-90% o...
CISA Orders Federal Agencies to Patch Linux Kernel "Copy Fail" Zero-Day Within Two Weeks
A 732-byte Python script is all an unprivileged local user needs to take root on Ubuntu 24.04, RHEL 10.1, SUSE 16 and ne...
Cisco Patches Sixth SD-WAN Zero-Day of 2026 — UAT-8616 Attribution from Talos
Cisco shipped an emergency advisory for CVE-2026-20182 on 15 May 2026, a peering authentication bypass in Catalyst SD-WA...
Google Documents First Observed AI-Developed Zero-Day Exploit Tied to a Planned Mass-Exploitation Campaign
Google's Threat Intelligence Group has described what it believes is the first case of an AI-developed zero-day exploit...
Iran's MuddyWater Used Microsoft Teams to Run a Fake Ransomware Attack — While Quietly Stealing Your Data
Iran-linked MuddyWater used unsolicited Microsoft Teams chats, screen-sharing, and credential-harvesting to conduct sust...
Critical Palo Alto Firewall Zero-Day Actively Exploited by State-Sponsored Hackers — CISA Orders Patch by 9 May
CVE-2026-0300, a critical PAN-OS buffer overflow enabling unauthenticated root-level RCE, is being actively exploited by...
ShinyHunters Breach Instructure Canvas: 275 Million Students' Data Stolen in One of Education's Largest Ever Cyberattacks
Hacking group ShinyHunters claims to have stolen data on 275 million people from Canvas LMS operator Instructure, exposi...
South Korean Coupang Breach Hit 33.7 Million Users — What It Means for ASEAN E-Commerce
South Korean e-commerce platform Coupang disclosed a data breach affecting 33.7 million customer accounts in late Novemb...
ASEAN Cyberattacks Doubled in 2024 — Manufacturing, Government and Finance Were the Targets
Cyberattacks in ASEAN doubled in 2024 vs 2023, with 67% of all incidents concentrated in a single year. Here is the full...
AI Is Now Writing Malware: How LLMs Have Become the New Hacker's IDE
Large language models are now being used to write functional malware, generate exploit code, and automate attack campaig...
Bank Syariah Indonesia Ransomware Attack: LockBit's 15 Million Record Claim and the Lessons It Left
LockBit ransomware attacked Bank Syariah Indonesia in May 2023, disrupting services and claiming data on about 15 millio...
Qilin Ransomware Hit Kuala Lumpur International Airport — Malaysia Said No to $10 Million
Qilin ransomware hit Kuala Lumpur International Airport in March 2025, demanding $10 million. PM Anwar Ibrahim refused t...
Prasarana Malaysia Breach: RansomHub Claimed 316GB From the Company Running KL's Buses and Trains
RansomHub ransomware group claimed to have stolen 316GB from Prasarana Malaysia, the company running Kuala Lumpur's buse...
Malaysia Topped Southeast Asia for Web Threats in 2024 — 19.62 Million Detections in Six Months
Kaspersky detected 19.62 million web-based threats in Malaysia in H1 2024, the most in Southeast Asia. Here is what the...
Singapore Lost S$1.1 Billion to Scams in 2024 — AI Voice Cloning Is Making It Worse
Singapore lost S$1.1 billion to scams in 2024. AI voice cloning and deepfakes are making traditional awareness-based def...
Anthropic's Project Glasswing Found a 27-Year-Old Bug in OpenBSD — Before Hackers Could
Anthropic's Project Glasswing used an unreleased frontier model to find thousands of high-severity vulnerabilities — inc...
Sonatype Counts 454,600 New Malicious Packages in 2025 — And AI Coding Agents Widen the Risk
Sonatype identified more than 454,600 new malicious open-source packages in 2025. Here is what developers need to know,...
Nation-State Hackers Are Now Using AI — What It Means for ASEAN Critical Infrastructure
State-backed hackers are using AI to speed up reconnaissance, vulnerability research and attack development. Here is wha...
AI Is Making Phishing Emails Harder to Tell Apart From Legitimate Ones
Large language models let attackers write fluent, personalised phishing at scale. Here is what employees and businesses...
AI Coding Tools Are Creating Security Debt Faster Than Developers Can Fix It — Singapore Security Voices Warn
Security voices in Singapore warn that AI coding tools are producing code faster than most organisations can review it,...
Advertisement