The Backdoor Checks a Private GitHub Repository for Orders
Zscaler's Operation RapidRust report finds APT36 running a Rust implant over the GitHub API, with commands issued only o...
ASEAN edition · Tue, 22 Sep 2026 · Signal over noise
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
Zscaler's Operation RapidRust report finds APT36 running a Rust implant over the GitHub API, with commands issued only o...
The copy happened in May. Nobody knew until the repositories turned up on a criminal forum in September, and no control...
The modem is a separate computer that answers to the mobile network, not to you. Nothing has to be opened, clicked or do...
Mistakes a decade or more old, in networking code read by thousands of people, found in months by a researcher whose AI...
CHOSEN BRICK gives every victim their own Telegram bot. The NCSC, FBI and AIVD signed one advisory and stopped at differ...
Infected machines never connect to the attacker. They subscribe to a topic on a message broker and wait. About a dozen v...
Eleven organisations fell in 26 seconds, and schools took 204 of the 395 victims. The gap between landing on a box and o...
The extension blocked ads by routing traffic through its own proxies, and forwarded each viewer's login token as it pass...
Login details went up over the weekend and the state will not say whether they still work. Researchers trace the intrusi...
Microsoft says the operators used generative AI to tailor each one and filled the signatures with real executive names....
JFrog Artifactory builds your software, ConnectWise ScreenConnect reaches into your machines and MikroTik RouterOS route...
Talos found Sandworm's implant, Qilin ransomware and a third intruder inside Secure Firewall Management Center. The espi...
A crafted link was enough. An input method editor is downstream of every application on the machine, and this one is ins...
CISA's exploited-vulnerability catalogue has taken 37 new entries in 30 days, including this week's Citrix NetScaler aut...
CVE-2026-85046 is a V8 type confusion patched in Chrome 152 with a CISA deadline of 18 September. Across all browsers th...
Fifty-seven attacks caused physical damage in 2025. Ransomware flat-lined while nation-state and hacktivist attacks roug...
Unit 42 describes agents running reconnaissance through to CI/CD hijacking in under ten hours. The 80-page report left b...
A campaign that ran in 2016 and 2017 reaches court next month. It targeted freelancers, a population whose work makes th...
Sality has no command server to seize, so investigators poisoned the peer lists instead and let the botnet's own houseke...
Sygnia has documented an espionage group running fake services on Cisco routers during alternating hours. The authentica...
The exploits were ordinary: a token-refresh flaw, an HDF5 bug, a template injection. What was not ordinary was two month...
Google patched 1,072 Chrome bugs in June against 1,036 in the prior two years. Whether that drains the exploit supply de...
The advisory that published the fix is what told attackers where to look, and the draining began the following day. The...
The agency confirmed an incident on a standalone system and the Justice Department designated it major, a statutory cate...