Section
Cyber news for Southeast Asia and India, published daily: breaches and ransomware claims, scam-centre prosecutions, regulators and courts, plus the worldwide flaws that need patching now.
Binance's first incident report traces the 29 October theft to a fake job interview, a tampered Homebrew install and a compromised internal AI tool, ending in abuse of Ethereum's EIP-7702. About $2.85bn is frozen.
Financial comparison site MoneySmart says customer data in Singapore and Hong Kong was copied from its systems. Hong Kong's PCPD puts it at about 305,000 local records; Singapore's PDPC is investigating.
People's Party leader Natthaphong Ruengpanyawut and Democrat leader Abhisit Vejjajiva say Apple warned them of spyware attacks on their iPhones. The digital economy minister says Pegasus isn't confirmed and will raise it at the National Security Council.
Singapore's Ministry of Home Affairs has introduced a bill making reformative training or imprisonment the default for scam and scam-enabling offenders aged 21 and below, after the High Court swapped such sentences for probation.
Google, Japan's National Police Agency and security firms have disrupted XCPE, a botnet of Android TV boxes that shipped with malware. Malaysia is among the countries with the most infected devices. Owners can't clean them.
The n0n ransomware group listed 38 maritime and logistics firms on 12 October, among them Singapore's ONE and Apical, Indonesia's ILCS Pelindo, Vietnam's Nam Dinh Vu Port and India's NCT Kandla. None has confirmed a breach.
An unauthenticated WordPress pingback can make the server decode attacker-supplied Brotli data, reaching CVE-2026-111497. Code execution is shown on one Docker image; the fix is a patched libbrotli, not a WordPress update.
Binance has finished the zero-knowledge proof for its 31 October reserves snapshot and plans the next withdrawal phase for 3 November. In the region, Thailand's SEC is monitoring exposure and Indodax says it closed a security gap.
Mumbai's Mulund police arrested six people over a mule-account network that police link to 255 cyber fraud complaints worth about ₹72 crore. It began with a WhatsApp message impersonating a company owner.
Binance says it has been talking to the Securities Commission and Bank Negara Malaysia for 10 months about a licence, five years after it was ordered to stop operating there and weeks after the SC re-listed it.
Ransomware is encrypting Synology NAS boxes and renaming files .L0CK3D. Synology says attackers exploit a flaw patched in December 2024; Qihoo 360 points to two September 2026 bugs. Which DSM builds fix both.
Hunt.io found logs showing 27 database backups named after POEA and OFW systems were copied in September. The National Privacy Commission is investigating; DMW hasn't commented.
