Top story
The n0n ransomware group listed 38 maritime and logistics firms on 12 October, among them Singapore's ONE and Apical, Indonesia's ILCS Pelindo, Vietnam's Nam Dinh Vu Port and India's NCT Kandla. None has confirmed a breach.
Read the story →An unauthenticated WordPress pingback can make the server decode attacker-supplied Brotli data, reaching CVE-2026-111497. Code execution is shown on one Docker image; the fix is a patched libbrotli, not a WordPress update.
Binance has finished the zero-knowledge proof for its 31 October reserves snapshot and plans the next withdrawal phase for 3 November. In the region, Thailand's SEC is monitoring exposure and Indodax says it closed a security gap.
CyberArk research finds 95% of Asia Pacific and Japan organisations suffered two or more identity breaches, with machine identities the least protected.
Group-IB flagged 500+ phishing IPs and 1,900+ malware IPs for INTERPOL's Operation Synergia, which led to 31 arrests and hundreds of C2 server takedowns.
Every connectivity piece of Cloudflare One, its single-vendor SASE platform, is now generally available, including the Magic WAN Connector branch appliance.
Lumen's managed EDR service for Asia Pacific: AI detection on laptops and PCs, automatic rollback, a 24/7 SOC line, and an IDC security assessment called X-Secure.
Tim Liu of Hillstone Networks names the shifts he expects in 2024: AI threats, cloud gaps, a wider attack surface, human error and digital trust.
Jumio's Frederic Ho argues that biometrics alone won't stop bank fraud in Malaysia without liveness checks and risk scoring on each login.
Norman Willox and Tom Patterson argue that steal-now-decrypt-later attacks make quantum-safe encryption urgent, and set out a four-step plan to prepare.
Keysight's Keith Bromley explains how a visibility architecture of taps and a network packet broker lets companies get more years out of existing security tools.
Tony Teo of NETSCOUT Arbor on how DDoS moved from volumetric floods to application and stateful attacks, and why criminals still rely on it.
Cybereason's Eric Nagel and PLDT and Smart CISO Angel Redoble explain the Defend Forward strategy, the Cyber Defenders Council and why people still decide the fight.
ManageEngine's Subhalakshmi Ganapathy explains why Southeast Asian firms are exposed to breaches and leaks, and what adaptive security requires.
Veritas's Gary Sievers on rising ransomware in Asia Pacific, the security gap left by COVID-era transformation, and a protect, detect and recover framework.
RMM tools are known for automating IT chores for managed service providers. N-able argues its N-sight platform also closes security gaps for their clients.
A Tenable survey of 1,500 security professionals shows how firms entering the metaverse rate the risk of deepfake avatars, eavesdropping and phishing.
Synthetic identity fraud blends real and invented personal details into a new person. Why banks in Southeast Asia struggle to spot it and what detection relies on.
Ransomware hit several Singapore organisations in 2021. Cohesity's Threat Defense, DataGovern and Project Fort Knox aim to put prevention first.
Mumbai's Mulund police arrested six people over a mule-account network that police link to 255 cyber fraud complaints worth about ₹72 crore. It began with a WhatsApp message impersonating a company owner.
Binance says it has been talking to the Securities Commission and Bank Negara Malaysia for 10 months about a licence, five years after it was ordered to stop operating there and weeks after the SC re-listed it.
Ransomware is encrypting Synology NAS boxes and renaming files .L0CK3D. Synology says attackers exploit a flaw patched in December 2024; Qihoo 360 points to two September 2026 bugs. Which DSM builds fix both.
Hunt.io found logs showing 27 database backups named after POEA and OFW systems were copied in September. The National Privacy Commission is investigating; DMW hasn't commented.
.webp)
