Topic
Endpoint security, and the flaws found in phones, IoT devices and connected cars.
CSA tells Singapore firms to take operational technology control systems off the public internet after attacks on supermarket fridges in Europe. It has no reports of similar incidents here.
Apple CVE-2024-27834, a WebKit flaw patched in May 2024, is now on CISA's exploited list. Sekoia found it in a chain stealing cookies from iPhones on iOS 16.0 to 17.4.
Android CVE-2026-58868 is a critical remote code execution flaw in the Framework that needs no user interaction. Phones need security patch level 2026-11-01 or later.
Cyberattack on French blood banks: settings on cold rooms holding plasma at three EFS sites were pushed to very high temperatures. No products were lost, the blood service says.
Google, Japan's National Police Agency and security firms have disrupted XCPE, a botnet of Android TV boxes that shipped with malware. Malaysia is among the countries with the most infected devices. Owners can't clean them.
Ransomware is encrypting Synology NAS boxes and renaming files .L0CK3D. Synology says attackers exploit a flaw patched in December 2024; Qihoo 360 points to two September 2026 bugs. Which DSM builds fix both.
iOS 18.7.11 closes CVE-2026-86950, a CoreGraphics flaw used in targeted attacks, on the iPhone XS, XS Max, XR and iPad 7th generation. Newer devices were fixed in September.
RMM tools are known for automating IT chores for managed service providers. N-able argues its N-sight platform also closes security gaps for their clients.
Lumen's managed EDR service for Asia Pacific: AI detection on laptops and PCs, automatic rollback, a 24/7 SOC line, and an IDC security assessment called X-Secure.
Flexxon extends its 2020 deal with Digi-Key Electronics to global distribution of the X-PHY Cybersecure SSD, sold with a subscription after a free first year.
GDEX, a Malaysian express delivery firm with 10,000 staff, has deployed BlackBerry's CylancePROTECT and CylanceOPTICS as it drops signature-based antivirus.
Keysight's Mike Hodge explains how UNECE WP.29, UN R155 and ISO/SAE 21434 push carmakers towards a cybersecurity management system and automated testing.
