Section
Cyber news for Southeast Asia and India, published daily: breaches and ransomware claims, scam-centre prosecutions, regulators and courts, plus the worldwide flaws that need patching now.
Indonesia financial sector malware attacks: the Hirudo trojan swaps bank apps for patched copies, threat-map counts hit 1.2 million a day and parliament will summon BSSN.
IBM Aspera Faspex CVE-2026-123218 lets a crafted message grant full admin rights on Faspex 5.0.0 to 5.0.19. CISA listed it as exploited on 9 November; 5.0.19 PL1 fixes it.
OpenSSH CVE-2026-123158, the password bypass on Alpine Linux servers without PAM, is being exploited. CISA added it to its exploited list on 9 November.
FreeSWITCH CVE-2026-116779 lets an inbound SIP MESSAGE run API and OS commands on the server. CISA added it to its exploited list on 9 November; 1.11.3 fixes it.
Bank Indonesia cyber alert: the central bank told payment operators to tighten security and report incidents faster on 9 November, as OJK and BI activated a joint response team.
BIR hacked claims now put the leak at more than 10 million taxpayers. The figure is unverified, and the bureau said on 9 November it is still assessing the situation.
Fraud charges in Singapore: four men are accused of pledging a home as collateral for over S$6 million in loans without its owner knowing, using a forged NRIC.
SEC Philippines data leak: the corporate regulator has told users of its online portals that their names, contact details and tax ID numbers were exposed.
Bank of Thailand cyber attacks response: the central bank met every bank's CIO on 9 November, moved attack reporting to daily and ordered payment-system drills.
Thailand cyber threat alert: the National Security Council is raising monitoring of critical systems and asking companies to check control systems after Europe's fridge attacks.
NACSA XCPE warning: Malaysia's cyber agency says Android TV boxes can arrive with malware in their firmware that a factory reset won't remove. It named no brands.
Coretax data breach claim: a seller called Marlanwg offers access to Indonesia's tax system and 10.5 million tax return records. The tax office has not confirmed it.
