Singapore Warns of Malware Spreading Through Hijacked WhatsApp Accounts
Singapore's CSA warns of malware sent as business documents from compromised WhatsApp accounts. It hijacks WhatsApp Web, steals credentials and watches online banking.
Section
Daily News page 4
Fore Coffee Breach: Up to 5.7 Million Indonesian Customer Accounts Exposed
Indonesian chain Fore Coffee says an outsider got into its customer-data platform. Names, contacts, birth dates, addresses, hashed PINs and order history may be exposed; payment data was not.
Tampered Ledger Wallets Sold in Singapore Stores Cost Buyers About S$3.5 Million
Singapore police say two buyers of Ledger hardware wallets from local shops lost about S$3.5 million to devices fitted with malicious components. Ledger has paused sales across Southeast Asia.
Apple Patches Exploited CoreGraphics Zero-Day CVE-2026-86950 on iPhone XS and XR
iOS 18.7.11 closes CVE-2026-86950, a CoreGraphics flaw used in targeted attacks, on the iPhone XS, XS Max, XR and iPad 7th generation. Newer devices were fixed in September.
Brotli Flaw CVE-2026-111497 Now Exploited: Fixed Versions for Node.js, .NET, PAN-OS and Linux
A memory-corruption bug in Google's Brotli decoder is under active attack. Anything that decompresses Brotli data from outside needs the fixed library or runtime.
Alliance Medinet Breach Exposes Data of About 110,000 Singapore Members
Names, ID numbers and contact details of about 110,000 members of the Singapore managed-care provider were exposed. Insurers HSBC Life, Tokio Marine and Singlife are among those affected.
Vietnam Airlines Listed by The Gentlemen Ransomware Group
The Gentlemen added Vietnam Airlines to its leak site on 26 October with a countdown and no data sample. The airline hasn't commented.
US Charges Malaysian-Led Crew Over Madagascar Scam Compound Linked to Cambodia
Chui Kok Wa, a Malaysian national, and five co-defendants face US wire fraud conspiracy charges over an NFT dating scam run from Antananarivo.
Microsoft's Record October Patch Tuesday: 1,411 Fixes and a Windows Zero-Day Under Attack
Microsoft fixed a record 1,411 flaws in October, including an exploited Windows Shell zero-day. What to patch first and which Windows versions lost support.
Ransomware Gangs Are Exploiting Palo Alto GlobalProtect Flaw CVE-2026-0257
Unit 42 says Qilin and Inc ransomware crews use CVE-2026-0257 in PAN-OS GlobalProtect to get in. Patched in May, still hitting unpatched firewalls.
SBI Data Breach: Bank Finds 3,897 Customer Records in Dark Web Leak Claim
A hacker claimed 375,000 State Bank of India records. SBI says 3,897 customer records held personal data and it is contacting those customers.
Singapore Cybersecurity Strategy 2026: AI in Defence and Safeguards for AI Agents
Launched at Singapore International Cyber Week, the strategy adds a national cyber command centre and rules for autonomous AI agents.
