Skip to content
Saturday, 7 November 2026Threat Detection & DefenceCyber SafetyDevices & IoTIdentity & AccessCloud Security
Wire
01SonicWall SSLVPN Flaw CVE-2026-19868 Lets Fallback Credentials Bypass SAML and MFA, CISA Lists It as Exploited02Lam Yong Yan Deported From Vietnam, Arrested at Changi Over Phnom Penh Scam Syndicate Linked to S$53 Million in Losses03Bank Rakyat Websites Defaced by 'Marlanwg', Which Claims Access to the Bank's Internal Systems04M1 Data Breach Exposes Customers' NRIC Numbers, Addresses and Phone Numbers

About Cybersecurity ASEAN: How We Choose, Check and Publish the News

Who publishes Cybersecurity ASEAN, how our monitoring software picks stories for Southeast Asia and India, how each fact is checked, how we use AI and how we correct mistakes.

Cybersecurity ASEAN is a daily cybersecurity news desk for Southeast Asia and India. Every story carries one byline, "Cybersecurity ASEAN editors"; there are no individual bylines. To reach the editors, see contact details.

What we cover

The region comes first: breaches at companies and agencies in ASEAN and India, ransomware claims against them, scams and scam-centre cases, regulators, courts and new laws. From the rest of the world we report what security teams here have to act on, such as actively exploited flaws, additions to CISA's Known Exploited Vulnerabilities catalogue and bugs in widely used firewalls, VPNs and server software. We don't cover funding rounds, product launches or conference announcements.

How stories are picked

We run our own monitoring software. Several times a day it reads security feeds from CISA, national CERTs, vendors such as Palo Alto Networks, Cisco and Fortinet, and threat research teams. It also follows security discussions on Hacker News, Bluesky and Reddit, including the Singapore, Malaysia and Philippines subreddits. It ranks what it finds by how much it matters to readers in the region. The editors decide which stories to run.

How a story is checked

Each precise fact (a version number, a count, a date, a sum) links to the page it came from, in the same sentence. We go to the primary source first: the vendor advisory, the regulator's order, the court filing, the company's own statement. A claim made by attackers, for example on a ransomware leak site, is reported as a claim, with who made it and whether the victim has confirmed it. When something isn't known, the story says so.

Patch stories end with what to install, by product and version. Breach stories give advice only where the company or the regulator gave it.

How we use AI

We use AI tools to research, draft and check stories, and two separate AI reviewers read each one against these standards before it goes out.

Corrections

Corrections go to [email protected]. Send the link and what's wrong. We check the claim against its source and, if the story is wrong, fix it and add an "Updated" date beside the original one.

Advertising

Advertising on the site is labelled as sponsored. Advertisers don't see or change news stories before they're published.

The archive

Below the news sits an archive from 2018 to 2024: vendor announcements, opinion pieces and interviews published on this domain before the daily desk began in October 2026. Those articles were rewritten in our own words from their original sources, with promotional calls to action removed.