Archive
Indonesian police have named former police chief Listyo Sigit Prabowo and two senior officers as suspects in the illegal tapping of President Prabowo Subianto's phone number.
Philippine police raided a Pasay City scam hub on 3 November, rescuing 159 foreigners. Workers posed as Indonesian and Vietnamese police to scare parcel recipients into moving money.
CISA lists WordPress core flaw CVE-2026-119977 as exploited. A race during full-package core updates can give an unauthenticated attacker code execution; 7.1.4 and backports fix it.
Malaysia cyberattack warning: PM Anwar Ibrahim told Parliament the country is a potential target after a National Security Council meeting. He named no attacker or Malaysian incident.
Singapore Airlines Amadeus data breach: about 46,000 SIA booking records were accessed through Amadeus, and 620 may include contact and travel document details. No card or bank data, SIA says.
Binance's first incident report traces the 29 October theft to a fake job interview, a tampered Homebrew install and a compromised internal AI tool, ending in abuse of Ethereum's EIP-7702. About $2.85bn is frozen.
Financial comparison site MoneySmart says customer data in Singapore and Hong Kong was copied from its systems. Hong Kong's PCPD puts it at about 305,000 local records; Singapore's PDPC is investigating.
People's Party leader Natthaphong Ruengpanyawut and Democrat leader Abhisit Vejjajiva say Apple warned them of spyware attacks on their iPhones. The digital economy minister says Pegasus isn't confirmed and will raise it at the National Security Council.
Singapore's Ministry of Home Affairs has introduced a bill making reformative training or imprisonment the default for scam and scam-enabling offenders aged 21 and below, after the High Court swapped such sentences for probation.
Google, Japan's National Police Agency and security firms have disrupted XCPE, a botnet of Android TV boxes that shipped with malware. Malaysia is among the countries with the most infected devices. Owners can't clean them.
The n0n ransomware group listed 38 maritime and logistics firms on 12 October, among them Singapore's ONE and Apical, Indonesia's ILCS Pelindo, Vietnam's Nam Dinh Vu Port and India's NCT Kandla. None has confirmed a breach.
An unauthenticated WordPress pingback can make the server decode attacker-supplied Brotli data, reaching CVE-2026-111497. Code execution is shown on one Docker image; the fix is a patched libbrotli, not a WordPress update.
