Philippines
Southeast Asia · capital Manila · cyber picture, physical security and relations with the EU on one page
Who targets Philippines
All 8 actors →
China (7) · 
Vietnam (1)| Actor | Suspected sponsor | In its news · 30d | Techniques |
|---|---|---|---|
| APT32 | Vietnam |
— | 78 |
| APT40 | China |
— | 50 |
| Earth Lusca | China |
— | 44 |
| LOTUS PANDA | China |
— | 21 |
| Naikon | China |
— | 14 |
| GOBLIN PANDA | China |
— | — |
| Hellsing | China |
— | — |
| TianWu | China |
— | — |
Cyber news 30 days
Every cyber article that mentions it →- PH strengthens international ties to address plight of Filipinos in scam hubs
- DOJ launches 'Sure Ka Na Ba?' campaign vs. online scams
- 10 Philippine Government Institutions Fall Victim to Data Leak ID
- Indonesian police arrest online scam suspects in Philippines
- AFP probes alleged data breach involving Air Force
- NPC confirms data breaches in DOJ, DICT, 8 other gov't agencies
- IT threat evolution in Q3 2026. Non-mobile statistics
- SEC probes data breach
- PNP chief orders cybercrime probe into socmed account impersonating him
- Negros First CyberCentre goes solar
Exploited vulnerabilities in its news 90 days
- CVE-2026-0257 Ransomware
- CVE-2026-63077 Ransomware
- CVE-2026-45659 Ransomware
- CVE-2026-59310 Ransomware
- CVE-2025-14733 Ransomware
- CVE-2026-15410 Ransomware
- CVE-2026-15409 Ransomware
- CVE-2025-60710 Ransomware
Incidents
Register →- Elevated 10 Philippine Government Institutions Fall Victim to Data Leak Detected
- Moderate SEC probes data breach Detected
- Elevated AFP probing into alleged Air Force data breach Detected
- Moderate BIR 'data leak' under gov't probe Detected
- Moderate OVP suffers alleged data leak – cybersecurity group Detected
- Elevated St. Luke’s Medical Center reports personal data breach Detected
- Elevated Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach Detected
- Moderate NPC probes data breach Detected
Cyber threat landscape as described in the country report of Nov 12 Machine-generated
The Philippines experienced a significant surge in cyber threats during this period, primarily characterized by widespread data breaches affecting numerous government institutions. On November 5-6, 2026, a coordinated series of cyberattacks targeted at least 10 Philippine government agencies, including the Department of Information and Communications Technology (DICT), the Office of the Vice President (OVP), the Presidential Commission on Good Government (PCGG), the Philippine Air Force (PAF), and the Bureau of Internal Revenue (BIR). Cybersecurity monitoring groups like Deep Web Konek reported these incidents, with threat actors such as "DeathNote Hackers" and "core849" claiming responsibility and invoking hacktivism motives. The National Privacy Commission (NPC) confirmed these breaches by November 10, 2026, and initiated investigations into the scope and impact of the compromised data, which included internal documents, personal information, and procurement records.
Adding to the concerns, the Securities and Exchange Commission (SEC) also confirmed a data breach on its digital platforms, detected on November 6, 2026. This incident potentially exposed sensitive individual profile information of registered users, such as names, usernames, emails, mobile numbers, birth dates, addresses, and Tax Identification Numbers (TINs). The SEC's initial assessment suggested that the compromise might have originated from malware infections or unauthorized access on users' own devices, rather than a direct breach of its internal databases. These incidents highlight critical vulnerabilities in the government's cyber defenses and the urgent need for enhanced security measures and inter-agency coordination. The Department of Information and Communications Technology (DICT) had previously warned of potential Distributed Denial of Service (DDoS) attacks around November 5, a date historically associated with hacktivist activities, although the reported incidents primarily involved data exfiltration.
Background: Threat actors known to target the Philippines include APT32 (Vietnam-linked), APT40 (China-linked), Earth Lusca (China-linked), LOTUS PANDA (China-linked), Naikon (China-linked), GOBLIN PANDA (China-linked), Hellsing (China-linked), and TianWu (China-linked). Exploited vulnerabilities named in its news (90 days) include CVE-2026-0257 (Palo Alto Networks PAN-OS), CVE-2026-63077 (JetBrains TeamCity), CVE-2026-45659 (Microsoft SharePoint Server), CVE-2026-59310 (Broadcom VMware vCenter), CVE-2025-14733 (WatchGuard Firebox), and CVE-2026-15410 (SonicWall SMA1000 Appliances).
Hotspots from the country report of Nov 12
Machine-generated- High Manila — Site of widespread government cyberattacks and host city for the upcoming ASEAN Summit, requiring extensive security deployments.
- High South China Sea — Ongoing territorial disputes with China, stalled Code of Conduct negotiations, and persistent maritime incidents.
- Elevated Western Luzon — Location of Philippine Marine Corps BrahMos missile deployments and strategic for coastal defense.
- High Scarborough Shoal — Continued maritime disputes and confrontations between Philippine and Chinese vessels.
- Elevated Luzon Strait — Strategically important waterway between the Philippines and Taiwan, subject to increased monitoring and military presence.
- Elevated Pasay City — Primary venue for the 49th ASEAN Summit, necessitating significant security measures.
Threat level last reports
Machine-generatedLatest country report
Read the full report →Relations with the EU
Factsheet →Mentioned 10 times in latest briefing. Last updated: 2026-08-10
- 16 EU cooperation projects · 13 active
- 2 EU Digital & ICT projects: cyber activity here touches EU digital cooperation
- 3 trade or cooperation agreements on record
EU relations and implications country report of Nov 12
Machine-generatedThe Philippines' relations with the European Union during this period were marked by significant progress in economic cooperation. In late September 2026, the EU and the Philippines reached "substantial agreement" in their negotiations for a Free Trade Agreement (FTA), a culmination of talks initiated a decade ago. This agreement is poised to deepen economic ties, unlock stronger trade and investment flows, and improve market access for both sides, with the Philippines representing a major market for EU exporters. While public procurement remains a point of negotiation, the overall outlook for the FTA is positive, signaling reinforced engagement between the EU and a strategic partner in the Indo-Pacific. This aligns with the assessed stable EU relationship outlook from August 2026 and supports ongoing EU cooperation projects in sectors like Trade & Investment, Development Cooperation, and Digital & ICT.
However, the widespread cyberattacks and data breaches affecting multiple Philippine government institutions from November 5-12, 2026, pose potential implications for EU interests and EU-funded cooperation, particularly in the digital sector. The EU has digital projects in the Philippines, such as the Digital Economy Package (Global Gateway) and SCOPE Digital – Copernicus Earth Observation Southeast Asia. The confirmed data leaks and the identified vulnerabilities highlight risks to data integrity and cybersecurity infrastructure, which could impact the secure implementation and effectiveness of these digital cooperation initiatives. While the EU approved a separate €15 million package in July to help Philippine forces monitor its waters, funding coastal radar, infrared surveillance equipment, and training, the recent cyber incidents underscore the urgent need for enhanced cybersecurity resilience and collaboration to safeguard shared digital interests and investments.
| Agreement | Type | Budget | Organisation | Period | Status | |
|---|---|---|---|---|---|---|
| ARISE Plus — ASEAN Regional Integration Support | Trade & Cooperation | EUR 94M | ASEAN | 2017–2024 | COMPLETED | Source ↗ |
| ASEAN Customs Transit System (ACTS) | Trade & Cooperation | — | ASEAN | 2020–2025 | ACTIVE | Source ↗ |
| EU-Philippines FTA Negotiations (Resumed) | Free Trade Agreement | — | ASEAN | 2024 | PLANNED | Source ↗ |
Previous reports
Machine-generated- Philippines Security Report — November 11, 2026
- Philippines Security Report — November 10, 2026
- Philippines Security Report — November 09, 2026
- Philippines Security Report — November 08, 2026
- Philippines Security Report — November 07, 2026
- Philippines Security Report — November 06, 2026
- Philippines Security Report — November 05, 2026
- Philippines Security Report — November 04, 2026
- Philippines Security Report — November 03, 2026
- Philippines Security Report — November 02, 2026