Incident register
Cyber incidents in Asia-Pacific with their sources, countries, sectors and relevance to the EU. Since September 12, 2026 they are detected by rules in the news after every fetch: Detected entries have not been reviewed by an analyst. How detection works
80Incidents in the period
33High or critical
10With a named actor
80Of high or medium EU relevance
56Detected, not reviewed
Incidents newest first
| Date | Incident | Type | Countries | Actor named |
|---|---|---|---|---|
| Sep 4, 2026 | High Google Patches Sixth Actively Exploited Chrome Zero-Day of 2026 EU medium | Other | India, Japan, Australia, South Korea | Unattributed; browser zero-days of this class are… |
| Sep 4, 2026 | High SecFlow Campaign Uses Commercial AI Agents Against Taiwanese and Indonesian Government Targets EU medium | Espionage campaign | China, Thailand, Vietnam, Indonesia +1 | China (Chinese-speaking state-sponsored operators) |
| Sep 4, 2026 | High North Korean 'ted' Linux Backdoor Found Inside Trojanised HAProxy at South Korean Firms EU medium | Espionage campaign | South Korea | APT37 |
| Sep 3, 2026 | High Citrix NetScaler Authentication Bypass CVE-2026-19490 Under Active Attack EU high | Other | Australia | Unattributed |
| Sep 2, 2026 | Critical SonicWall SMA 1000 Zero-Day Chain Exploited for Remote Code Execution EU high | Other | Japan, Singapore, Australia | Unattributed |
| Sep 1, 2026 | Critical JFrog Artifactory flaws chained to administrator access and Rust backdoor deployment EU high | Supply chain | India, Japan | Unattributed - multiple opportunistic clusters |
| Sep 1, 2026 | High North Korea-linked backdoor found compiled inside HAProxy at two South Korean companies EU medium | Espionage campaign | South Korea | APT37 |
| Aug 31, 2026 | High Russian-speaking actor uses hundreds of AI agents to exploit PaperCut across 48 countries EU high | Other | Australia | Russian-speaking eCrime actor, unattributed to a … |
| Aug 28, 2026 | Critical Four nation-state actors deploy shared BlueMoon Chrome and Windows zero-day exploit kit within twelve days EU medium | APT activity | Singapore, Vietnam, Indonesia | APT31 |
| Aug 25, 2026 | High SafePay Ransomware Claims Air Liquide Korea EU medium | Ransomware | South Korea | SafePay ransomware group |
| Aug 21, 2026 | Moderate Gunra Ransomware Steals 150GB from Indonesian Agri-Biotech Manufacturer EU medium | Ransomware | Indonesia | Gunra ransomware group |
| Aug 20, 2026 | High China-linked SecFlow campaign uses AI agents against Asian government and industrial targets EU medium | Espionage campaign | China, Vietnam, Indonesia, Taiwan | China-linked; Chinese-speaking operators tracked … |
| Aug 15, 2026 | Critical Three threat clusters exploit Cisco Secure FMC flaws to steal credentials and deploy Qilin ransomware EU high | Ransomware | Australia | Mixed - UAT-11823 deployed Sandworm-linked Cyclop… |
| Aug 14, 2026 | High Philippine SMS Provider Breach Allegedly Exposes 160 Million Messages EU medium | Data breach | Philippines | — |
| Jul 1, 2026 | High Anthropic disrupts APT29-linked GTG-20006 AI-assisted malware rebuild operation EU high | Espionage campaign | Japan | APT29 |
| Jun 3, 2026 | Critical Vietnam-linked APIS database exposes 220.8 million passenger and crew records EU medium | Data breach | Vietnam | Unattributed - security misconfiguration, no conf… |
| May 5, 2026 | High Massive DDoS Attack on Philippine Election Infrastructure EU medium | DDoS | Philippines | Unknown (suspected hacktivist / state-proxy) |
| Apr 28, 2026 | Critical Lazarus Group Cryptocurrency Exchange Heist — Singapore EU high | APT activity | Japan, Singapore, South Korea | Lazarus Group |
| Oct 15, 2025 | High Earth Alux Espionage Campaign Targets ASEAN Defense Ministries EU medium | Espionage campaign | Thailand, Vietnam, Philippines, Malaysia | Earth Alux |
| Sep 15, 2024 | Critical Salt Typhoon Telecom Espionage Campaign — Ongoing EU medium | Espionage campaign | Japan, Australia, Thailand, Philippines +2 | GhostEmperor |