Cyber threats

Incident register

Cyber incidents in Asia-Pacific with their sources, countries, sectors and relevance to the EU. Since September 12, 2026 they are detected by rules in the news after every fetch: Detected entries have not been reviewed by an analyst. How detection works

CSV STIX 2.1 MISP
33Incidents in the period
33High or critical
9With a named actor
33Of high or medium EU relevance 10Detected, not reviewed
Reset

Incidents newest first

DateIncidentTypeCountriesActor named
Nov 10, 2026 High SPH Media hit by cyberattacks; no payment card details or financial information compromised Detected EU medium
4 articles
 Data breach Singapore —
Nov 5, 2026 High Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns Detected EU medium
2 articles
 Espionage campaign Thailand, South Korea, Cambodia, Hong Kong Storm-0940
Nov 4, 2026 High No evidence of customer data leak in unauthorized transactions: SinoPac Detected EU medium
3 articles
 Data breach Taiwan —
Oct 30, 2026 Critical Binance TH pauses crypto transfers, says Thai funds safe after hack Detected EU medium
35 articles
 Cryptocurrency theft Thailand, South Korea TraderTraitor
Oct 30, 2026 High Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack Detected EU medium
8 articles
 Data breach Japan, Singapore, Thailand, Malaysia +1 —
Oct 21, 2026 High Unauthorized access: 'Possibility that the stage has shifted to targeting financial institutions' Detected EU medium
1 article
 Espionage campaign Japan —
Oct 10, 2026 High Man loses over RM12mil in suspected crypto theft Detected EU medium
2 articles
 Cryptocurrency theft Malaysia —
Oct 8, 2026 Critical South Korea bank hack suspect may be 26-year-old in China, U.S. firm says Detected EU medium
4 articles
 Espionage campaign China —
Oct 7, 2026 High Online-only lenders KakaoBank and Kbank are latest targets of cyberattacks on Korean banks Detected EU medium
1 article
 Espionage campaign South Korea —
Sep 25, 2026 High North Korean cybercriminals linked to $352M heist from crypto exchange Bitget Detected EU medium
4 articles
 Cryptocurrency theft Singapore, Vietnam —
Sep 11, 2026 Critical GitLab maximum-severity path traversal exploited within hours of disclosure EU high Supply chain India, Japan, Singapore Unattributed - opportunistic mass exploitation
Sep 9, 2026 High Dutch NCSC warns critical Check Point VPN flaws face imminent exploitation EU high Other Japan, Singapore, Australia No confirmed threat actor; pre-exploitation advis…
Sep 5, 2026 High Qilin ransomware compromises the Philippine Ports Authority EU medium Ransomware Philippines Qilin ransomware-as-a-service affiliate
Sep 4, 2026 Critical Unpatched StyleSmuggler Zero-Day Exploited Across Magento and Adobe Commerce Stores EU high Other Japan, Australia Unattributed
Sep 4, 2026 High Google Patches Sixth Actively Exploited Chrome Zero-Day of 2026 EU medium Other India, Japan, Australia, South Korea Unattributed; browser zero-days of this class are…
Sep 4, 2026 High SecFlow Campaign Uses Commercial AI Agents Against Taiwanese and Indonesian Government Targets EU medium Espionage campaign China, Thailand, Vietnam, Indonesia +1 China (Chinese-speaking state-sponsored operators)
Sep 4, 2026 High North Korean 'ted' Linux Backdoor Found Inside Trojanised HAProxy at South Korean Firms EU medium Espionage campaign South Korea APT37
Sep 3, 2026 High Citrix NetScaler Authentication Bypass CVE-2026-19490 Under Active Attack EU high Other Australia Unattributed
Sep 2, 2026 Critical SonicWall SMA 1000 Zero-Day Chain Exploited for Remote Code Execution EU high Other Japan, Singapore, Australia Unattributed
Sep 1, 2026 Critical JFrog Artifactory flaws chained to administrator access and Rust backdoor deployment EU high Supply chain India, Japan Unattributed - multiple opportunistic clusters
Sep 1, 2026 High North Korea-linked backdoor found compiled inside HAProxy at two South Korean companies EU medium Espionage campaign South Korea APT37
Aug 31, 2026 High Russian-speaking actor uses hundreds of AI agents to exploit PaperCut across 48 countries EU high Other Australia Russian-speaking eCrime actor, unattributed to a …
Aug 28, 2026 Critical Four nation-state actors deploy shared BlueMoon Chrome and Windows zero-day exploit kit within twelve days EU medium APT activity Singapore, Vietnam, Indonesia APT31
Aug 25, 2026 High SafePay Ransomware Claims Air Liquide Korea EU medium Ransomware South Korea SafePay ransomware group
Aug 20, 2026 High China-linked SecFlow campaign uses AI agents against Asian government and industrial targets EU medium Espionage campaign China, Vietnam, Indonesia, Taiwan China-linked; Chinese-speaking operators tracked …
Aug 15, 2026 Critical Three threat clusters exploit Cisco Secure FMC flaws to steal credentials and deploy Qilin ransomware EU high Ransomware Australia Mixed - UAT-11823 deployed Sandworm-linked Cyclop…
Aug 14, 2026 High Philippine SMS Provider Breach Allegedly Exposes 160 Million Messages EU medium Data breach Philippines —
Jul 1, 2026 High Anthropic disrupts APT29-linked GTG-20006 AI-assisted malware rebuild operation EU high Espionage campaign Japan APT29
Jun 3, 2026 Critical Vietnam-linked APIS database exposes 220.8 million passenger and crew records EU medium Data breach Vietnam Unattributed - security misconfiguration, no conf…
May 5, 2026 High Massive DDoS Attack on Philippine Election Infrastructure EU medium DDoS Philippines Unknown (suspected hacktivist / state-proxy)
Apr 28, 2026 Critical Lazarus Group Cryptocurrency Exchange Heist — Singapore EU high APT activity Japan, Singapore, South Korea Lazarus Group
Oct 15, 2025 High Earth Alux Espionage Campaign Targets ASEAN Defense Ministries EU medium Espionage campaign Thailand, Vietnam, Philippines, Malaysia Earth Alux
Sep 15, 2024 Critical Salt Typhoon Telecom Espionage Campaign — Ongoing EU medium Espionage campaign Japan, Australia, Thailand, Philippines +2 GhostEmperor

Where

CriticalHighElevatedModerateLow Incidents are placed at the centre of their main country. Physical-security hotspots are on the Physical security page.