Incident register
Cyber incidents in Asia-Pacific with their sources, countries, sectors and relevance to the EU. Since September 12, 2026 they are detected by rules in the news after every fetch: Detected entries have not been reviewed by an analyst. How detection works
262Incidents in the period
36High or critical
11With a named actor
75Of high or medium EU relevance
243Detected, not reviewed
Incidents newest first
| Date | Incident | Type | Countries | Actor named |
|---|---|---|---|---|
| Sep 15, 2026 | Moderate Coupang forms security panel after massive data breach
Detected
2 articles |
Data breach | South Korea | — |
| Sep 14, 2026 | Elevated CenterPoint Energy discloses customer data breach in SEC filing
Detected
1 article |
Data breach | Singapore | — |
| Sep 12, 2026 | Elevated Revolut confirms sensitive customer data breach, falling for fake government requests
Detected
1 article |
Data breach | Singapore | — |
| Sep 11, 2026 | Critical GitLab maximum-severity path traversal exploited within hours of disclosure EU high | Supply chain | India, Japan, Singapore | Unattributed - opportunistic mass exploitation |
| Sep 9, 2026 | High Dutch NCSC warns critical Check Point VPN flaws face imminent exploitation EU high | Other | Japan, Singapore, Australia | No confirmed threat actor; pre-exploitation advis… |
| Sep 5, 2026 | High Qilin ransomware compromises the Philippine Ports Authority EU medium | Ransomware | Philippines | Qilin ransomware-as-a-service affiliate |
| Sep 4, 2026 | Critical Unpatched StyleSmuggler Zero-Day Exploited Across Magento and Adobe Commerce Stores EU high | Other | Japan, Australia | Unattributed |
| Sep 4, 2026 | High Google Patches Sixth Actively Exploited Chrome Zero-Day of 2026 EU medium | Other | India, Japan, Australia, South Korea | Unattributed; browser zero-days of this class are… |
| Sep 4, 2026 | High SecFlow Campaign Uses Commercial AI Agents Against Taiwanese and Indonesian Government Targets EU medium | Espionage campaign | China, Thailand, Vietnam, Indonesia +1 | China (Chinese-speaking state-sponsored operators) |
| Sep 4, 2026 | High North Korean 'ted' Linux Backdoor Found Inside Trojanised HAProxy at South Korean Firms EU medium | Espionage campaign | South Korea | APT37 |
| Sep 3, 2026 | High Citrix NetScaler Authentication Bypass CVE-2026-19490 Under Active Attack EU high | Other | Australia | Unattributed |
| Sep 2, 2026 | Critical SonicWall SMA 1000 Zero-Day Chain Exploited for Remote Code Execution EU high | Other | Japan, Singapore, Australia | Unattributed |
| Sep 1, 2026 | Critical JFrog Artifactory flaws chained to administrator access and Rust backdoor deployment EU high | Supply chain | India, Japan | Unattributed - multiple opportunistic clusters |
| Sep 1, 2026 | High North Korea-linked backdoor found compiled inside HAProxy at two South Korean companies EU medium | Espionage campaign | South Korea | APT37 |
| Aug 31, 2026 | High Russian-speaking actor uses hundreds of AI agents to exploit PaperCut across 48 countries EU high | Other | Australia | Russian-speaking eCrime actor, unattributed to a … |
| Aug 28, 2026 | Critical Four nation-state actors deploy shared BlueMoon Chrome and Windows zero-day exploit kit within twelve days EU medium | APT activity | Singapore, Vietnam, Indonesia | APT31 |
| Aug 25, 2026 | High SafePay Ransomware Claims Air Liquide Korea EU medium | Ransomware | South Korea | SafePay ransomware group |
| Aug 21, 2026 | High Krybit Ransomware Publishes 114GB from Singapore Clinic Group | Ransomware | Singapore | Krybit ransomware group |
| Aug 21, 2026 | Moderate Gunra Ransomware Steals 150GB from Indonesian Agri-Biotech Manufacturer EU medium | Ransomware | Indonesia | Gunra ransomware group |
| Aug 20, 2026 | High China-linked SecFlow campaign uses AI agents against Asian government and industrial targets EU medium | Espionage campaign | China, Vietnam, Indonesia, Taiwan | China-linked; Chinese-speaking operators tracked … |
| Aug 17, 2026 | Moderate Quest Aparthotel Chain Exposes Guest PII via Third-Party Breach | Data breach | Australia | — |
| Aug 15, 2026 | Critical Three threat clusters exploit Cisco Secure FMC flaws to steal credentials and deploy Qilin ransomware EU high | Ransomware | Australia | Mixed - UAT-11823 deployed Sandworm-linked Cyclop… |