MediumMalwareActive· updated Nov 6
Following Google's disclosure of the XCPE botnet, cybersecurity vendor TrendAI published observations from June 3 to October 1 showing approximately 1.
12 results
Following Google's disclosure of the XCPE botnet, cybersecurity vendor TrendAI published observations from June 3 to October 1 showing approximately 1.
Vulone disclosed on Oct 18 that a China-linked, financially motivated operator built an AI-agent intrusion platform on the open-source Cairn framework and ran 66 operations between Sep 24 and Oct 14, 48 of which reached at least session-level access .
According to BleepingComputer, an Advance Passenger Information System (APIS) database linked to a Vietnamese organization was accessible online through chained misconfigurations, holding about 220 million passenger and crew records from January 2017 to April 2026, including passport numbers and flight details .
According to The Nation, citing confirmation from the Thailand Securities Depository (TSD), unauthorized access to its Investor Portal exposed personal and account information belonging to approximately 200,000 investors .
Diamond Electric Holdings announced that its Thai subsidiary suffered unauthorized access on September 8, 2025, resulting in local servers and several personal computers being encrypted by ransomware .
Official Vietnamese communications indicated that a personal data incident occurred at the National Credit Information Center (CIC) .
According to The Record, citing confirmation from the Permanent Secretary of Thailand's Ministry of Labour, the ministry's website was compromised and defaced before being briefly taken offline and restored .
According to The Nation, citing Thailand's personal data protection regulator, Bangchak discovered unauthorized access to its customer feedback system on April 9, 2025 .
The Cyber Security Agency of Singapore (CSA) and the Monetary Authority of Singapore (MAS) issued a joint statement regarding a ransomware attack on printing vendor Toppan Next Tech .
Hanwa Co.
Malaysia's Ministry of Digital announced that the Personal Data Protection Commissioner has launched an investigation into a recent cybersecurity incident at national public transport operator Prasarana Malaysia Berhad .
The Maritime Industry Authority (MARINA) of the Philippines announced that its network systems experienced a cyberattack and that an investigation is ongoing .