{
 "response": [
  {
   "Event": {
    "uuid": "059d0dba-e406-5be0-a972-e9b4145c31ab",
    "info": "Fullerton Health server supporting migrant worker care programme hit by cybersecurity incident",
    "date": "2026-11-11",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"other\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Health\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/fullerton-health-server-supporting-migrant-worker-care-programme-hit-b-20261111/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/fullerton-health-migrant-worker-care-plan-cybersecurity-incident-6541451",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/fullerton-health-server-hit-by-cyberattack-personal-data-of-migrant-workers-affected",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 2 articles in 2 outlets (Channel News Asia, The Straits Times), Nov 11, 2026. Type: other; sectors: health. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "8d8d7289-42ee-53df-a6b8-6de299cb49c4",
    "info": "Dementia Singapore app users' personal data potentially compromised in cyber incident",
    "date": "2026-11-11",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"intrusion\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Technology\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/dementia-singapore-app-users-personal-data-potentially-compromised-in-20261111/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/cara-app-dementia-singapore-cybersecurity-incident-6542871",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Nov 11, 2026. Type: intrusion; sectors: technology. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "2882ccb4-cf7a-57ea-b7db-ad34c3e3a0b5",
    "info": "SPH Media hit by cyberattacks; no payment card details or financial information compromised",
    "date": "2026-11-10",
    "threat_level_id": "1",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Financial Services\""
     },
     {
      "name": "misp-galaxy:sector=\"Media\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/sph-media-hit-by-cyberattacks-no-payment-card-details-or-financial-inf-20261110/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/politics/sph-media-hit-by-cyberattacks-no-payment-card-details-or-financial-information-compromised",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/sph-media-cyberattack-data-breach-6538681",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.freemalaysiatoday.com/category/highlight/2026/11/10/singapore-s-sph-media-hit-by-cyberattacks-personal-database-exposed",
      "comment": "Free Malaysia Today",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://mothership.sg/2026/11/sph-media-hit-by-ai-enabled-cyberattacks-subscribers-names-phone-numbers-accessed/",
      "comment": "Mothership",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 4 articles in 4 outlets (Channel News Asia, Free Malaysia Today, Mothership, The Straits Times), Nov 10, 2026. Type: data breach; sectors: financial services, media. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "879ec1e1-cadd-5677-92d5-d53dd777e840",
    "info": "Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected",
    "date": "2026-11-10",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Education\""
     },
     {
      "name": "misp-galaxy:sector=\"Technology\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/meal-ordering-app-tappee-suffers-cyber-breach-says-sats-four-schools-a-20261110/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/meal-ordering-app-tappee-suffers-cyber-breach-says-sats-four-schools-affected",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (The Straits Times), Nov 10, 2026. Type: data breach; sectors: education, technology. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "b12b1524-b34b-5ccd-a729-849b56d22293",
    "info": "M1 hit by data breach",
    "date": "2026-11-06",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/m1-hit-by-data-breach-20261106/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/m1-hit-by-data-breach",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/doctor-anywhere-hit-by-data-breach",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 2 articles in 1 outlet (The Straits Times), Nov 6, 2026. Type: data breach. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "da6319a8-040d-543f-87ec-1541b38ab162",
    "info": "MoneySmart data breach hits S’pore, HK users; IC numbers, financial info potentially exposed",
    "date": "2026-11-03",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"hong kong\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Financial Services\""
     },
     {
      "name": "misp-galaxy:sector=\"Technology\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/moneysmart-data-breach-hits-spore-hk-users-ic-numbers-financial-info-p-20261103/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/moneysmart-data-breach-hits-spore-hk-users-ic-numbers-financial-info-potentially-exposed",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/moneysmart-data-breach-security-incident-6515356",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://hongkongfp.com/2026/11/04/finance-portal-moneysmart-apologises-after-users-sensitive-data-accessed-in-it-system-hack/",
      "comment": "HK Free Press",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 3 articles in 3 outlets (Channel News Asia, HK Free Press, The Straits Times), Nov 3 to Nov 4, 2026. Type: data breach; sectors: financial services, technology. Asia-Pacific countries affected: Singapore, Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "a967416f-84ac-5091-9236-eec7739030c4",
    "info": "Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack",
    "date": "2026-10-30",
    "threat_level_id": "1",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"hong kong\""
     },
     {
      "name": "misp-galaxy:country=\"japan\""
     },
     {
      "name": "misp-galaxy:country=\"malaysia\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:country=\"thailand\""
     },
     {
      "name": "misp-galaxy:sector=\"Transportation\""
     },
     {
      "name": "misp-galaxy:sector=\"Technology\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/cathay-pacific-says-data-from-53000-bookings-compromised-in-amadeus-cy-20261030/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.scmp.com/news/hong-kong/transport/article/3372722/cathay-pacific-says-data-53000-bookings-compromised-amadeus-cyberattack",
      "comment": "South China Morning Post",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.malaymail.com/news/malaysia/2026/11/01/malaysia-airlines-warns-customers-of-data-exposure-in-amadeus-cybersecurity-breach/241516",
      "comment": "Malay Mail",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/46000-sia-booking-records-accessed-illegally-in-data-breach-affecting-software-provider-amadeus",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/sia-singapore-airlines-amadeus-data-breach-booking-records-6517151",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.matichon.co.th/economy/news_5969157",
      "comment": "Matichon",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.bangkokpost.com/thailand/general/3352180/60000-thai-bookings-compromised-in-amadeus-breach",
      "comment": "Bangkok Post",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://thethaiger.com/news/world/aviation/thai-airways-confirms-passenger-data-leak-but-credit-card-details-safe",
      "comment": "The Thaiger",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.matichon.co.th/economy/news_5969937",
      "comment": "Matichon",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 8 articles in 7 outlets (Bangkok Post, Channel News Asia, Malay Mail, Matichon, South China Morning Post, The Straits Times and others), Oct 30 to Nov 10, 2026. Type: data breach; sectors: transportation, technology. Asia-Pacific countries affected: Thailand, Japan, Singapore, Hong Kong, Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "165ee562-bf50-5d12-8dc7-39c3386769b5",
    "info": "No further compromise to Alliance Medinet’s system, hacker access blocked, says parent company",
    "date": "2026-10-27",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"intrusion\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/no-further-compromise-to-alliance-medinets-system-hacker-access-blocke-20261027/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/no-further-compromise-to-alliance-medinets-system-hacker-access-blocked-says-parent-company",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (The Straits Times), Oct 27, 2026. Type: intrusion. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "49681c3d-bfc2-5e03-af18-5b9eb800449b",
    "info": "Singapore embraces AI for cyber defence, with one caveat: breach transparency",
    "date": "2026-10-25",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"australia\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Defence\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/singapore-embraces-ai-for-cyber-defence-with-one-caveat-breach-transpa-20261025/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.scmp.com/week-asia/politics/article/3371950/singapore-embraces-ai-cyber-defence-one-caveat-breach-transparency",
      "comment": "South China Morning Post",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Oct 25, 2026. Type: data breach; sectors: defence. Asia-Pacific countries affected: Singapore, Australia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "2a9529b7-7fe0-536b-86b9-2f2b1423e747",
    "info": "Personal data of 110,000 members compromised in Alliance Medinet cyber incident",
    "date": "2026-10-24",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/personal-data-of-110000-members-compromised-in-alliance-medinet-cyber-20261024/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/cyber-incident-alliance-medinet-6489076",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/alliance-medinet-alliance-healthcare-group-unauthorised-access-route-secured-data-breach-6496186",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 2 articles in 1 outlet (Channel News Asia), Oct 24 to Oct 27, 2026. Type: data breach. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "a91a3c0d-3726-56c2-ba46-715ef719e627",
    "info": "Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat",
    "date": "2026-10-22",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"exploitation\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/singapore-organisations-urged-to-patch-critical-php-flaws-immediately-20261022/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/php-vulnerabilities-csa-singapore-firms-cybersecurity-6482006",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Oct 22, 2026. Type: exploitation. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "449b3606-2a73-5176-b6df-07f0f06ba2a8",
    "info": "National Youth Council mistakenly leaks personal data of 600 SG Youth Forum participants",
    "date": "2026-10-13",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Government\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/national-youth-council-mistakenly-leaks-personal-data-of-600-sg-youth-20261013/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/courts-crime/national-youth-council-mistakenly-leaks-personal-data-of-600-sg-youth-forum-participants",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (The Straits Times), Oct 13, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "6f5156f9-5f9e-5456-8f92-230a38cf55c6",
    "info": "South Korean president orders probe into data leaks across financial industry",
    "date": "2026-10-04",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Government\""
     },
     {
      "name": "misp-galaxy:sector=\"Financial Services\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/south-korean-president-orders-probe-into-data-leaks-across-financial-i-20261004/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/asia/south-korea-president-orders-probe-data-leaks-financial-industry-6430516",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Oct 4, 2026. Type: data breach; sectors: government, financial services. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "c7ef06ef-f31b-5c18-a387-e666987d3f5f",
    "info": "Bee Cheng Hiang customers’ e-mail addresses exposed in first case of AI-related data breach in S’pore",
    "date": "2026-09-30",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/bee-cheng-hiang-customers-e-mail-addresses-exposed-in-first-case-of-ai-20260930/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/tech/bad-ai-prompt-exposes-bee-cheng-hiang-customers-e-mail-addresses-in-first-case-of-ai-related-data",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/bee-cheng-hiang-data-breach-ai-pdpc-emails-6421711",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 2 articles in 2 outlets (Channel News Asia, The Straits Times), Sep 30, 2026. Type: data breach. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "9d70c832-ef53-58c0-ae83-a70f38bb55a0",
    "info": "More than 23,500 Simba customers affected in data breach involving IC numbers, birth dates",
    "date": "2026-09-27",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/more-than-23500-simba-customers-affected-in-data-breach-involving-ic-n-20260927/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/more-23500-simba-customers-affected-in-data-breach-involving-ic-numbers-birth-dates-6413636",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/personal-information-of-over-23500-simba-customers-leaked-in-data-breach",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://mothership.sg/2026/09/simba-data-breach-ic-phone-numbers/",
      "comment": "Mothership",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 3 articles in 3 outlets (Channel News Asia, Mothership, The Straits Times), Sep 27 to Sep 28, 2026. Type: data breach. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "bb33be26-9cb1-55d1-813e-f1315b7600ad",
    "info": "North Korean cybercriminals linked to $352M heist from crypto exchange Bitget",
    "date": "2026-09-25",
    "threat_level_id": "1",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"crypto_theft\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:country=\"vietnam\""
     },
     {
      "name": "misp-galaxy:sector=\"Cryptocurrency\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/north-korean-cybercriminals-linked-to-352m-heist-from-crypto-exchange-20260925/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.nknews.org/pro/north-korean-cybercriminals-linked-to-352m-heist-from-crypto-exchange-bitget/",
      "comment": "NK Pro",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/business/crypto-exchange-bitget-pauses-withdrawals-after-350-million-stolen-in-hack-6410806",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://thanhnien.vn/gia-bitcoin-hom-nay-2892026-tin-tac-tau-tan-xong-83-trieu-usd-trong-vu-hack-bitget-185260928081934906.htm",
      "comment": "Thanh Nien News",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://thanhnien.vn/ceo-bitget-khong-may-lac-quan-ve-kha-nang-thu-hoi-3875-trieu-usd-bi-hack-185260930112333106.htm",
      "comment": "Thanh Nien News",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 4 articles in 3 outlets (Channel News Asia, NK Pro, Thanh Nien News), Sep 25 to Sep 30, 2026. Type: cryptocurrency theft; sectors: cryptocurrency. Asia-Pacific countries affected: Vietnam, Singapore. Largest figure in the headlines: 352,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "3a247528-c110-53bd-b87a-2b6a76eacef6",
    "info": "Gemini hacked three companies in first known breakout by Google's AI",
    "date": "2026-09-18",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"intrusion\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/gemini-hacked-three-companies-in-first-known-breakout-by-googles-ai-20260918/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/business/gemini-hacked-three-companies-in-first-known-breakout-googles-ai-6396036",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Sep 18, 2026. Type: intrusion. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "e196dacf-d3d9-5640-ae76-cdb124f2af2a",
    "info": "Ex-HDB group director accused of breaching its database 161 times",
    "date": "2026-09-16",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/ex-hdb-group-director-accused-of-breaching-its-database-161-times-20260916/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/hdb-former-group-director-breach-database-obtain-information-6388441",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Sep 16, 2026. Type: data breach. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "c2b4cedc-2441-5b02-8455-2fc84aaa9cc9",
    "info": "Payroll system of mosques, madrasahs hit by ransomware; staff details potentially compromised",
    "date": "2026-09-15",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"ransomware\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/payroll-system-of-mosques-madrasahs-hit-by-ransomware-staff-details-po-20260915/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/courts-crime/payroll-system-of-mosques-madrasahs-hit-by-ransomware-staff-details-potentially-compromised",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (The Straits Times), Sep 15, 2026. Type: ransomware. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "8ce1cbff-9538-5b42-bccc-c10bef9fa864",
    "info": "MUIS says human resource management system hit by cybersecurity incident",
    "date": "2026-09-15",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"ransomware\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/muis-says-human-resource-management-system-hit-by-cybersecurity-incide-20260915/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/muis-human-resource-payroll-management-system-cyberattack-6386546",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/no-evidence-large-amount-of-data-compromised-from-hr-system-hit-by-ransomware-says-muis",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 2 articles in 2 outlets (Channel News Asia, The Straits Times), Sep 15 to Sep 17, 2026. Type: ransomware. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "c3a3cbb8-d115-5b62-ac52-2b710e0fa9b9",
    "info": "CenterPoint Energy discloses customer data breach in SEC filing",
    "date": "2026-09-14",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Energy\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/centerpoint-energy-discloses-customer-data-breach-in-sec-filing-20260914/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/business/centerpoint-energy-discloses-customer-data-breach-in-sec-filing-6384491",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Sep 14, 2026. Type: data breach; sectors: energy. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "1a2cb03c-a257-5861-8325-1839d810c1be",
    "info": "Revolut confirms sensitive customer data breach, falling for fake government requests",
    "date": "2026-09-12",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Government\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/revolut-confirms-sensitive-customer-data-breach-falling-for-fake-gover-20260912/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/business/revolut-confirms-sensitive-customer-data-breach-falling-fake-government-requests-6380536",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Sep 12, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "df93c624-4dac-5413-a1f3-71ded88e6b63",
    "info": "GitLab maximum-severity path traversal exploited within hours of disclosure",
    "date": "2026-09-11",
    "threat_level_id": "1",
    "analysis": "2",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"curated\""
     },
     {
      "name": "securitystudies:type=\"supply_chain\""
     },
     {
      "name": "misp-galaxy:country=\"united states\""
     },
     {
      "name": "misp-galaxy:country=\"united kingdom\""
     },
     {
      "name": "misp-galaxy:country=\"germany\""
     },
     {
      "name": "misp-galaxy:country=\"japan\""
     },
     {
      "name": "misp-galaxy:country=\"india\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Technology and Software Supply Chain\""
     },
     {
      "name": "misp-galaxy:sector=\"Financial Services\""
     },
     {
      "name": "misp-galaxy:sector=\"Government\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/gitlab-maximum-severity-path-traversal-exploited-within-hours-of-disclosure/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://thehackernews.com/2026/09/gitlab-cvss-10-file-read-flaw-draws-in.html",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.cisa.gov/news-events/alerts/2026/09/11/cisa-adds-one-known-exploited-vulnerability-catalog",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "CVE-2026-85706, a CVSS 10.0 unauthenticated path traversal in the GitLab repository commits API, came under in-the-wild probing from 06:00 UTC on 11 September 2026 according to watchTowr, the same day CISA added it to the KEV catalog. Exploitation requires only that a single public project exists and allows arbitrary file reads of logs, configuration files, credentials and secrets. Successful exploitation creates a direct path to source code theft and CI/CD pipeline compromise. Patches are available in 19.3.2, 19.2.6 and 19.1.8, with a 14 September federal remediation deadline.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "6d6d10d1-508f-5d26-829f-159c5a2f5a31",
    "info": "Dutch NCSC warns critical Check Point VPN flaws face imminent exploitation",
    "date": "2026-09-09",
    "threat_level_id": "1",
    "analysis": "2",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"curated\""
     },
     {
      "name": "securitystudies:type=\"other\""
     },
     {
      "name": "misp-galaxy:country=\"netherlands\""
     },
     {
      "name": "misp-galaxy:country=\"germany\""
     },
     {
      "name": "misp-galaxy:country=\"united kingdom\""
     },
     {
      "name": "misp-galaxy:country=\"japan\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:country=\"australia\""
     },
     {
      "name": "misp-galaxy:sector=\"Government\""
     },
     {
      "name": "misp-galaxy:sector=\"Financial Services\""
     },
     {
      "name": "misp-galaxy:sector=\"Critical Infrastructure\""
     },
     {
      "name": "misp-galaxy:sector=\"Manufacturing\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/dutch-ncsc-warns-critical-check-point-vpn-flaws-face-imminent-exploitation/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "The Dutch National Cyber Security Centre issued a warning that exploitation of CVE-2026-85102 and CVE-2026-85103 in Check Point VPN Security Gateway and Security Management Servers is imminent, assessing both likelihood and impact as high. CVE-2026-85102 is an improper certificate validation flaw during VPN negotiation enabling arbitrary code execution, while CVE-2026-85103 is a heap overflow in the VPN certificate ASN.1 decoder permitting remote code execution; both are rated 9.8. Affected versions include R81.20, R82, R82.10, R81.10.x and R82.00.x plus end-of-support R80 through R81.10, with R82.20 unaffected. No public exploit code existed at time of reporting and neither CVE appears in the CISA KEV catalog as of version 2026.09.11. Patches shipped 9 September 2026.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "77b198ef-5ab0-5a24-b4fb-c6ca80d2ebc7",
    "info": "SonicWall SMA 1000 Zero-Day Chain Exploited for Remote Code Execution",
    "date": "2026-09-02",
    "threat_level_id": "1",
    "analysis": "2",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"curated\""
     },
     {
      "name": "securitystudies:type=\"other\""
     },
     {
      "name": "misp-galaxy:country=\"united states\""
     },
     {
      "name": "misp-galaxy:country=\"australia\""
     },
     {
      "name": "misp-galaxy:country=\"germany\""
     },
     {
      "name": "misp-galaxy:country=\"japan\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Government\""
     },
     {
      "name": "misp-galaxy:sector=\"Technology\""
     },
     {
      "name": "misp-galaxy:sector=\"Financial Services\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/sonicwall-sma-1000-zero-day-chain-exploited-for-remote-code-execution/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-actively-exploited-sma1000-zero-day-flaws/",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "SonicWall disclosed that threat actors are chaining two previously unknown vulnerabilities in SMA 1000 remote-access appliances. CVE-2026-83548, a CVSS 10.0 pre-authentication server-side request forgery in the WorkPlace interface, is used to reach internal functionality, and CVE-2026-83549, a CVSS 7.8 OS command injection in the Appliance Management Console, converts that access into arbitrary command execution. CISA added both to the Known Exploited Vulnerabilities catalogue on 2 September 2026 with a remediation deadline of 5 September. Compromise of these appliances yields authenticated network position behind perimeter controls.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "7c4fd82c-a984-5d50-abdc-b98dedbb7e04",
    "info": "Four nation-state actors deploy shared BlueMoon Chrome and Windows zero-day exploit kit within twelve days",
    "date": "2026-08-28",
    "threat_level_id": "1",
    "analysis": "2",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"curated\""
     },
     {
      "name": "securitystudies:type=\"apt\""
     },
     {
      "name": "misp-galaxy:threat-actor=\"APT31\""
     },
     {
      "name": "misp-galaxy:country=\"united states\""
     },
     {
      "name": "misp-galaxy:country=\"vietnam\""
     },
     {
      "name": "misp-galaxy:country=\"indonesia\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Government\""
     },
     {
      "name": "misp-galaxy:sector=\"Non-Governmental Organisations\""
     },
     {
      "name": "misp-galaxy:sector=\"Financial Services\""
     },
     {
      "name": "misp-galaxy:sector=\"Manufacturing\""
     },
     {
      "name": "misp-galaxy:sector=\"Mining and Commodities\""
     },
     {
      "name": "misp-galaxy:sector=\"Consulting\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/four-nation-state-actors-deploy-shared-bluemoon-chrome-and-windows-zero-day-exploit-kit-within-twelve-days/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securityaffairs.com/198783/apt/four-nation-state-actors-used-the-same-chrome-zero-day-exploit-kit-within-12-days.html",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.cisa.gov/news-events/alerts/2026/09/04/cisa-adds-one-known-exploited-vulnerability-catalog",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "TA412 (APT31) and three suspected China-aligned clusters tracked as UNK_LateNight, UNK_DoubleCheck and UNK_QuietRacket independently deployed the same exploit chain combining Chrome V8 type confusion CVE-2026-85046, an unnamed V8 sandbox escape and Windows kernel privilege escalation CVE-2026-85880. TA412 activity began on 28 August 2026 against US NGOs, mining companies and commodity traders; the other clusters followed from 2 September, hitting Vietnamese manufacturing and then Indonesian and Singaporean government, consulting and financial entities. The Chromium patch had been public since 7 August but Chrome stable only shipped on 3 September, giving the actors a wide exploitation window. The convergence on one kit points to a shared exploit broker or quartermaster.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "d2795c2b-3198-57f2-be34-4960c872b853",
    "info": "Krybit Ransomware Publishes 114GB from Singapore Clinic Group",
    "date": "2026-08-21",
    "threat_level_id": "1",
    "analysis": "2",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"curated\""
     },
     {
      "name": "securitystudies:type=\"ransomware\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"healthcare\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/krybit-ransomware-publishes-114gb-from-singapore-clinic-group/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.cyfirma.com/news/weekly-intelligence-report-21-aug-2026/",
      "comment": "source",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "A private primary healthcare group operating 11 clinics across Singapore was compromised by the Krybit ransomware operation, with approximately 114.15 GB of data exfiltrated and published on the group's leak site in August 2026. The leak exposes sensitive patient and clinical data amid a wave of ransomware activity that has made Singapore healthcare a prime regional target.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  }
 ]
}