Incident register

Cyber incidents in Asia-Pacific with their sources, countries, sectors and relevance to the EU. Since September 12, 2026 they are detected by rules in the news after every fetch: Detected entries have not been reviewed by an analyst. How detection works

73Incidents in the period
26High or critical
6With a named actor
73Of high or medium EU relevance 56Detected, not reviewed
Reset

Incidents newest first

DateIncidentTypeCountriesActor named
Sep 4, 2026 High Google Patches Sixth Actively Exploited Chrome Zero-Day of 2026 EU medium Other India, Japan, Australia, South Korea Unattributed; browser zero-days of this class are…
Sep 4, 2026 High SecFlow Campaign Uses Commercial AI Agents Against Taiwanese and Indonesian Government Targets EU medium Espionage campaign China, Thailand, Vietnam, Indonesia +1 China (Chinese-speaking state-sponsored operators)
Sep 4, 2026 High North Korean 'ted' Linux Backdoor Found Inside Trojanised HAProxy at South Korean Firms EU medium Espionage campaign South Korea APT37
Sep 3, 2026 High Citrix NetScaler Authentication Bypass CVE-2026-19490 Under Active Attack EU high Other Australia Unattributed
Sep 2, 2026 Critical SonicWall SMA 1000 Zero-Day Chain Exploited for Remote Code Execution EU high Other Japan, Singapore, Australia Unattributed
Sep 1, 2026 Critical JFrog Artifactory flaws chained to administrator access and Rust backdoor deployment EU high Supply chain India, Japan Unattributed - multiple opportunistic clusters
Sep 1, 2026 High North Korea-linked backdoor found compiled inside HAProxy at two South Korean companies EU medium Espionage campaign South Korea APT37
Aug 31, 2026 High Russian-speaking actor uses hundreds of AI agents to exploit PaperCut across 48 countries EU high Other Australia Russian-speaking eCrime actor, unattributed to a …
Aug 28, 2026 Critical Four nation-state actors deploy shared BlueMoon Chrome and Windows zero-day exploit kit within twelve days EU medium APT activity Singapore, Vietnam, Indonesia APT31
Aug 25, 2026 High SafePay Ransomware Claims Air Liquide Korea EU medium Ransomware South Korea SafePay ransomware group
Aug 21, 2026 Moderate Gunra Ransomware Steals 150GB from Indonesian Agri-Biotech Manufacturer EU medium Ransomware Indonesia Gunra ransomware group
Aug 20, 2026 High China-linked SecFlow campaign uses AI agents against Asian government and industrial targets EU medium Espionage campaign China, Vietnam, Indonesia, Taiwan China-linked; Chinese-speaking operators tracked …
Aug 15, 2026 Critical Three threat clusters exploit Cisco Secure FMC flaws to steal credentials and deploy Qilin ransomware EU high Ransomware Australia Mixed - UAT-11823 deployed Sandworm-linked Cyclop…

Where

CriticalHighElevatedModerateLow Incidents are placed at the centre of their main country. Physical-security hotspots are on the Physical security page.