Incident register
Cyber incidents in Asia-Pacific with their sources, countries, sectors and relevance to the EU. Since September 12, 2026 they are detected by rules in the news after every fetch: Detected entries have not been reviewed by an analyst. How detection works
255Incidents in the period
36High or critical
11With a named actor
73Of high or medium EU relevance
236Detected, not reviewed
Incidents newest first
| Date | Incident | Type | Countries | Actor named |
|---|---|---|---|---|
| Sep 4, 2026 | High Google Patches Sixth Actively Exploited Chrome Zero-Day of 2026 EU medium | Other | India, Japan, Australia, South Korea | Unattributed; browser zero-days of this class are… |
| Sep 4, 2026 | High SecFlow Campaign Uses Commercial AI Agents Against Taiwanese and Indonesian Government Targets EU medium | Espionage campaign | China, Thailand, Vietnam, Indonesia +1 | China (Chinese-speaking state-sponsored operators) |
| Sep 4, 2026 | High North Korean 'ted' Linux Backdoor Found Inside Trojanised HAProxy at South Korean Firms EU medium | Espionage campaign | South Korea | APT37 |
| Sep 3, 2026 | High Citrix NetScaler Authentication Bypass CVE-2026-19490 Under Active Attack EU high | Other | Australia | Unattributed |
| Sep 2, 2026 | Critical SonicWall SMA 1000 Zero-Day Chain Exploited for Remote Code Execution EU high | Other | Japan, Singapore, Australia | Unattributed |
| Sep 1, 2026 | Critical JFrog Artifactory flaws chained to administrator access and Rust backdoor deployment EU high | Supply chain | India, Japan | Unattributed - multiple opportunistic clusters |
| Sep 1, 2026 | High North Korea-linked backdoor found compiled inside HAProxy at two South Korean companies EU medium | Espionage campaign | South Korea | APT37 |
| Aug 31, 2026 | High Russian-speaking actor uses hundreds of AI agents to exploit PaperCut across 48 countries EU high | Other | Australia | Russian-speaking eCrime actor, unattributed to a … |
| Aug 28, 2026 | Critical Four nation-state actors deploy shared BlueMoon Chrome and Windows zero-day exploit kit within twelve days EU medium | APT activity | Singapore, Vietnam, Indonesia | APT31 |
| Aug 25, 2026 | High SafePay Ransomware Claims Air Liquide Korea EU medium | Ransomware | South Korea | SafePay ransomware group |
| Aug 21, 2026 | High Krybit Ransomware Publishes 114GB from Singapore Clinic Group | Ransomware | Singapore | Krybit ransomware group |
| Aug 21, 2026 | Moderate Gunra Ransomware Steals 150GB from Indonesian Agri-Biotech Manufacturer EU medium | Ransomware | Indonesia | Gunra ransomware group |
| Aug 20, 2026 | High China-linked SecFlow campaign uses AI agents against Asian government and industrial targets EU medium | Espionage campaign | China, Vietnam, Indonesia, Taiwan | China-linked; Chinese-speaking operators tracked … |
| Aug 17, 2026 | Moderate Quest Aparthotel Chain Exposes Guest PII via Third-Party Breach | Data breach | Australia | — |
| Aug 15, 2026 | Critical Three threat clusters exploit Cisco Secure FMC flaws to steal credentials and deploy Qilin ransomware EU high | Ransomware | Australia | Mixed - UAT-11823 deployed Sandworm-linked Cyclop… |