Incident register
Cyber incidents in Asia-Pacific with their sources, countries, sectors and relevance to the EU. Since September 12, 2026 they are detected by rules in the news after every fetch: Detected entries have not been reviewed by an analyst. How detection works
36Incidents in the period
36High or critical
7With a named actor
26Of high or medium EU relevance
19Detected, not reviewed
Incidents newest first
| Date | Incident | Type | Countries | Actor named |
|---|---|---|---|---|
| Nov 12, 2026 | High PHP2Shell Exploitation on Check Point Gateway
Detected
1 article |
Exploitation | UTA0178 | |
| Nov 12, 2026 | High Ministry of Digital Affairs: AI helps hackers launch cyberattacks, over a dozen companies have 8 million personal data records leaked
Detected
1 article |
Data breach | Taiwan | — |
| Nov 10, 2026 | High SPH Media hit by cyberattacks; no payment card details or financial information compromised
Detected
EU medium
4 articles |
Data breach | Singapore | — |
| Nov 9, 2026 | High SonicWall SSL-VPN authentication bypass vulnerability exploited in actual attacks, multi-factor authentication also neutralized
Detected
1 article |
Exploitation | South Korea | — |
| Nov 5, 2026 | High Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns
Detected
EU medium
2 articles |
Espionage campaign | Thailand, South Korea, Cambodia, Hong Kong | Storm-0940 |
| Nov 4, 2026 | High No evidence of customer data leak in unauthorized transactions: SinoPac
Detected
EU medium
3 articles |
Data breach | Taiwan | — |
| Nov 2, 2026 | High Personal information of Lee, presidential staff leaked: report
Detected
11 articles |
Data breach | South Korea | — |
| Oct 30, 2026 | Critical Binance TH pauses crypto transfers, says Thai funds safe after hack
Detected
EU medium
35 articles |
Cryptocurrency theft | Thailand, South Korea | TraderTraitor |
| Oct 30, 2026 | High Foreign Ministry hit by hacking, along with ANA, Muji brand operator
Detected
4 articles |
Data breach | Japan | — |
| Oct 30, 2026 | High Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack
Detected
EU medium
8 articles |
Data breach | Japan, Singapore, Thailand, Malaysia +1 | — |
| Oct 29, 2026 | High Puma Shen's vehicle campaign system hacked; National Security Bureau mobilizes to investigate CCP election interference
Detected
1 article |
Espionage campaign | — | |
| Oct 27, 2026 | High First-time voter lottery target Yakira hit by cyberattack; Chiang office and KMT councilors show support: Do not create a chilling effect
Detected
1 article |
Espionage campaign | Taiwan | — |
| Oct 21, 2026 | High Unauthorized access: 'Possibility that the stage has shifted to targeting financial institutions'
Detected
EU medium
1 article |
Espionage campaign | Japan | — |
| Oct 16, 2026 | High Yamato Transport confirms 5.31 mil customer records leaked
Detected
2 articles |
Data breach | Japan | — |
| Oct 15, 2026 | High ARMORY CASTLE Exploits BeyondTrust
Detected
1 article |
Exploitation | UTA0178 | |
| Oct 10, 2026 | High Man loses over RM12mil in suspected crypto theft
Detected
EU medium
2 articles |
Cryptocurrency theft | Malaysia | — |
| Oct 8, 2026 | Critical South Korea bank hack suspect may be 26-year-old in China, U.S. firm says
Detected
EU medium
4 articles |
Espionage campaign | China | — |
| Oct 7, 2026 | High Online-only lenders KakaoBank and Kbank are latest targets of cyberattacks on Korean banks
Detected
EU medium
1 article |
Espionage campaign | South Korea | — |
| Sep 25, 2026 | High North Korean cybercriminals linked to $352M heist from crypto exchange Bitget
Detected
EU medium
4 articles |
Cryptocurrency theft | Singapore, Vietnam | — |
| Sep 11, 2026 | Critical GitLab maximum-severity path traversal exploited within hours of disclosure EU high | Supply chain | India, Japan, Singapore | Unattributed - opportunistic mass exploitation |
| Sep 9, 2026 | High Dutch NCSC warns critical Check Point VPN flaws face imminent exploitation EU high | Other | Japan, Singapore, Australia | No confirmed threat actor; pre-exploitation advis… |
| Sep 5, 2026 | High Qilin ransomware compromises the Philippine Ports Authority EU medium | Ransomware | Philippines | Qilin ransomware-as-a-service affiliate |
| Sep 4, 2026 | Critical Unpatched StyleSmuggler Zero-Day Exploited Across Magento and Adobe Commerce Stores EU high | Other | Japan, Australia | Unattributed |
| Sep 4, 2026 | High Google Patches Sixth Actively Exploited Chrome Zero-Day of 2026 EU medium | Other | India, Japan, Australia, South Korea | Unattributed; browser zero-days of this class are… |
| Sep 4, 2026 | High SecFlow Campaign Uses Commercial AI Agents Against Taiwanese and Indonesian Government Targets EU medium | Espionage campaign | China, Thailand, Vietnam, Indonesia +1 | China (Chinese-speaking state-sponsored operators) |
| Sep 4, 2026 | High North Korean 'ted' Linux Backdoor Found Inside Trojanised HAProxy at South Korean Firms EU medium | Espionage campaign | South Korea | APT37 |
| Sep 3, 2026 | High Citrix NetScaler Authentication Bypass CVE-2026-19490 Under Active Attack EU high | Other | Australia | Unattributed |
| Sep 2, 2026 | Critical SonicWall SMA 1000 Zero-Day Chain Exploited for Remote Code Execution EU high | Other | Japan, Singapore, Australia | Unattributed |
| Sep 1, 2026 | Critical JFrog Artifactory flaws chained to administrator access and Rust backdoor deployment EU high | Supply chain | India, Japan | Unattributed - multiple opportunistic clusters |
| Sep 1, 2026 | High North Korea-linked backdoor found compiled inside HAProxy at two South Korean companies EU medium | Espionage campaign | South Korea | APT37 |
| Aug 31, 2026 | High Russian-speaking actor uses hundreds of AI agents to exploit PaperCut across 48 countries EU high | Other | Australia | Russian-speaking eCrime actor, unattributed to a … |
| Aug 28, 2026 | Critical Four nation-state actors deploy shared BlueMoon Chrome and Windows zero-day exploit kit within twelve days EU medium | APT activity | Singapore, Vietnam, Indonesia | APT31 |
| Aug 25, 2026 | High SafePay Ransomware Claims Air Liquide Korea EU medium | Ransomware | South Korea | SafePay ransomware group |
| Aug 21, 2026 | High Krybit Ransomware Publishes 114GB from Singapore Clinic Group | Ransomware | Singapore | Krybit ransomware group |
| Aug 20, 2026 | High China-linked SecFlow campaign uses AI agents against Asian government and industrial targets EU medium | Espionage campaign | China, Vietnam, Indonesia, Taiwan | China-linked; Chinese-speaking operators tracked … |
| Aug 15, 2026 | Critical Three threat clusters exploit Cisco Secure FMC flaws to steal credentials and deploy Qilin ransomware EU high | Ransomware | Australia | Mixed - UAT-11823 deployed Sandworm-linked Cyclop… |