News
Cybersecurity news across South Asia and the wider Asia-Pacific — everything from Bangladesh, India, Pakistan, Sri Lanka, and Nepal, plus high-signal incidents from the region. Collected hourly, deduped across outlets.
- Stories in view
- 431 stories
- Countries covered
- 22 countries
- Outlets
- 40 outlets
- Latest story
- 46d ago latest
Filter the wire
+34 more
Fri 28 Aug3
AU
BankInfoSecurity
Alleged Global Supply Chain Campaign Compromised More Than 1,000 Organizations Australian authorities charged two men accused of leading TeamPCP, a cybercrime group linked to supply chain attacks that potentially compromised more than 1,000 organizations, exposed 500,000 credentials and drove global cleanup costs into the hundreds of millions.
AU
Hackread
Australian authorities have charged two alleged TeamPCP members after software supply chain attacks exposed over 500,000 credentials and at least 300GB of data.
CN
Dark Reading
An untold numbers of ZBT routers sold around the world as white-label products come with several implants built by the manufacturer.
Thu 27 Aug19
AU
Cyber Security News
PaperCut has confirmed that hackers are actively exploiting an unpatched vulnerability in its widely used PaperCut NG and PaperCut MF print management software, prompting the company to rush out an emergency patch just hours after issuing its first warning. The Australian vendor said its security response team is investigating “confirmed customer incidents” and is treating […] The post PaperCut NG/MF Vulnerability Actively Exploited in Attack – All Versions Impacted appeared first on Cyber Secur
KR
AhnLab ASEC
Overview AhnLab monitored APT (Advanced Persistent Threat) attacks targeting entities in Korea using its own infrastructure. This report summarizes the classification, statistics, and functional characteristics for each type of domestic APT attacks identified during the month of July 2026. Trends of APT Attacks in South Korea Most APT attacks detected in South Korea were distributed […]
AU
Two Western Australian men have been charged over alleged TeamPCP supply-chain attacks that police say planted malicious open-source code and reached more than 1,000 organizations worldwide. The Australian Federal Police charged the pair on 26 August 2026 with a combined 14 offenses after search warrants in Perth, working with the Western Australia Police Force and […] The post Two Australians Charged Over TeamPCP Supply-Chain Attacks That Hit 1,000+ Organizations appeared first on Cyber Securit
AU
SOCRadar
TeamPCP Arrests: Two Charged in Australia Over the Supply Chain Campaign That Hit 1,000+ Organizations On 26 August 2026, the Australian Federal Police charged two West Australian men over their alleged roles in a cyberc
AU
Security Affairs
Australian police charged two men linked to TeamPCP over malware hidden in open-source code that stole 500,000+ credentials from 1,000+ organizations. Australian police have charged two men from Western Australia over a global cybercrime operation that allegedly hid malicious code in open-source software and used it to steal data from thousands of organisations. “Two West […]
AU
BleepingComputer
Australian authorities have arrested and charged two young men accused of belonging to TeamPCP, a hacking group linked to a string of far-reaching developer supply chain attacks. [...]
AU
The Record
Two men in Australia were charged Wednesday over their alleged membership in TeamPCP, the cybercrime group blamed for one of the most damaging hacking campaigns of the past year.
PH
GBHackers
Suspected Chinese-speaking operators exploited the critical ownCloud flaw CVE-2023-49105 to steal nuclear material records, research reactor data, personnel files, and encryption key material from a Philippine nuclear research organization. Hunt.io discovered an exposed file directory on August 13, 2026, hosted at 31.58.209[.]241:8000, an Amsterdam-based server registered to CGI Global Limited. The directory was served through […] The post Hackers Exploit CVE-2023-49105 to Steal Nuclear Records
Federal authorities disrupt China-backed hacking operation targeting US critical infrastructure
47d agoCN
Cybersecurity Dive
Compromised IoT devices were used in a yearslong campaign against key sectors and U.S. government agencies.
AU
DataBreaches.net
Brian Krebs reports: Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police (AFP) said two men from Western Australia, aged 21 and 23, were arrested in connection... Source
CN
Infosecurity Magazine
The FBI advisory set out QTFY’s distributed hacking ecosystem, allowing it to exploit vulnerabilities at scale and obfuscate its activities
AU
The Hacker News
The Australian Federal Police (AFP) has charged two Western Australian men with a combined total of 14 offences over their alleged role in TeamPCP, the cybercrime group behind the March 2026 compromise of the open-source security scanners Trivy and Checkmarx KICS and the AI gateway LiteLLM. Louis Michael Gaebler, 23, and Ruben Ian Thomson, 21, appeared in Perth Magistrates Court on August 27,
KH
Individuals and organizations in Cambodia have emerged as the target of a new campaign that delivers an open-source remote access trojan (RAT) called Spark RAT. "The samples employ diverse lure themes, suggesting an effort to appeal to a broad range of potential victims. These include government notices, public health materials, real estate-related content, and other topics," Acronis Threat
FBI Seizes China State-Sponsored Hacker Platforms Used to Target U.S. Critical Infrastructure
47d agoCN
The U.S. Justice Department and the FBI have seized domains associated with two hacking platforms linked to China, QScan and QTRouter. This court-authorized operation aims to disrupt attacks against U.S. critical infrastructure and sensitive government networks. Unsealed court documents from the Southern District of California revealed that these platforms were operated by a state-sponsored group […] The post FBI Seizes China State-Sponsored Hacker Platforms Used to Target U.S. Critical Infrastr
CN
The U.S. Department of Justice and FBI have seized domains associated with two China-linked hacking platforms, QScan and QTRouter, allegedly used to target NASA, federal agencies, critical infrastructure, and sensitive U.S. networks. Court documents unsealed in the Southern District of California link the infrastructure to a People’s Republic of China state-sponsored group tracked as QTFY. […] The post FBI Shuts Down China-Linked Hacking Platforms Used to Target NASA and U.S. Networks appeared f
CN
SecurityWeek
The operation focused on a group named QTFY, which offers hacking services to the Chinese government and others. The post US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks appeared first on SecurityWeek .
IN
ET CISO
The emergence of autonomous AI systems has revolutionized the landscape of software vulnerability discovery, achieving remarkable speed and scale. This swift identification brings forth substantial risks to supply chains across various organizations. Conventional patching techniques struggle to keep pace with rapidly changing AI threats. Consequently, businesses need to implement risk-oriented strategies for effectively managing their security responses.
CN
The Register
Beijing's
CN
CyberScoop
The full hacking suite, seized by authorities, allowed Chinese government funded attackers to intrude highly sensitive networks undetected for more than eight years. The post Officials disrupt Chinese espionage operation that hit multiple federal agencies appeared first on CyberScoop .
Wed 26 Aug11
FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure
48d agoCN
FBI seizes QScan and QTRouter, China-linked platforms used to hide intrusions and target U.S. critical infrastructure. The U.S. Department of Justice and the FBI have seized two platforms, QScan and QTRouter, used by a China-linked group to hide cyberattacks and target critical infrastructure. The operation matters because it shows how state-backed actors no longer need […]
CN
Jonathan Greig reports; Chinese government hackers used tools known as “QScan” and “QTRouter” to breach multiple federal agencies since 2018, the Department of Justice said in announcing the takedown of the platforms on Wednesday. The tools were run by China-based Nanjing Xinjiuwei Network Technology Company and used primarily by China’s Ministry of State Security and... Source
CN
The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter operated by Chinese threat actors to target critical infrastructure and other sensitive networks in the country. The activity has been attributed to a Chinese state-sponsored group known as QTFY, employed by Nanjing Xinjiuwei Network Technology Company (南京鑫玖维网络科技有限公司).&
JP
ASEC Blog publishes Ransom & Dark Web Issues Week 4, August2026 Saudi Arabian Digital Entertainment Streaming Service User Data Offered for Sale SAFEPAY Ransomware Attack on a South Korean Industrial Gas Manufacturer and Supplier NoName057(16) and BD Anonymous Claim DDoS Attacks Against Major Japanese Organizations and Companies [1] [2] [3] […]
CN
The FBI has disrupted infrastructure associated with a technical "quartermaster" that provided reconnaissance, proxy management, and operational routing capabilities for Chinese cyber espionage activities. [...]
AU
Australian Scam Rules Impose Tough Penalties But Leave Critical Players Unregulated Australia's new Scams Prevention Framework promises shared responsibility among businesses in key sectors. But gaps in coverage could leave banks exposed and victims asking who ultimately reimburses for their fraud losses. The rules take effect in March 2027.
AU
Aikido Security has published research that recreates the Australian gym-booking incident in a synthetic environment, finding that Claude Opus 4.6, running on the OpenClaw agent harness, exploited a client-side-only booking restriction in 9 of 10 runs. The original incident was first reported by ABC News on August 10, based on chat logs and screenshots the user supplied. He had asked an
IN
The Cyber Express
AHMEDABAD (INDIA) — Cyble, the global AI-native cybersecurity company, and DRONA Cyber Solutions, the Ahmedabad-headquartered security operations firm, have launched an AI-powered cyber defense initiative in Ahmedabad, combining threat intelligence, investigation and endpoint enforcement through a joint managed security model. The AI-Powered Intelligence for Cyber Defense initiative was formally launched Tuesday at DRONA Cyber Solutions' Command and Control Centre, where the companies presented
IN
During the period from March 2026 to July 2026, official data mentions that nearly 2.98 lakh URLs were sent to social media platforms for takedown, out of which 2.44 lakh were sent by states (which is nearly 82 per cent). Of these, the data says, 51,000 URLs were sent by the I4C in the context of cyber, infrastructure, and stock-investment scams
IN
AI agents have transformed into elite entities, necessitating innovative security strategies. Their autonomous nature broadens potential vulnerabilities, demanding ongoing scrutiny. Conventional security testing methods fail to keep up as AI facilitates relentless probing. To ensure robust defense, organizations must implement zero-trust frameworks and automated red teaming. Indian businesses are encountering substantial difficulties in navigating these dynamic digital identities.
PH
Hunt.io
An exposed staging server reveals ownCloud pre-signed URL abuse against a Philippine nuclear agency and exploitation of a naval contractor's WordPress website.
Tue 25 Aug3
KR
This is one of those headlines where our first thought was “Uh oh!” but then we read more and thought “Hmmm…” Ko Jae-woo reports: Seoul National University Hospital has not filed a mandatory cybersecurity disclosure for years, an investigation has found. While tertiary hospitals are generally required to submit such disclosures, the hospital is exempt... Source
AU
Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government
Indian man who fled US arrested on charges he helped scammers siphon $7.5 million from the elderly
50d agoIN
A Jersey City resident is facing charges for his alleged role as a money mule for overseas cyberscammers who stole millions from elderly New Yorkers.
Mon 24 Aug5
KR
A breach at South Korea's government-backed startup platform exposed encrypted personal data after an encryption key was included in an API. Penta Security explains why encryption keys must be securely managed and kept separate from the data they protect. [...]
KP
Kimsuky has been linked to a new espionage campaign that turns a Chrome extension into a quiet Gmail collector. The operation begins with convincing phishing emails and ends with attackers gaining access to messages, attachments, and a victim’s computer. Its mix of browser theft and remote control makes a single opened file especially risky. The […] The post Kimsuky Uses AI-Generated Chrome Extension to Automatically Steal Gmail Data appeared first on Cyber Security News .
MM
Cybersecurity researchers have flagged a cyber espionage campaign targeting Myanmar that uses graduation ceremony invitation lures to deliver a Go backdoor called QUICAgent. The campaign, codenamed Operation QUICSILVER, has been found to target government and information technology sectors, per Seqrite Labs. The activity is assessed to be the work of a China-nexus threat actor with moderate
VN
Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-10147 that's targeting Windows and Linux web servers globally across the education, media, technology, and gaming sectors. The vast majority of the targets are located in Brazil, Bolivia, China, Canada, and Vietnam. Details of the threat activity came to light following the discovery of an open
IN
Sophos achieved sixty percent business growth in India last financial year. This significant expansion positions India as Sophos's largest Asia-Pacific and Japan contributor. Rising cyber resilience awareness and regulatory focus fueled this remarkable company performance. Identity-based attacks and third-party risks remain major cybersecurity challenges for organizations. Sophos notes artificial intelligence is making phishing attacks increasingly sophisticated globally.
Sun 23 Aug1
KR
Purpose and Scope The July 2026 Threat Trend Report on Ransomware summarizes major Korean & global ransomware issues based on statistics regarding the quantity of new ransomware samples, the number of compromised systems, and statistics on targeted businesses. Statistics on targeted businesses were compiled based on information published on DLS (Dedicated Leak Sites, also referred […]
Sat 22 Aug1
IN
In a significant move, India's government has instructed Google to terminate hundreds of Firebase accounts after they were exploited by criminals impersonating major financial institutions to defraud the public. This crackdown showcases the serious challenge that online scams present to law enforcement, especially as they increasingly target the rapidly growing digital payments sector. Officials are responding to a concerning trend of such illicit activities.
Fri 21 Aug6
CN
A Chinese-speaking cybercrime group is using AI-assisted tools to turn vulnerable web servers into entry points. It shows how familiar flaws become more dangerous when attackers automate the work around them. The group, tracked as UAT-10147, targeted internet-facing Windows and Linux systems in government, education, media, technology, and gaming. Victims were identified across several countries, […] The post Chinese Hackers Use AI Agents to Exploit Web Servers and Automate Attacks appeared firs
KP
Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain attacks
KP
Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server. The post Rust Supply Chain Attack Linked to North Korean Hackers appeared first on SecurityWeek .
JP
Sakura Internet has disclosed a potential breach involving its sales management system, placing the personal records of up to 1.36 million customer accounts at risk. The Japanese cloud and hosting provider said the incident was identified during its ongoing investigation into unauthorized access affecting Sakura Rental Server environments. The company initially announced the rental server […] The post Sakura Internet Breach – Hackers Accessed 1.36 million Customers’ Personal Records appeared fir
IN
Urban co-operative banks, despite their smaller scale, are navigating substantial risks that extend beyond their physical presence. The ever-evolving landscape of technology and cyber threats poses significant challenges to these banks. Their reliance on third-party service providers compounds operational vulnerabilities. As customers demand faster, more efficient digital banking experiences, the Reserve Bank of India's Mission SAKSHAM aims to empower these institutions with enhanced technologic
CN
Suspected military-grade hackers based in China used artificial intelligence to develop malware in a campaign to penetrate Central Asian governments.
Thu 20 Aug1
IN
A nation-state threat actor is picking on immature organizations run by the Taliban, but failing against more prepared government agencies in India.