Asia
Breaches, attacks and alerts in Asia: the Middle East, Central, South, East and Southeast Asia.
What to Do After a Data Breach: Why a Password Reset Is Not Enough, and the Steps for Each Type of Leaked Data
A new password only fixes a leaked password. Here is what government guidance says to do when card numbers, Social Security numbers, IDs or contact details leak, and what a company should put in its breach plan.
Ransomware Business Continuity: Why Backups Alone Won't Keep Your Company Running, and What to Do This Week
Backups can bring systems back, but they do not keep work moving during the outage. Here is what Japan's IPA learned from ransomware victims, what is not known, and what to check this week.
Amadeus Data Breach: Airline Booking Records and Some Passport Numbers Exposed, What Is Confirmed and What to Do This Week
Amadeus says a flaw exposed booking data, and airlines including Japan Airlines, ANA, Cathay Pacific and Singapore Airlines report customer records were accessed. Here is what is confirmed and what businesses should do.
Does MFA Stop Stolen Passwords? What 19,252 Unauthorized Brokerage Access Cases in Japan Show About Phone Codes and Passkeys
Japan's regulator counted 19,252 unauthorized access cases at online brokerages in 21 months. Phone MFA blocks a leaked password on its own, but typed codes can still be stolen on fake sites. Here is what to change this week.
ARTEX AI Hacking Tool: What the South Korean Bank Breaches Reveal About Exposed Systems, What Is Confirmed and What to Check This Week
An open-source AI hacking tool called ARTEX was used against South Korean banks through internet-facing systems. What is confirmed, what is still claimed, and what businesses should check this week.
Mirax Android RAT: Thousands of Banking Customers' Phones Infected, Streaming App Ads Suspected, and How to Lock Down Work Phones
Group-IB says Mirax Android malware infected thousands of retail banking customers' phones in the Middle East, Turkey and Africa. Here is what is confirmed, what is not, and what to check on work phones.
Dark Project Ransomware: Gang Advertises 80% Cut to Affiliates, About 40 Organizations Named, and What to Check This Week
Dark Project ransomware is advertising an 80% cut to criminal partners, and trackers show about 40 organizations named on its leak site. Here is what is confirmed, what is only claimed and what to do this week.
Crafty Falcon Fintech Attacks: CERT-In Warns AI-Assisted Hackers Hit Payment APIs on Weekends and Re-Attack Past Victims, and What to Check This Week
India's CERT-In says an AI-assisted group it calls Crafty Falcon gets in through exposed test systems, then uses fintechs' own payment APIs to move money. It times attacks for weekends and holidays. Here is what is confirmed and what to check.
Crafty Falcon AI Cyber Attacks: India's CERT-In Warns Fintech, Payment and Crypto Firms About AI Pentesting Tools, What Is Confirmed and What to Check
CERT-In has issued a critical advisory naming Crafty Falcon, a group it says uses AI pentesting tools against fintech, payment and crypto firms. Here is what is confirmed, what is not, and what to check this week.
