The Wang ReportCyber
Breaches, exploited flaws and what they mean for firms in Asia.
This week's read
Brotli flaw reaches Python clients through packages their code never imports
Kai Tanner · Wednesday 28 October · 16 h ago
Convertr skimmer may remain active in browser caches for up to 24 hours after cleanup
Sansec warns that repairing the hosted analytics script can leave shoppers exposed, while earlier card payments require an immediate response.
Exploited in the wild (CISA), last 14 days total
●BeyondTrust1Remote Support · Improper Origin Validation in Internal Messaging Components…Plex4Media Server · arbitrary file writePHP Group2PHP · RCE via stale global stateSiemens1Siemens Software Center · A vulnerability has been identified in Siemens Software…Google1Brotli · Out-of-Bounds Write in Google Brotli DecoderCollabora1Collabora Online - Built-in CODE Server · Online Built-in CODE Server before 26.4.303…Arista Networks1VeloCloud Orchestrator · Security Advisory 0199
● in the regulated-firm footprint · tap a row for the worst flaw · all vulnerabilities
Latest breaches register
GMO technology Company and customer data were published following the Onamae Desktop Cloud intrusion. 10-28Convertr technology Attackers modified a hosted analytics script to skim shoppers payment details across merchant checkouts. 10-28Railway technology Detected suspicious activity on systems storing customer environment variables and urged users to rotate… 10-24LiteLLM software vendor Attackers distributed a payload that steals credentials, secrets and environment variables through packages… 10-23Latest
- CISA confirms hackers exploiting critical Node2Shell flawBleepingComputer · 11 h
- ShinyHunters chained three oracle flaws in months of attacksThe Hacker News · 15 h
- Hong Kong Breaches Hit Airline And Retail Customersmsn · 21 h
- Leak exposes 41,000 homeland security Workers–Including undercover ICE agentsHackerNews · 15 min
- Police seize Virtualine bulletproof service tied to ransowmare, cybercrimeBleepingComputer · 31 min
11 more headlines
- Unwrapping retail peak season cyber threatsUnit 42 · 3 h
- Moldova investigates possible foreign involvement in major government cyberattackThe Record · 5 h
- Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own WinThe Hacker News · 5 h
- Volt Typhoon hides zero-day attacks using 'Silent Train' frameworkBleepingComputer · 5 h
- UK to look at making software companies liable for cyber breachesThe Record · 6 h
- r/Seattle mods discover malware injection by archive.today, ban siteHackerNews · 6 h
- Belarusian hackers increasingly acting as proxies for Russia amid war in UkraineThe Record · 6 h
- Attacker relentlessly scans for credentials by impersonating AI botsDark Reading · 7 h
- CVE-2026-62740 Windows Imaging Component Information Disclosure VulnerabilityMSRC · 7 h
- Ransomware Group Claims Responsibility for Oneonta City Schools Hackgovtech · 9 h
- Google launches Gemini 4 Carbon with a ‘significant leap’ in cybersecuritytheverge · 9 h
Earlier from this desk
Gheist steals GitHub secrets through Actions logs without an outside server
Tailscale SSH lab test reaches root from a device already allowed in
VeloCloud is under attack. Check the deployment and the versionEverything on this desk, in full: the Board