Cybersecurity News in Asia

Agentic AI is reshaping enterprise security in APAC, making identity, privilege and access controls critical as AI agents gain the ability to act autonomously across business systems.

Shadow AI is creating a new insider risk as employees use GenAI tools without security teams’ visibility, making real-time discovery, access controls and clear AI policies essential for APAC enterprises.

AI has accelerated software development and, along with it, an exponential increase in vulnerability backlog.

As Asia Pacific races ahead with digitalization, the region is rapidly becoming a “breeding ground” for cybercriminals armed with AI and primed for ransomware campaigns.

Organizations that plan ahead for data breaches and ransomware are the ones that recover fastest. But what are APAC organizations getting wrong about protecting backups?

As AI adoption continues to accelerate across APAC, organisations are increasingly looking for ways to manage the security, governance, and operational risks introduced by autonomous AI systems.

With AI-powered shopping moving from concept to reality, the conversation is no longer whether AI will shop on our behalf, but how businesses can build trust when AI starts making purchasing decisions.

Online trust and identity has become a major concern for transactions and interactions online in the digital economy.

Governance is lagging behind AI deployment across organizations in APAC. What happens when thousands of AI agents get out of control?

Organisations need critical data context to move beyond blind restores toward more intelligent, business-aware recovery strategies.

For years, security teams have been taught to look at vulnerability risk through a number.

Cyberthreat telemetry suggests that organizations in the region should prioritize advanced email protection, sandboxing credentials, identity security as primary control plane, and investing in AI and automation. But are organizations heeding?

Experts weigh in on the agentic AI sandbox escape that breached an open-source developer platform.

An threat intelligence report identified expansion of activity by India-linked cyber-espionage group RagaSerpent (SideWinder) into Indonesia and across Southeast Asia in 2026.

Recent incidents involving cyber espionage groups such as UNC3886 highlight how advanced and persistent cyberthreats have become – particularly for critical infrastructure operators.

Cybercrime is surging in Asia Pacific (APAC), but governments don’t seem able to effectively investigate or prosecute criminals, according to a former UN Office on Drugs and Crime (UNODC) investigator. 

The modern attack surface has expanded so dramatically that cyber resilience has shifted well beyond the remit of IT departments in an organization to become a national security imperative for economies across Asia.

How different are APAC cyberthreats compared to those from other parts of the world? What does this uniqueness mean to organizations operating in the region?

Like the secret agents in famous movie franchises, autonomous agents can go rogue. That’s why there are “handlers” to manage them. But who’s managing the AI agents in our organizations?

What happens when organizations do not have a single-pane-of-glass visibility of cost, usage and outcomes across AI, cloud and cybersecuritya