Yoho

Cybersecurity Incident · Asia

Microfinance company Spandana Sphoorty reported a cyber fraud that led to unauthorized transactions of Rs 7.8 crore from a bank account, discovered on a Sunday. Services linked to the fraud were halted and investigations are underway.

Cybersecurity Incident · Asia

Google says Shenzhen-based Android manufacturing partner Videostrong secretly built a backdoor into about 1.3 million set-top boxes, turning them into a botnet used for ad fraud, data exfiltration and unauthorized traffic routing. Google dismantled the backdoor, cut ties, and banned the company from building or selling certified Android devices or supplying Android software.

Cybersecurity Incident · Asia

WorkOS disclosed a data security incident detected October 30, 2026, in which an unauthorized actor, reportedly using ARTEX (an AI-assisted autonomous penetration testing framework) from Hong Kong and China IP addresses, accessed an internal API used by sales and marketing tools. The actor reached Salesforce and Snowflake instances holding business contact information, CRM data, marketing contacts and support tickets for WorkOS customers. WorkOS says production services and application data were not accessed and the incident appears localized to CRM and customer support data.

Cybersecurity Incident · Asia

Korean corporate card and expense-management fintech Gowid disclosed a breach on 27 Oct 2026. Customer data (contact names, emails, phone numbers, job titles, addresses, masked card numbers, GWS billing details) was exposed, and abnormal recurring charges hit its GWS subscription billing function. The company reported the incident to KISA and blocked the attack path, IP and affected payment function.

Cybersecurity Incident · Asia

Mirae Asset Global Investment was also named as a victim in the same series of Korean financial-sector breaches, under FSS investigation.

Cybersecurity Incident · Asia

Appliance and electronics chain Broadway (Broadway Photo Supply) was named in a Hong Kong privacy regulator investigation into a customer data breach, one of three retailers and airlines affected in the same wave of incidents.