[APAC] Quest Apartment Hotels said unauthorised access through a third-party service provider exposed customer records from before June 2025, including names, email addresses, contact details and some dates of birth. Quest said the incident was contained and Australian privacy and cyber authorities were notified, while external advisers continue investigating the affected systems and whether any further customer information requires notification (Source: ABC News, 19-08-2026).

[EMEA] Latvia’s Road Traffic Safety Directorate said an August cyberattack obtained personal data linked to about 1.2 million people and 200,000 companies from archived billing and payment records. Investigators are assessing how the attacker accessed data spanning many years, while the authority has faced scrutiny over the delay between detecting the incident, notifying the public and confirming the scale of information affected (Source: LSM English, 18-08-2026).

[AMER] US agencies updated their Medusa ransomware advisory using FBI investigations through April 2026, reporting that developers and affiliates have affected more than 500 victims across multiple critical-infrastructure sectors since 2021. The advisory adds access-broker activity, exploited vulnerabilities, Interactsh verification, living-off-the-land techniques and indicators that investigators can correlate across authentication, endpoint, network and command-infrastructure evidence when examining suspected Medusa compromises (Source: CISA, 18-08-2026).

[EMEA] Polish authorities are investigating a cyberattack on healthcare software provider MyDr involving historical records that may relate to nearly 19 million people and more than 12,000 medical facilities. The precise affected population remains under assessment, with investigators tracing the intrusion, the data-protection authority preparing an inspection and certificates connecting medical systems to Poland’s P1 platform being replaced as a precaution (Source: The Record, 17-08-2026).

[AMER] UT San Antonio delayed the start of fall classes after attempted unauthorised activity prompted the university to take connectivity, email and other technology services offline while systems were evaluated and restored. Officials said the activity was detected at the network edge and there was no evidence of data access or exfiltration at publication, while password resets and staged restoration continued under the investigation (Source: UT San Antonio, 18-08-2026).

[AMER] The US Health and Human Services breach tracker now lists 3,756,469 people affected by CareCloud’s March network intrusion, substantially increasing the previously reported scope. CareCloud’s investigation found unauthorised access to an AWS-hosted electronic health record environment between 10 and 16 March, with identity, financial and healthcare information affected, while HHS confirmed the revised figure reflected the latest data supplied by the company (Source: SecurityWeek, 19-08-2026).

[APAC] Australia’s cyber authority warned that it has observed targeting of N-able N-central vulnerabilities CVE-2026-18556 and CVE-2026-18577 within Australia, affecting remote monitoring and management deployments. Both are authentication-bypass vulnerabilities, and the advisory directs organisations to identify exposed systems, apply Hotfix 2, review internet-facing interfaces and use available compromise-detection scripts to examine suspicious access or activity associated with vulnerable N-central servers (Source: Australian Signals Directorate, 19-08-2026).

[AMER] CISA added four vulnerabilities affecting Microsoft IKE, Microsoft SharePoint, Broadcom VMware vCenter and Apple macOS to its Known Exploited Vulnerabilities catalogue after evidence of active exploitation. The additions—CVE-2026-33824, CVE-2026-55040, CVE-2026-59310 and CVE-2026-65400—give investigators concrete pivots for exposure checks, patch prioritisation and retrospective log review, particularly where exploitation may have occurred before remediation was applied (Source: CISA, 18-08-2026).

[GLOBAL] Recorded Future’s Insikt Group published new research on PurpleDelta, its designation for fraudulent North Korean IT-worker activity using false identities to obtain remote employment and access organisational systems. The research identifies personas, email addresses, infrastructure and behavioural indicators that organisations can correlate with recruitment, identity, endpoint and network records, while its attribution remains an intelligence assessment that should be tested against organisation-specific evidence (Source: Recorded Future, 18-08-2026).

[AMER] US prosecutors unsealed a superseding indictment charging 17 members of Iran-based Mabna Institute over an alleged intrusion campaign targeting universities, companies, government agencies and non-governmental organisations in the United States and abroad. The indictment alleges more than 31 terabytes of academic data and intellectual property were stolen and says many intrusions were conducted for Iranian clients, allegations that remain to be tested in court (Source: US Department of Justice, 18-08-2026).

[APAC] Ahmedabad police said two men were arrested after an investigation into a four-country “Boss Scam” network allegedly supplying dummy SIM cards, OTPs and WhatsApp accounts to cybercriminals operating across India, Pakistan, China and Hong Kong. Police said 251 complaints across 26 Indian states were linked to the network and seized devices will support continuing work to trace account activation, communications, malware use and financial transfers (Source: The Indian Express, 18-08-2026).

[APAC] Singapore Police issued Codes of Practice under the Online Criminal Harms Act for designated online services, establishing measures intended to counter scams and other criminal activity conducted through digital platforms. The codes formalise preventive and remedial obligations for covered services, creating more standardised mechanisms for platform intervention, information handling and cooperation with authorities when online services are used to facilitate cyber-enabled crime (Source: Singapore Police Force, 18-08-2026).

[APAC] Australia and Thailand agreed to deepen cooperation against transnational crime, specifically citing online scam operations using emerging technologies for cybercrime, financial fraud and money laundering across Southeast Asia. Their joint statement commits law-enforcement, customs, immigration and financial-intelligence agencies to stronger coordination on criminal networks, financial flows, virtual assets and scam-centre disruption, supporting cross-border tracing of proceeds and evidence across jurisdictions (Source: Prime Minister of Australia, 19-08-2026).