BlackTree articles covering cybersecurity, privacy and digital legislation across the Asia-Pacific region.
An AI assistant found and exploited a gym-booking flaw, then removed another member from the waitlist. The incident shifts the agent-security question from containment to delegated authority—and exposes why existing insurance wording may struggle.
Microsoft has identified a new ransomware strain deployed by China-linked Storm-1175. The campaign coincides with active exploitation of N-able N-central, although the specific entry route remains unconfirmed.
Nordic electric-scooter operator Ryde says an intruder copied customer data from every account on its platform. The breach may affect about 4.5 million accounts across Norway, Sweden, Finland and Germany, including 1.6 million Norwegian customers. The important detail is not…
Australia’s critical-infrastructure framework combines mandatory risk management and incident reporting with last-resort government powers to act during a serious cyber incident. Australia has expanded the Security of Critical Infrastructure Act in several waves. Major reforms in 2021 and 2022 broadened…
Suspected China-linked hackers exploited Dell RecoverPoint appliances for root access, covert persistence and a route into protected virtual machines.
South Korea’s AI Basic Act entered into force on 22 January 2026, combining industrial promotion with obligations for high-impact and generative AI. Europe is not the only jurisdiction turning AI principles into law. South Korea’s Framework Act on the Development…
India notified the Digital Personal Data Protection Rules and the Act’s commencement schedule in November 2025. The result is not a single start date but a sequence extending into 2027. India enacted the Digital Personal Data Protection Act in August…
Singapore’s amended Cybersecurity Act expands oversight beyond traditional critical infrastructure and recognises that essential services may depend on virtual systems, cloud providers and data centres. Key provisions of Singapore’s Cybersecurity (Amendment) Act commenced on 31 October 2025. The original Act…
Malaysia’s 2024 privacy amendments introduced mandatory breach notification, Data Protection Officers for qualifying processing and direct security duties for processors through a three-stage commencement schedule. Malaysia’s Personal Data Protection (Amendment) Act 2024, Act A1727, received Royal Assent on 9 October…
Malaysia’s Cyber Security Act 2024 turns critical-infrastructure security into a recurring governance process—and gives designated entities only six hours to submit the first prescribed details of a known cyber incident. Malaysia’s Cyber Security Act 2024, Act 854, was gazetted on…
