0Daily-report items and published alerts flagged exploited or KEV-listed
12 of 12Jurisdictions with limited automated coverage
Heat map of 12 jurisdictions
A schematic, not a map: all tiles are the same size and are grouped by region only. It shows no territory, border or status.
Schematic tile chart of 12 jurisdictions: South Korea ~72, High; Bangladesh ~65, Medium-high; Philippines ~62, Medium-high; Vietnam ~60, Medium-high; Indonesia ~58, Medium-high; Sri Lanka ~58, Medium-high; Japan ~52, Medium; Thailand ~47, Medium; Malaysia ~44, Medium; Hong Kong ~38, Medium; Macao ~35, Medium; Singapore ~28, Low
Tap a tile to see its score card, then “Open page” to go to the country page.
Low
Medium
Medium-high
High
Each tile shows the risk score (~ means approximate), the risk level in words and a pattern; colour is never the only signal.
Scores and risk labels are our own assessment, based on public sources as of the date shown. They are opinions, not findings or statements of fact about any government, organisation or group.
A dashed outline marked “limited”: automated coverage for this jurisdiction is limited.
Scores and risk labels are our own assessment, based on public sources as of the date shown. They are opinions, not findings or statements of fact about any government, organisation or group.
Risk–maturity matrix preview
Maturity runs along the horizontal axis and risk along the vertical axis; maturity 60 and risk 50 are the dividing lines that sort the 12 jurisdictions into four quadrants. ~ means approximate.
Scores and risk labels are our own assessment, based on public sources as of the date shown. They are opinions, not findings or statements of fact about any government, organisation or group.
The web management backend of TRENDnet TEW-751DR, TEW-752DRU, and TEW733GR has an operating system command injection vulnerability. It is recommended to check for affected devices promptly and take mitigation measures.
Why it matters:The vulnerability is located in the web management backend, and manipulating a parameter can lead to command injection, which may allow the device to be taken over. The affected models and firmware versions are 1.03B01/1.03B03. The source does not state whether a patch is available or whether the vulnerability has been exploited in practice. Unconfirmed
Recommended actions:Check whether TEW-751DR, TEW-752DRU, or TEW733GR devices are deployed in the network, and confirm whether the firmware version is 1.03B01 or 1.03B03.
A security flaw has been found in the static route handling component of Linksys E1700 1.0.0.4.003, involving the addStaticRoute function. Impact and exploitation details. Unconfirmed
Why it matters:The affected part is the web management interface parameter handling in the router firmware. Vendors and operators should promptly verify device models and versions. Severity, exploitability, and patch status are not stated in the source. Unconfirmed
A parameter injection vulnerability exists in the DDNS component of Netcore NR268 1.7.121109 and can be exploited remotely. Immediate review and mitigation of exposure are recommended.
Why it matters:The vulnerability resides in the router's DDNS configuration interface, and attacks can be launched remotely, potentially affecting devices deployed by carriers and enterprises. The source currently does not state patch status, exploitation status, or scope of impact, so these must be assessed independently. Unconfirmed
Recommended actions:Inventory devices in the network running Netcore NR268 1.7.121109
Scores and risk labels are our own assessment, based on public sources as of the date shown. They are opinions, not findings or statements of fact about any government, organisation or group.
Criminal Law (Miscellaneous Amendments) Act 2025 (Criminal Law (Miscellaneous Amendments) Act 2025 (No. 21 of 2025)): enacted, not yet in force, As of 2026-10-12 · Source (opens in a new window)
Cyber Security Act 2024
Cyber Security Act 2024 (Cyber Security Act 2024 [Act 854]): in force, As of 2026-10-12 · Source (opens in a new window)
Cyber Security (Notification of Cyber Security Incident) Regulations 2024 and related regulations