South-East Asian Military Entities Targeted via cPanel (CVE-2026-41940)

A threat actor rapidly weaponized a newly disclosed cPanel authentication bypass (CVE-2026-41940) to target South-East Asian government and military entities, pivoted through custom exploits and persistent VPN infrastructure, and exfiltrated sensitive Chinese railway-sector documents—highlighting a highly opportunistic and technically adept regional espionage campaign.