Thai freshman detects cybersecurity flaw at NASA

America’s National Aeronautics and Space Administration has thanked a Thai freshman at Khon Kaen University for detecting a cybersecurity flaw in the US space agency’s computer system.

Khon Kaen University said on Tuesday that NASA had sent a letter of gratitude and praise to Thanapol Butsricha, a first-year student at its College of Computing, on Nov 5 for helping protect its data.

Mr Thanapol, who used the online name ‘nullbyt3z’, found a loophole in the cross-site scripting (XSS) type which allowed attackers to input harmful code scripts into webpages. He reported the finding to NASA through its official security channel.

‘I am proud that my efforts over the past month help secure the systems of this world-class organisation,” he said, admitting “it was difficult to detect a new loophole that no one else has spotted”,

Khon Kaen University said the freshman’s report was a ‘responsible disclosure’. He sent a direct report to the system owner without abusing his finding or disclosing it before the flaw was fixed.

Assoc Prof Phet Imtongkhum, head of cybersecurity courses at Khon Kaen University, said the finding reflected both the skill and the ethics of students at the College of Computing at the university.

Benz plans 40 launches amid Asean EV boom

Mercedes-Benz Group AG plans to launch 40 new vehicle models globally over the next two years (2027-28), driven by robust growth in electric vehicle (EV) markets, particularly in Southeast Asia.

The German luxury carmaker will introduce a mix of internal combustion engine vehicles and EVs, reflecting varying consumer demand across global markets, said Mathias Geisen, a member of the board of management at Mercedes-Benz Group AG.

The new models are expected to be launched first in Europe before being rolled out to other regions, with the company placing strong emphasis on key Asian markets, including China and Southeast Asia, he said.

Mercedes-Benz said demand in Europe remains strong, with the market recently rising by 35%. Germany, its home market, recorded growth of 10%.

The Asean market has also demonstrated strong momentum, particularly in Thailand, Singapore and Malaysia, which the company regards as key markets because of their high purchasing power.

Mr Geisen said that Mercedes-Benz plans to further expand its investment in Thailand to support the country’s rapidly growing EV market, although he declined to disclose the investment value.

“We cannot reveal specific investment figures at this stage,” he said.

Mercedes-Benz has committed to complying with the Thai government’s local content requirements for battery EV production, which require at least 40% of the components used in vehicle assembly to be sourced locally.

The company recently introduced its latest flagship luxury vehicles in Thailand, the new S-Class and the new Mercedes-Maybach S-Class, both of which are locally assembled.

The S-Class is available in two variants: the S350 d diesel model and the S580 e plug-in hybrid. The Mercedes-Maybach S 580 e is also offered as a plug-in hybrid electric vehicle.

Christian Schell, president and chief executive of Mercedes-Benz (Thailand), said the company aims to establish Thailand as one of its major EV production hubs in Southeast Asia.

He said Mercedes-Benz expects one-third of its battery EV production in the region to come from its Thai manufacturing facility.

Mercedes-Benz currently operates vehicle assembly plants in Thailand and Malaysia.

According to Martin Schulz, president and chief executive of Mercedes-Benz Malaysia and head of region for Mercedes-Benz Cars Southeast Asia, the two facilities produce similar models and are primarily focused on serving their respective domestic markets.

Expert sounds pollution alarm

An academic has urged Thailand and its neighbours to act urgently against toxic pollution in northern rivers, warning that switching water sources will not protect communities from contamination linked to mining activities across the border.

The call came after the Provincial Waterworks Authority’s Mae Sai branch in Chiang Rai temporarily suspended tap-water production because of excessive turbidity and arsenic in raw water drawn from the Sai River.

Suebsakun Kitnukorn, a lecturer in Mae Fah Luang University’s School of Social Innovation, said on Facebook on Monday that switching to the Mekong as an alternative water source would not eliminate the risk of contamination, citing water-quality tests linked to mining activities in Myanmar.

He proposed five measures to tackle pollution in the Kok, Sai, Ruak and Mekong rivers.

These include temporarily suspending mineral imports from Myanmar and exports to China until both countries demonstrate a serious commitment to tackling the pollution, and requiring companies to document the origins of minerals through a traceability system.

He also urged the Thailand-Myanmar Joint Water Quality Inspection Working Group to meet in Mae Sai or Tachileik as soon as possible, as agreed in August.

Mr Suebsakun called on Myanmar ministers to visit communities affected by the pollution in Mae Sai. He also proposed a national committee bringing together government officials, academics, civil society groups and farmers to coordinate efforts to protect six rivers, including the Salween and Kraburi.

The Mae Sai waterworks suspension followed tests on Nov 5-6 that found excessive turbidity and arsenic in raw water. The Pollution Control Department reported turbidity levels exceeding 10,000 NTU and arsenic concentrations of 0.30 milligrammes per litre, beyond the treatment system’s capacity. Production was halted for five hours before resuming.

Although normal production and distribution have resumed, about 60 users in higher parts of Ban Pha Daek remained without tap water. Authorities deployed water trucks to supply them.

A separate preliminary inspection at Ban Hua Fai found reddish-brown, murky water containing 0.25mg of arsenic per litre, compared with the standard of 0.01mg.

Officials said heavy rain upstream may have contributed to the elevated metal concentrations.

Royal initiatives in focus at SX2026

The opening ceremony of the Sustainability Expo 2026 (SX2026) yesterday highlighted the sustainability initiatives of Their Majesties King Rama IX and King Rama X.

Thapana Sirivadhanabhakdi, group chief executive and president of Thai Beverage (ThaiBev) and chairman of the SX2026 organising committee, said the seventh edition of the event focused on the concept of “sufficiency for sustainability”.

Held under His Majesty King Rama X’s initiative to “Continue, Preserve and Build Upon” the work of the late King Bhumibol Adulyadej, SX2026 seeks to bring together the Sufficiency Economy Philosophy of King Rama IX and the United Nations Sustainable Development Goals as guiding principles. The expo aims to highlight the links between environmental, economic and social issues, ranging from climate change and natural disasters to food and energy security and resource management. Under the theme “Resilient in Action”, the expo seeks to raise public awareness of the need to build resilience in the face of disruptions, focusing on strengthening individual and community resilience through practical action.

“SX serves as a collaborative platform where knowledge is transformed into real-world action. This year, we are honoured to host more than 800 global sustainability experts and 28 leading public and private sector networks from Thailand and abroad,” he said.

This year’s expo also marks the approach of the 100th anniversary of the birth of King Bhumibol Adulyadej the Great, which falls next year.

“In deep gratitude for His Majesty’s lifelong dedication to the Thai people, this milestone provides a vital opportunity to study royal wisdom, apply the Sufficiency Economy Philosophy to daily life, business and social development, and pass these principles on to the younger generation,” Mr Thapana said.

At the opening ceremony, Sumet Tantivejkul, secretary-general of the Chaipattana Foundation, said the expo had grown in scale since its inception and served as a reminder of King Bhumibol’s words: “The work is not yet done.”

“We must continue working until true sustainability is secured for future generations,” Mr Sumet said.

He also outlined three ways of responding to climate-related challenges: tackling them by thoroughly analysing environmental crises before taking action; retreating by developing organised relocation and evacuation plans when natural forces cannot be overcome; and adapting by designing buildings and changing daily habits to accommodate natural conditions.

He said the Sufficiency Economy Philosophy could guide decisions on these approaches to ensure they benefited the public.

“We must also pass this knowledge on to the younger generation, enabling them to return home and help improve their communities,” he added. The expo at the Queen Sirikit National Convention Center ends Nov 15.

BoT urges banks to step up cybersecurity

Commercial banks are being urged to strengthen their cybersecurity measures amid a global rise in cyberthreats involving artificial intelligence (AI) over the past 1-2 weeks.

According to Bank of Thailand governor Vitai Ratanakorn, the central bank met with commercial banks on Monday to discuss ways to strengthen cybersecurity systems and enhance their preparedness and defensive capabilities in response to the growing threat of cyber-attacks and financial crime worldwide.

The meeting brought together representatives of the Thai Bankers’ Association (TBA), banks’ chief information technology officers (CIOs) and the Thailand Banking Sector Computer Emergency Response Team (TB-CERT), which operates under the TBA.

“Cyberthreats have been increasing globally, and Thailand has also seen more attempts to infiltrate banking systems. So far, banks’ existing security systems have been able to withstand these attacks, allowing financial services to continue operating normally,” Mr Vitai said.

Hackers have attempted to target Thailand’s financial system using methods similar to those reported in other countries, seeking to gain access through third-party service providers and outsourced companies that work with banks.

The central bank has instructed financial institutions to tighten their cybersecurity controls and improve incident-reporting procedures. Banks are required to report suspicious activities and potential cyber-attacks daily to facilitate closer monitoring, faster assessments and information sharing among financial institutions and the Bank of Thailand.

Mr Vitai said the central bank and financial institutions had been closely monitoring the situation and coordinating their responses over the past week, including throughout the weekend.

“The situation in Thailand remains manageable, and there is no immediate reason for the public to panic over potential disruptions to banking services or to consider withdrawing cash or stockpiling food,” the governor said.

He added that banks had continued to invest in cybersecurity systems, while the latest meeting aimed to raise awareness of emerging threats and accelerate efforts to strengthen their cyberdefences.

CYBERSECURITY PUSH

Separately, Finance Minister Ekniti Nitithanprapas said on Monday that the government had been raising countermeasures to the highest level in response to growing cyberthreats.

He said he had held discussions with the central bank governor over the past weekend regarding cyberthreats targeting Thailand’s financial institutions. He had also discussed the matter with the TBA to prepare for potential attacks.

“Cyber-attacks can now occur across every sector of the economy. As a result, the Ministry of Digital Economy and Society and the National Cyber Security Agency have stepped up cybersecurity measures across all sectors, not just the financial industry,” he said.

Regarding the financial sector, Mr Ekniti said the TBA and the central bank were working together to strengthen cybersecurity measures to the highest level, following reports of cyber-attacks targeting financial institutions overseas.

“We have received reports from the central bank’s governor and the TBA that cyber-attacks have been occurring continuously. However, we have seen an increase in attacks recently, prompting us to step up our defensive measures. Nevertheless, we are not taking this matter lightly, as it is a global problem,” he said.

Meanwhile, Payong Srivanich, chairman of the TBA, added that since Nov 7, the TBA and various financial institutions, including Kasikornbank and Krungthai Bank, had issued statements to reassure the public about the cybersecurity of Thailand’s financial system.

The financial sector has established a centralised system known as TB-CERT, which serves as a central cybersecurity coordination platform for Thai financial institutions and is connected to the Bank of Thailand to help monitor and safeguard the system.

He added that financial institutions had also coordinated with the National Cyber Security Agency and other industrial sectors to conduct cross-industry monitoring.

This is necessary because banking systems are interconnected with partner organisations through various integrations and external connections. Therefore, clear rules and protocols must be established to monitor different patterns of activity and identify potential threats.

In addition, financial institutions have emphasised the need for all relevant parties to continuously update their software to ensure that every system is updated in a timely manner, given the increasingly rapid evolution of cyberthreats.

Mr Payong said that although the banking sector had been targeted by cyber-attacks in the past, it had successfully defended itself through proactive measures.

“We must emphasise that we have raised our vigilance to the highest level. The Bank of Thailand has issued instructions directly to the CEOs of each bank, as well as through their respective CIOs. A video conference between the Bank of Thailand and the CIOs of all banks is also scheduled at noon on Monday,” he said.

Chalermchai gets Thailand role, King’s Cup beckons

The Football Association of Thailand has appointed Chalermchai Mahagitsiri as manager of the national team, with the King’s Cup in Sri Sa Ket this month to be his first assignment.

Chalermchai, the chief executive of Thoresen Thai Agencies and a director of Muangthong United since 2009, was unveiled at a press conference in Rangsit on Monday by the association’s president, Nualphan Lamsam.

The new manager, who also directs JMG Academy, which develops young players, will coordinate work between the association, coaches and players alongside the head coach, Anthony Hudson.

Chalermchai said he had taken time to decide but was persuaded after speaking to Nualphan. The role, he said, was an opportunity to serve every Thai person, and the World Cup qualifying tournament next year demanded preparation, though for now his focus was on the King’s Cup.

The 52nd edition runs from Nov 14 to 17, with Brunei, Oman, Tajikistan and Thailand taking part.

Sarach Yooyen, Supachok Sarachat, Teerasak Poeiphimai, Suphanan Bureerat and Theerathon Bunmathan, meanwhile, reported to the training camp.

Hudson said he had wanted Chanathip Songkrasin, who is unavailable, but was pleased with the squad overall.

Benjamin Davis, he said, remains a player he likes and wants to see develop further. He acknowledged fan criticism and said a competing fixture schedule had prevented him from picking his strongest group.

Buriram snatch late win

Sebastian Moyano struck in stoppage time as Buriram United won 2-1 at Ratchaburi in Thai League 1 on Sunday night. Pansa Hemviboon headed the champions in front in the 16th minute, only for Njiva to equalise in the 79th.

The result lifts Buriram to fifth on 16 points, with Ratchaburi sixth on 13.

Edgar Mendez scored the winner as PT Prachuap beat Sisaket 2-1 at home. Doucoure Mahamadou had put the visitors ahead in the 57th minute, Taua Ferreira levelled from the penalty spot in the 72nd, and Mendez struck two minutes later.

Bangkok United won 3-0 at Rasisalai United, and BG Pathum United also won 3-0 against Rayong.

Loewe celebrates with Jack Skellington this Christmas

For this year’s holiday capsule collection, the Spanish fashion house Loewe joins forces with Disney and the filmmaker Tim Burton for a collection inspired by ‘The Nightmare Before Christmas’, the cult stop-motion animated film first released in 1993.

This season, luxury fashion houses appear to be looking back at the roots of animation, embracing traditional illustration and handmade storytelling at a time when AI-generated imagery is becoming increasingly commonplace.

Prada enlisted the veteran animator John Pomeroy, whose career spans several Disney productions since the 1970s, for its Holiday 2026 campaign. Shortly afterwards, Dior unveiled a ‘hand-drawn’ animated holiday film. However, whether the Dior ad is actually man-made is up to the viewer’s discretion.

Through its collection, Loewe offers another interpretation of the relationship between animation and craftsmanship. Drawing from the original drawings, articulated puppets and miniature sets of The Nightmare Before Christmas, the collection translates its gothic characters into wearable and collectible pieces through the house’s signature leather marquetry, embroidery and other artisanal techniques.

The iconic Puzzle bag, already synonymous with Loewe, receives a cinematic makeover, featuring scenes and characters from the film. Other standout designs include the Amazona 180, with Jack Skellington peeking out from its opening, and the Flamenco clutch, which takes on the patchwork appearance of Sally’s stitched-together body. Zero, Jack’s ghostly dog, also makes appearances across the collection.

The ready-to-wear selection carries the same playful spirit, with character prints, embroidery and decorative details bringing the film’s peculiar aesthetic into everyday dressing. Smaller leather goods, charms and accessories offer more understated ways to participate in the collaboration.

The fragrance offerings are also particularly interesting. At the centre is Moonlight Eau de Parfum, a gourmand and powdery scent combining coconut, iris and warm amber. Its grey glass bottle is topped with a black jack-in-the-box-inspired cap, complete with a silver-toned Cat Jack-in-the-Box figure emerging from the lid.

The collection also introduces three limited-edition scented candles in Loewe’s signature ribbed ceramic vessels. Featuring character-inspired lids depicting Zero, Toy Duck and Cat Jack-in-the-Box, the candles share an aromatic eucalyptus and mint fragrance. Alongside decorative ornaments and character charms, these objects bring the film’s Halloween-meets-Christmas atmosphere into the home.

This is not the first time Loewe has worked with Disney on a collection. In 2019, the house released a capsule inspired by Dumbo, coinciding with the release of Tim Burton’s live-action adaptation of the animated classic. Conceived under the creative direction of Jonathan Anderson, the collection featured the flying elephant across leather goods and ready-to-wear. Seven years later, Loewe returns to Disney through another film associated with Burton, bringing his distinctive gothic imagination into the holiday season.

The Loewe and Disney Tim Burton’s The Nightmare Before Christmas collection will be available globally at selected stores and online this Thursday.

Cabinet approves new data centre rules

The cabinet has approved new regulations governing data centre businesses in Thailand, including a centralised approval system and noise and heat controls.

The regulations aim to ensure that data centre investments deliver maximum benefits to Thailand while addressing environmental and community concerns, Deputy Prime Minister Ekniti Nitithanprapas said on Tuesday.

The Ministry of Digital Economy and Society (DES) has been tasked with establishing a one-stop service centre and a screening committee to oversee approvals and set requirements for relevant agencies.

Mr Ekniti said data centres are essential infrastructure for artificial intelligence (AI) and the digital economy, but their substantial electricity and water consumption could affect local communities.

Previously, approvals were handled separately by different agencies, creating problems such as speculative reservations of electricity capacity for resale to data centre developers, and overlapping applications for investment promotion, construction and utilities.

The government will also introduce a ‘TH-DC Dashboard’, a centralised, real-time monitoring and data-collection system for the data centre industry.

Under the new framework, investment applications will be assessed not only on their financial value but also on job creation, skills development for Thai workers, income generation, links with domestic supply chains and the use of clean energy.

Investors will be encouraged to compete by offering commitments to employ Thai workers and integrate local businesses into technology and AI supply chains, following an approach adopted in Singapore.

Data centres will be classified into seven categories according to electricity consumption: below 0.5 Megawatts, 0.5MW to 5MW, 5-10MW, 10-20MW, 20-50MW, 50-200MW, and 200MW and above.

Stricter rules would apply to facilities consuming 20MW or more. Facilities below 20MW must follow environmental codes of practice, with detailed requirements to be finalised after a public consultation.

In terms of location, facilities consuming less than 20MW may operate in commercial zones, while those using 20MW or more must be located in industrial zones.

Environmental standards

Data centres would generally not be required to conduct an environmental impact assessment (EIA), said Danucha Pichayanan, secretary-general of the Office of the National Economic and Social Development Council.

The facilities primarily consist of buildings housing servers, computers and cooling systems and are not considered to have severe environmental impacts under existing EIA criteria, he said.

However, the codes of practice will impose environmental controls, including limiting noise from backup generators to no more than 70 decibels – slightly quieter than a vacuum cleaner – at project boundaries.

As well, temperature increases in nearby areas would be capped at 1-2 degrees Celsius, whole cooling water must be recirculated and quality tested before discharge.

Data centres at industrial estates, meanwhile, must comply with the estates’ existing EIA requirements.

For the transitional period, the cabinet agreed that projects holding construction permits or receiving investment promotion from the Board of Investment (BoI) before Aug 14, 2026, may proceed. The one-stop service centre will verify their legal status and allow operators around one year to comply with the new requirements.

Existing investors who have complied with the law will retain their previous rights but must upgrade their operations to meet the new minimum environmental and public safety standards within the specified period.

Projects applying after Aug 14, as well as new operators, must undergo screening for the authorities to exclude speculators and brokers who reserve electricity and water capacity without genuine investment plans.

BoI secretary-general Narit Therdsteerasukdi said the agency had approved investment promotion for 57 data centre projects as of April. Seventeen projects are already operational, while the remaining 40 comprise 20 projects that have obtained construction permits and another 20 still preparing for investment.

All projects would be reviewed by the BoI board and the one-stop centre under the new criteria following the cabinet’s approval.

Police hunt Panadda’s hidden designer-bag stash

Police are hunting down a collection of genuine designer bags they believe may have been hidden by accused charity fraudster and former Miss Thailand Panadda ‘Boom’ Wongphudee.

Pol Maj Gen Thatphum Charuprat, commander of the Economic Crime Suppression Division (ECD), revealed this on Tuesday when updating reporters on progress in investigating the alleged abuse of hundreds of millions of baht in donations made to Ms Panadda’s Goodness Foundation, which she founded and chairs.

ECD investigators have summonsed Apiwut “Ar-ngoon” Pumpa, the foundation’s treasurer, to explain the transfer of 36 million baht by Ms Panadda to his bank account, Pol Maj Gen Thatphum said.

Apiwut had initially told investigators he would appear on Friday and would bring relevant documents and provide an explanation.

Officials from the Phuket and Nakhon Nayok provincial land offices, where the Goodness Foundation’s pool villa and a trail-running course are sited, and foundation committee members who have been summonsed, have gradually been providing information about the foundation’s operations, Pol Maj Gen Thatphum said.

Representatives of leading luxury brands, including Louis Vuitton and Hermès, had requested a postponement of their examination of 32 designer handbags seized earlier. Initially believed to be counterfeit, the bags were due to be inspected on Tuesday, but the examination has been rescheduled for Nov 11.

A source said investigators found that genuine designer handbags had been moved by car and taken to two or three locations, which had been identified and investigators would seek search warrants in the next day or two.

Investigators have also found information suggesting that the transfers were well planned, with an adviser allegedly directing the operation behind the scenes. Police were considering whether the movement of the seized assets could constitute an offence.

Regarding a donation of 5 million baht to Ms Panadda’s foundation by Phanya Nirunkul, executive of Workpoint Entertainment, Pol Maj Gen Thatphum said police had already asked whether he would be available to provide information as a witness.

Ms Panadda, 50, who was Miss Thailand in 2000, and her husband Atip Anantawan, 53, who was Mr Universe 2006, were charged with public fraud, money laundering and computer crime in their campaigning for donations to her Goodness Foundation. More than 800 million baht was reportedly raised.

Police investigators allege most of the money was abused for personal benefit, not for flood and disaster relief as touted.

The couple were arrested on Friday and remanded in custody. Panadda was detained at the Central Women’s Correctional Institution and Atip was sent to the Bangkok Reman Prison. The investigation is continuing.

On Tuesday, another alleged charity fraud victim, Winlaphat Srisakulmekhee, known as ‘Madam Pam, owner of popular Facebook page Madampam Makeup by Winlaphat, filed a complaint against the Goodness Foundation. She was accompanied by her lawyer Kanyasinee Piromrotwatjana,

The complainant submitted evidence of two bank transfers of 30,000 baht each in 2024 and 2025, asking police to consider legal action against Ms Panadda’s foundation.

Ms Winlaphat said she had been deeply saddened by the events surrounding the foundation and did not want the matter to quietly disappear. She said many of her fans and followers had also donated substantial amounts of money to the foundation.

Cocaine from Brazil seized at Suvarnabhumi airport

Two passengers arriving from Brazil were arrested after 6.8 kilogrammes of cocaine was found in their lugguage at Suvarnabhumi airport.

The two foreigners flew into Bangkok on Sunday, the Customs Department said. It did not name or otherwise identify them. They had travelled from Guarulhos International Airport in Sao Paulo, Brazil.

Their two bags were searched by the Airport Interdiction Task Force, which found the cocaine crystals concealed in the lining of the luggage. It weighed 6.8kg, including packaging.

The seized cocaine had a street value of 20.4 million baht, according to the department.