Data / Tool
Open the risk workbench
Search records, inspect source links, compare priority, export capped samples, and check source freshness before deciding what deserves deeper review.
Research Digest: Explainable ML Framework Reveals Moral Condemnation as Dominant Tactic in Korean Foreign Influence Operations
A two-decade analysis of 112 million South Korean news comments identifies 23,998 accounts showing coordinated manipulation behavior, with moral condemnation of domestic political figures driving higher engagement than direct foreign narrative promotion, informing platform defense prioritization.
Cordyceps CI/CD Flaw Reveals Systemic Trust Boundary Failures in Open-Source Build Pipelines
Novee Security’s discovery of the Cordyceps CI/CD flaw exposes a widespread misconfiguration in GitHub Actions workflows where excessive permissions granted to pull requests enable unauthenticated attackers to hijack build systems, steal credentials, and compromise software supply chains across major technology organizations, highlighting critical gaps in trust boundary enforcement in automated development environments.
Operation Endgame Disrupts Amadey and StealC Malware Infrastructure, Recovers 27 Million Credentials
A coordinated international law enforcement operation, conducted between June 15–19, 2026, dismantled the criminal infrastructure supporting the Amadey and StealC malware-as-a-service networks, recovering 27 million stolen credentials, identifying and restricting $47 million in cryptocurrency assets, seizing 326 servers and 142 domains, and severing control over 18,000+ infected computers identified by Microsoft telemetry. The takedown targeted the initial access ‘assembly line’ used to launch ransomware, financial fraud, and critical infrastructure attacks across Belgium, Canada, Denmark, France, Germany, the Netherlands, the UK, and the US.
May 2026 APT Trends Highlight Developer Ecosystem and Runtime Exploitation as Key Attack Vectors
ASEC’s May 2026 APT report identifies supply chain, developer environment, and runtime abuse as dominant trends, with Lazarus exploiting Git hooks and CI/CD pipelines, Famous Chollima poisoning npm/Packagist branches, and MuddyWater leveraging Microsoft Teams and Quick Assist for credential theft. Groups like Gamaredon and UAC-0010 abused WinRAR CVE-2025-8088 against Ukrainian entities, while Chinese APTs targeted Azerbaijani energy firms via Exchange zero-days. The report underscores credential and session theft, cryptocurrency wallet targeting, and persistent remote access as common objectives across government, defense, diplomacy, energy, education, and telecom sectors.
A Practical Workflow for Monitoring Singapore CSA advisories for SaaS and managed-service risk
A Practical Workflow for Monitoring Singapore CSA advisories for SaaS and managed-service risk helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for East Asia AI model abuse signals that should stay monitor-only
A Practical Workflow for East Asia AI model abuse signals that should stay monitor-only helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for How to turn East Asia signals into a board-safe risk update
A Practical Workflow for How to turn East Asia signals into a board-safe risk update helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for A Korea supply-chain compromise rumor spreads — how to avoid chasing noise
A Practical Workflow for A Korea supply-chain compromise rumor spreads — how to avoid chasing noise helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for East Asia cloud control-plane signals worth tracking
A Practical Workflow for East Asia cloud control-plane signals worth tracking helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Create a ‘patch window’ note without claiming a deadline
A Practical Workflow for Create a ‘patch window’ note without claiming a deadline helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.