Data / Tool
Open the risk workbench
Search records, inspect source links, compare priority, export capped samples, and check source freshness before deciding what deserves deeper review.
AhnLab Details Suo5 HTTP Tunneling and Pivoting Techniques Across IIS and Jenkins Systems
AhnLab ASEC published an analysis detailing how attackers exploit the Suo5 HTTP and HTTPS tunneling tool for network pivoting and lateral movement. The report documents real-world file deployment on Windows IIS web servers and fileless memory injection within Java-based Jenkins environments, outlining specific execution artifacts and defensive recommendations.
AhnLab Analyzes New Rust-Based Infostealer and Dropper Disguised as Illegal Software
AhnLab identified a new Rust-based information theft malware disguised as illegal programs that first emerged in mid-August and spread widely in September. The malware steals browser, remote access, cloud, and credential data, features sophisticated anti-analysis techniques, and functions as a dropper for additional payloads.
CISA Warns of Critical Flaws in Guangzhou Juan IoT Technology EseeCloud IP Camera Firmware
CISA issued advisory ICSA-26-288-02 regarding three vulnerabilities in Guangzhou Juan IoT Technology Co., Ltd. EseeCloud App and Firmware, which could allow an attacker to gain control over affected IP cameras. The vendor did not respond to CISA’s coordination attempts, and the flaws include a critical hard-coded credential vulnerability that allows an attacker to log in to EseeCloud devices across worldwide deployments.
A Practical Workflow for How to use Nogosee CSV exports in a weekly risk meeting — 2 September 2026 Review
A Practical Workflow for How to use Nogosee CSV exports in a weekly risk meeting — 2 September 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for How to triage a JPCERT/CC alert in 10 minutes — 3 September 2026 Review
A Practical Workflow for How to triage a JPCERT/CC alert in 10 minutes — 3 September 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for How to triage a JPCERT/CC alert in 10 minutes — 2 September 2026 Review
A Practical Workflow for How to triage a JPCERT/CC alert in 10 minutes — 2 September 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Taiwan semiconductor and manufacturing supplier cyber risk review — 1 September 2026 Review
A Practical Workflow for Taiwan semiconductor and manufacturing supplier cyber risk review — 1 September 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Create a weekly East Asia cyber risk brief for executives — 1 September 2026 Review
A Practical Workflow for Create a weekly East Asia cyber risk brief for executives — 1 September 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for How to decide whether a Taiwan CERT vulnerability matters to your company — 1 September 2026 Review
A Practical Workflow for How to decide whether a Taiwan CERT vulnerability matters to your company — 1 September 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for How to triage a JPCERT/CC alert in 10 minutes — 1 September 2026 Review
A Practical Workflow for How to triage a JPCERT/CC alert in 10 minutes — 1 September 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.