Posted on AI Security Identity & Governance Incidents & Breaches Security Operations

Research Digest: China’s ‘Airport’ Censorship Circumvention Ecosystem Reveals New Security and Operational Risks

A study of China's underground 'airport' proxy market finds over half of 1,667 surveyed users rely on these subscription services to bypass the Great Firewall, citing performance and access to global platforms like ChatGPT. Researchers identified 3,431 active airports and tested 35, noting superior speeds via multi-hop routing but also risks including Alipay payments, frequent takedowns, client misconfiguration, and private censorship enforcement. Read more

Posted on AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

A Practical Workflow for Triage a JPCERT/CC Weekly Report entry without overclaiming

A Practical Workflow for Triage a JPCERT/CC Weekly Report entry without overclaiming helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more

Posted on AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

A Practical Workflow for Turn CVE + EPSS into a calm ‘review queue’ for East Asia signals

A Practical Workflow for Turn CVE + EPSS into a calm 'review queue' for East Asia signals helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more

Posted on AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

A Practical Workflow for Use MITRE ATT&CK as a translation layer for East Asia incident writeups

A Practical Workflow for Use MITRE ATT&CK as a translation layer for East Asia incident writeups helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more

Posted on AI Security Cloud Security Incidents & Breaches Security Operations

FinRED Framework Advances Financial LLM Safety Evaluation with Expert-Guided Red-Teaming

FinRED is a new expert-guided benchmark framework for evaluating financial LLMs, designed to detect finance-specific risks like regulatory evasion and fraud by mapping global standards to threats and using real financial documents to generate realistic test prompts. It reduces critical false negatives in safety evaluations by over half and is deployed in South Korea’s Financial Security Institute sandbox for generative AI security testing. Read more

Posted on AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

A Practical Workflow for Build a minimal SBOM intake checklist for East Asia supplier risk

A Practical Workflow for Build a minimal SBOM intake checklist for East Asia supplier risk helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more

Posted on AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

A Practical Workflow for Convert AWS security bulletins into cloud platform action items

A Practical Workflow for Convert AWS security bulletins into cloud platform action items helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more

Posted on AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

A Practical Workflow for Cross-check East Asia CERT signals against NVD CVE entries

A Practical Workflow for Cross-check East Asia CERT signals against NVD CVE entries helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more

Posted on AI Infrastructure Risk Identity & Governance Incidents & Breaches Security Operations

Converging Ransomware and Data Leak Threats Target South Korea’s Critical Sectors in June 2026

In Week 3 of June 2026, South Korea faced a multi-vector cyber threat landscape as Qilin ransomware struck a big data solution provider, Anubis ransomware targeted a semiconductor equipment parts manufacturer, and confidential defense industry documents appeared for sale on the dark web forum Spear Forums, highlighting coordinated risks to national technological and security assets. Read more