Track East Asia cyber, AI, cloud, and infrastructure risk before it becomes an incident.
Mend has launched a Taiwan cloud region for its application security SaaS on AWS's Asia Pacific (Taipei) region, iThome reports. Distributor Systex says scan and analysis information can stay in Taiwan, with lower latency. The source offers no measured performance data or specifics on data scope. Read more
JVN#42011956 reports a DLL loading vulnerability, CVE-2026-59781, in Zabbix agent from Zabbix LLC. Versions before 6.0.48, 7.0.29 and 7.4.13 are listed. The advisory says improper installation permissions may let an unauthorized DLL load and code run with administrator privileges. It advises updating to the latest version. Read more
iThome reports that CVE-2026-98432, a 9.8-rated Linux kernel flaw in IPv4 TCP connection handling, affects kernels from 4.4 onward. Remote attackers can reportedly run arbitrary commands as root on servers with MPTCP listeners enabled. Distributions, appliance makers and cloud providers have mixed patch status, with several still investigating or waiting on upstream fixes. Read more
The UK National Cyber Security Centre assessed that attackers will very likely deploy AI-driven malware for ransomware attacks against UK critical infrastructure by 2028. AI will accelerate exploitation of known vulnerabilities in legacy systems and expand attack surface through newly deployed AI tools, making existing attacks more efficient rather than introducing entirely new methods. Read more
South Korean cybersecurity vendor AhnLab reported that advanced persistent threat groups in September 2026 shifted focus toward developer ecosystems, cloud credentials, supply chains, and network trust infrastructure. Attackers exploited legitimate software installers, GitHub, Microsoft 365, OneDrive, Nostr, routers, and TACACS authentication servers across multi-stage attack chains. Read more
The FBI, CISA, the USSS, and allied German and U.K. authorities released a joint cybersecurity advisory on SafePay ransomware. Active since August 2024, the group has impacted at least 600 separate victims across multiple critical infrastructure sectors in North America, South America, Europe, and Australia using credential theft, edge-device exploits, living-off-the-land tools, and hybrid encryption. Read more
AhnLab ASEC published an analysis detailing how attackers exploit the Suo5 HTTP and HTTPS tunneling tool for network pivoting and lateral movement. The report documents real-world file deployment on Windows IIS web servers and fileless memory injection within Java-based Jenkins environments, outlining specific execution artifacts and defensive recommendations. Read more
AhnLab identified a new Rust-based information theft malware disguised as illegal programs that first emerged in mid-August and spread widely in September. The malware steals browser, remote access, cloud, and credential data, features sophisticated anti-analysis techniques, and functions as a dropper for additional payloads. Read more
A Practical Workflow for Taiwan semiconductor and manufacturing supplier cyber risk review — 1 September 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more
CISA’s Vulnerability Review for FY2024–2025 shows most compromises stem from basic security failures and known vulnerabilities, not advanced tools, urging organizations to prioritize fixes using risk-based frameworks and Secure by Design principles. Read more