Track East Asia cyber, AI, cloud, and infrastructure risk before it becomes an incident.
This checklist guides security teams in East Asia and globally on how to extract verifiable, low-risk intelligence from ransomware leak posts—focusing on entity identifiers, proof types, data categories, verification steps, and clear escalation paths—while avoiding amplification of unverified claims or harmful re-sharing. Read more
This workflow guides East Asia security teams on using FIRST’s EPSS model and CISA’s KEV catalog to prioritize CVEs without panic, explaining EPSS as a probability-based exploit predictor, when KEV confirms active exploitation, and how to document exceptions in vulnerability management processes. Read more
Orchid Security's Identity Gap Snapshot 2026 reveals that unmanaged 'identity dark matter' now constitutes 57% of enterprise identity footprints, creating systemic risks as Agent AI adoption accelerates without corresponding identity governance improvements, enabling autonomous systems to exploit orphaned accounts, excessive privileges, and locally managed nonhuman credentials. Read more
GovCERT.HK’s High Threat Security Alert A26-05-40 discloses multiple vulnerabilities in Trend Micro Apex One and TrendAI Vision One products, with CVE-2026-34926 confirmed as actively exploited in the wild. The flaws enable remote code execution, privilege escalation, information disclosure, and tampering, affecting both on-premises and SaaS deployments. Immediate patching is required to mitigate elevated cyber attack risks. Read more
Microsoft's Digital Crimes Unit has disrupted 'SignSpace,' a prolific malware-signing-as-a-service operation run by the threat actor Fox Tempest. By weaponizing Microsoft's own Artifact Signing system via stolen identities, the actor provided valid digital certificates to ransomware groups including Vanilla Tempest, Akira, and Qilin, allowing malicious payloads to bypass enterprise security controls globally. Read more
This practical checklist guides security teams on using Nogosee’s public-signal scoring workflow to decide whether an East Asia cyber or AI signal should become an article, remain a tracker record, or be held for later review. It outlines decision criteria, ownership, escalation paths, and next steps without implying rigid thresholds or publishing cadences. Read more
Nogosee's tracker-first policy allows monitor-only records to remain valuable through scoring, filtering, and brief queues without forcing weak signals into full articles. This workflow guides security, cloud, and operations teams on how to use the East Asia Cyber & AI Risk Tracker for repeatable monitoring, verification, and escalation while preserving source integrity and avoiding low-value publishing. Read more
The paper proposes a novel approach to decentralize federated learning using blockchain technology and multi-task peer prediction to address the computational burden of contribution measurement on blockchain systems. It leverages smart contracts and cryptocurrencies to incentivize honest participation in AI training. Read more
This guide provides a step-by-step workflow for security teams to assess whether a critical-infrastructure signal from Nogosee’s East Asia tracker warrants inclusion in a regional risk brief, focusing on source scope, sector relevance, operator type, dependency chains, and uncertainty boundaries without relying on numeric thresholds or rigid rules. Read more
MCPThreatHive is an open-source platform that automates MCP threat intelligence through continuous data collection, AI-driven extraction, and a unified taxonomy of 38 threat patterns mapped to STRIDE and OWASP frameworks, addressing gaps in compositional attack modeling and continuous monitoring. Read more