Track East Asia cyber, AI, cloud, and infrastructure risk before it becomes an incident.
Taiwan's Administration for Cyber Security (ACS) has issued binding guidelines mandating tiered ICT security measures for government personnel traveling abroad, requiring temporary, sanitized devices and data minimization for officials visiting high-risk jurisdictions including mainland China, Hong Kong, and Macau to prevent espionage and data compromise. Read more
Fairis introduces a server-side reweighting scheme that provably reduces adversarial influence in collaborative ML by weighting client updates based on local fairness scores, offering monotone weight reduction against bias while maintaining positive weights for honest participants, with empirical validation on Taiwan Credit data showing 41–54% weight reduction for stealthy adversaries. Read more
GovCERT.HK has issued a High Threat Security Alert (A26-08-05) for a local elevation of privilege vulnerability (OVSwrap, CVE-2026-64531) in the Linux Kernel Open vSwitch Datapath, affecting multiple kernel versions and enabling unprivileged local attackers to gain root access via memory corruption, with public PoC exploit code available. Read more
GovCERT.HK has issued Security Alert A26-08-07 regarding a denial-of-service vulnerability in OpenSSL versions prior to 3.6.4 and 4.0.2, tracked as CVE-2026-54876, with patches now available via OpenSSL security advisory 20260805. Read more
A Practical Workflow for Minimum fields to capture for a CVE watchlist entry — 5 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more
A Practical Workflow for Monitoring Singapore CSA advisories for SaaS and managed-service risk — 5 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more
A Practical Workflow for East Asia AI model abuse signals that should stay monitor-only — 5 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more
The Friendly Fire proof-of-concept demonstrates how attackers can weaponize AI coding agents through prompt injection in project documentation, achieving remote code execution by exploiting the agent's inability to distinguish between data and executable instructions without modifying the agent itself. Read more
A Practical Workflow for Turn a single CVE mention in an East Asia advisory into an internal verification task list — 4 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more
A Practical Workflow for Triage a JPCERT/CC Weekly Report entry without overclaiming — 3 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more