Track East Asia cyber, AI, cloud, and infrastructure risk before it becomes an incident.
A critical OS command injection vulnerability (CVE-2026-3014, CVSS 9.1) in Siemens Siveillance Video Management Servers allows authenticated users with edit permissions to execute arbitrary code. Siemens has released patched versions for V2023 R3, V2024 R1, and V2025 product lines. CISA urges network isolation and VPN use for remote access. Read more
Lazarus Group exploited CVE-2026-68820, a Windows AFD.sys privilege escalation flaw, to deploy the Troy backdoor via trojanized PDF viewers and DLL side-loading, targeting defense and aerospace sectors globally using compromised legitimate infrastructure for C2. Read more
A medium-severity denial-of-service vulnerability (CVE-2026-59693) in Siemens Desigo DXR and PXC controllers allows attackers to disrupt building automation systems via malformed BACnet packets, requiring device reset for recovery. Siemens has released patched versions and recommends network segmentation and VPN use for mitigation. Read more
GovCERT.HK has issued Security Alert A26-08-24 warning of a denial-of-service vulnerability in OpenSSL versions 3.5.x, 3.6.x, and 4.0.x, patched in releases 3.5.8, 3.6.4, and 4.0.2. Tracked as CVE-2026-14456, the flaw poses availability risks to global infrastructure relying on OpenSSL for TLS, with particular relevance to East Asia’s high-density financial, telecom, and cloud environments. The alert, published August 14, 2026, follows the upstream OpenSSL advisory by one day, underscoring the role of regional CERTs in accelerating patch awareness. Read more
Cisco has confirmed active exploitation of CVE-2026-20349 (CVSS 8.6), a high-severity vulnerability in ASA and FTD software allowing unauthenticated remote attackers to trigger device reload via crafted HTTP requests to SSL VPN services, resulting in denial-of-service. The flaw affects multiple versions of ASA and FTD with specific VPN configurations enabled, and has been added to CISA’s KEV catalog with a patch deadline of August 14, 2026 for U.S. federal agencies. No workarounds exist; mitigation requires applying vendor-provided hotfixes. Read more
ASEC’s August 12, 2026 threat report details ransomware attacks by DragonForce on a Korean online education provider and Qilin on a Korean motor/robotics manufacturer, alongside ShinyHunters’ data theft claim against a U.S. digital healthcare firm, reflecting ongoing regional ransomware trends targeting critical sectors in East Asia and North America. Read more
China RealDID proposes a three-layer architecture that anchors verifiable credentials in state-verified legal identity while preserving payload privacy through a content-blind government relay, addressing the trust gap between decentralized identity systems and legal compliance. Read more
Taiwan's Administration for Cyber Security (ACS) has issued binding guidelines mandating tiered ICT security measures for government personnel traveling abroad, requiring temporary, sanitized devices and data minimization for officials visiting high-risk jurisdictions including mainland China, Hong Kong, and Macau to prevent espionage and data compromise. Read more
The Friendly Fire proof-of-concept demonstrates how attackers can weaponize AI coding agents through prompt injection in project documentation, achieving remote code execution by exploiting the agent's inability to distinguish between data and executable instructions without modifying the agent itself. Read more
While the state-sponsored group deployed backdoors (Struggle/SIGNBT 3.0 and Brandoor/COPPERHEDGE) for espionage, Gunra ransomware was used in parallel attacks for data encryption and exfiltration. Overlapping indicators—including SSH key fingerprints, network infrastructure, and watering hole domains—suggest shared TTPs, though ASEC concludes no definitive collaboration has been proven. The campaign, named 'Operation Double Barrel,' highlights the risk of dual-use exploits in critical financial software supply chains. Read more