Identity & Governance Archives - Page 5 of 11

May 21, 2026 AI Security Identity & Governance Security Operations Vulnerability Intelligence

YellowKey Exploit Exposes TPM-Only BitLocker Gaps in Modern Windows Systems

Microsoft issued a mitigation for CVE-2026-45585 (YellowKey), a zero-day BitLocker bypass allowing physical-access attackers to trigger an unrestricted shell in WinRE via USB-delivered FsTx files and CTRL key input. The flaw affects Windows 11 versions 24H2, 25H2, 26H1 and Windows Server 2025, revealing a critical limitation in TPM-only encryption that requires multi-factor pre-boot authentication to fully mitigate. Read more

May 21, 2026 AI Security Cloud Security Identity & Governance Security Operations

Build an East Asia AI security watchlist for governance teams using Nogosee’s tracker

Governance, risk, and AI platform teams can use Nogosee’s East Asia Cyber & AI Risk Tracker to build a structured watchlist for monitoring AI security signals across Taiwan, Japan, Korea, China, Singapore, Philippines, and Thailand. This workflow outlines repeatable steps for signal discovery, filtering, validation, and operational use—without relying on breaking news or speculative thresholds. Read more

May 20, 2026 AI Security Identity & Governance Incidents & Breaches Security Operations

MolTrust: W3C-Verifiable-Credential Trust Infrastructure for Autonomous Agents Deployed at Scale

MolTrust implements a production trust infrastructure for autonomous AI agents using W3C Verifiable Credentials and DIDs, with 69,000 bots processing 165 million transactions worth $50M USDC on Base Layer 2 since March 2026, featuring kernel-level authorization enforcement and cross-protocol interoperability. Read more

May 20, 2026 AI Security Identity & Governance Incidents & Breaches Security Operations

Taiwan Cyber Risk Signal: What Security Teams Should Monitor

Researchers developed TWGuard, an LLM safety guardrail optimized for the Taiwan linguistic context, achieving a +0.289 F1 gain over foundation models and a 94.9% reduction in false positive rate compared to the strongest baseline, demonstrating the value of linguistic context in AI safety. Read more

May 20, 2026 AI Security Identity & Governance Incidents & Breaches Security Operations

Rethinking Frontier AI Safety Cases: Lessons from Safety-Critical Industries

A new research paper argues that current AI safety case methodologies lack rigor by over-relying on alignment community approaches instead of established safety assurance practices from aerospace, nuclear, and automotive sectors, proposing a stronger framework grounded in decades of safety-critical system validation. Read more

May 19, 2026 AI Security Identity & Governance Incidents & Breaches Security Operations

Thai National ID Exposure Reveals Government Data Governance Gaps

A research study identified over 1.2 million exposed Thai National Identification Numbers via search engines, with most originating from government websites, highlighting systemic data protection failures in public sector digital systems. Read more

May 17, 2026 Cloud Security Identity & Governance Security Operations Vulnerability Intelligence

How to Use JVN Vulnerability Notes for Japanese Product and Supplier Exposure Monitoring

Global security teams can monitor Japanese product vulnerabilities and supplier risk by using the JVN feed as a primary source. This guide outlines concrete steps for tracking exposure, assessing patch urgency, and managing cross-border risk without requiring numeric thresholds or fixed review cadences. Read more

May 16, 2026 Identity & Governance Incidents & Breaches Security Operations Vulnerability Intelligence

Multiple Vulnerabilities Found in Fujitsu Japan’s Musetheque V4 Information Disclosure for IPKNOWLEDGE

Fujitsu Japan's Musetheque V4 Information Disclosure for IPKNOWLEDGE contains multiple vulnerabilities, including XSS (CVE-2026-24662) and CSRF (CVE-2026-28761), allowing attackers to execute arbitrary scripts or perform unintended actions via crafted files or pages when users are logged in. Fixes are available in revision rev2603.1. Read more

May 16, 2026 AI Security Identity & Governance Incidents & Breaches Security Operations

Cross-Cultural Collaboration Identified as Core Challenge in Global Cybersecurity Governance at Taiwan Cybersecurity Conference

Experts at Taiwan Cybersecurity Conference highlight that the greatest obstacle in multinational cybersecurity governance is not technology, but cultural and cognitive misalignment across teams, requiring deliberate alignment on risk understanding, roles, and communication to overcome interpretation gaps and differing workplace norms. Read more

May 16, 2026 AI Infrastructure Risk Identity & Governance Incidents & Breaches Security Operations

Trojan and Phishing Dominate Korean Phishing Email Attachments in April 2026

In April 2026, Trojan malware accounted for 47% of phishing email attachments in South Korea, followed by phishing payloads at 39%, according to ASEC analysis. Attackers used social engineering lures like fake tax invoices and logistics notifications, with Trojans often delivered via double-extension files and phishing via HTML spoofs. The share of phishing malware rose from 21% to 39% month-over-month. Read more