Track East Asia cyber, AI, cloud, and infrastructure risk before it becomes an incident.
ASEC’s Ransom & Dark Web Issues report for week 3 of May 2026 details a ransomware attack on South Korean cosmetics firm Nova, alleged data leakage from an open-source visualization platform attributed to CoinbaseCartel, and claimed source-code theft and sale from a developer platform by TeamPCP, based on AhnLab TIP monitoring. Read more
Microsoft's Digital Crimes Unit has disrupted 'SignSpace,' a prolific malware-signing-as-a-service operation run by the threat actor Fox Tempest. By weaponizing Microsoft's own Artifact Signing system via stolen identities, the actor provided valid digital certificates to ransomware groups including Vanilla Tempest, Akira, and Qilin, allowing malicious payloads to bypass enterprise security controls globally. Read more
This practical checklist guides security teams on using Nogosee’s public-signal scoring workflow to decide whether an East Asia cyber or AI signal should become an article, remain a tracker record, or be held for later review. It outlines decision criteria, ownership, escalation paths, and next steps without implying rigid thresholds or publishing cadences. Read more
Nogosee's tracker-first policy allows monitor-only records to remain valuable through scoring, filtering, and brief queues without forcing weak signals into full articles. This workflow guides security, cloud, and operations teams on how to use the East Asia Cyber & AI Risk Tracker for repeatable monitoring, verification, and escalation while preserving source integrity and avoiding low-value publishing. Read more
The paper proposes a novel approach to decentralize federated learning using blockchain technology and multi-task peer prediction to address the computational burden of contribution measurement on blockchain systems. It leverages smart contracts and cryptocurrencies to incentivize honest participation in AI training. Read more
This guide provides a step-by-step workflow for security teams to assess whether a critical-infrastructure signal from Nogosee’s East Asia tracker warrants inclusion in a regional risk brief, focusing on source scope, sector relevance, operator type, dependency chains, and uncertainty boundaries without relying on numeric thresholds or rigid rules. Read more
Use Nogosee’s public procurement and MOPS incident records to compare cybersecurity spending signals with disclosed incidents in Taiwan as separate data streams. This workflow guides security, risk, and procurement teams to independently review tenders, awards, and incident statements without implying causation, using Nogosee as a monitoring layer for source verification and contextual review. Read more
MCPThreatHive is an open-source platform that automates MCP threat intelligence through continuous data collection, AI-driven extraction, and a unified taxonomy of 38 threat patterns mapped to STRIDE and OWASP frameworks, addressing gaps in compositional attack modeling and continuous monitoring. Read more
This checklist guides analysts in extracting actionable intelligence from public cyber incident disclosures using Nogosee’s East Asia Cyber & AI Risk Tracker. It outlines steps for identifying source wording, affected entities, sectors, uncertainty levels, response status, and watchlist follow-up, with clear ownership, decision criteria, and escalation paths for security and operations teams. Read more
CVE-2026-45829 in ChromaDB’s Python FastAPI server allows unauthenticated remote code execution by executing malicious models from Hugging Face before authentication verification, affecting an estimated 73% of exposed instances and posing significant risk to agentic AI deployments reliant on dynamic model loading. Read more