Track East Asia cyber, AI, cloud, and infrastructure risk before it becomes an incident.
This practical tutorial guides security teams in using the CISA Known Exploited Vulnerabilities (KEV) catalog to create a focused, actionable patch watchlist for East Asia-based suppliers. It outlines steps to map KEVs to supplier software inventories, assign ownership, set flexible escalation thresholds, and maintain evidence records—without relying on numeric thresholds or rigid schedules. Read more
ASEC’s Ransom & Dark Web Issues report for week 3 of May 2026 details a ransomware attack on South Korean cosmetics firm Nova, alleged data leakage from an open-source visualization platform attributed to CoinbaseCartel, and claimed source-code theft and sale from a developer platform by TeamPCP, based on AhnLab TIP monitoring. Read more
Microsoft's Digital Crimes Unit has disrupted 'SignSpace,' a prolific malware-signing-as-a-service operation run by the threat actor Fox Tempest. By weaponizing Microsoft's own Artifact Signing system via stolen identities, the actor provided valid digital certificates to ransomware groups including Vanilla Tempest, Akira, and Qilin, allowing malicious payloads to bypass enterprise security controls globally. Read more
The paper proposes a novel approach to decentralize federated learning using blockchain technology and multi-task peer prediction to address the computational burden of contribution measurement on blockchain systems. It leverages smart contracts and cryptocurrencies to incentivize honest participation in AI training. Read more
Use Nogosee’s public procurement and MOPS incident records to compare cybersecurity spending signals with disclosed incidents in Taiwan as separate data streams. This workflow guides security, risk, and procurement teams to independently review tenders, awards, and incident statements without implying causation, using Nogosee as a monitoring layer for source verification and contextual review. Read more
Microsoft issued a mitigation for CVE-2026-45585 (YellowKey), a zero-day BitLocker bypass allowing physical-access attackers to trigger an unrestricted shell in WinRE via USB-delivered FsTx files and CTRL key input. The flaw affects Windows 11 versions 24H2, 25H2, 26H1 and Windows Server 2025, revealing a critical limitation in TPM-only encryption that requires multi-factor pre-boot authentication to fully mitigate. Read more
Governance, risk, and AI platform teams can use Nogosee’s East Asia Cyber & AI Risk Tracker to build a structured watchlist for monitoring AI security signals across Taiwan, Japan, Korea, China, Singapore, Philippines, and Thailand. This workflow outlines repeatable steps for signal discovery, filtering, validation, and operational use—without relying on breaking news or speculative thresholds. Read more
A new arXiv paper reveals that stringent university cybersecurity measures—such as MFA, device compliance, and remote management—disproportionately block international students in UK-China transnational programmes due to time-zone gaps and lack of real-time IT support, exposing a critical flaw in co-located security assumptions. Read more
This practical tutorial guides security teams through comparing CERT and vulnerability signals across Taiwan, Japan, and Korea for a single vendor using Nogosee's East Asia Cyber & AI Risk Tracker. It provides step-by-step workflow guidance for signal discovery, inspection, and monitoring without implying real-time urgency or inventing unsupported metrics. Read more
MolTrust implements a production trust infrastructure for autonomous AI agents using W3C Verifiable Credentials and DIDs, with 69,000 bots processing 165 million transactions worth $50M USDC on Base Layer 2 since March 2026, featuring kernel-level authorization enforcement and cross-protocol interoperability. Read more