Track East Asia cyber, AI, cloud, and infrastructure risk before it becomes an incident.
An Israeli AI security startup disclosed that Chinese threat actors deployed an autonomous AI attack framework utilizing eight concurrent AI agents to breach Taiwan government networks, featuring dual-layer Bayesian decision-making, self-correction of false positives, and cross-agent validation of vulnerabilities. Read more
Cisco has confirmed active exploitation of CVE-2026-20349 (CVSS 8.6), a high-severity vulnerability in ASA and FTD software allowing unauthenticated remote attackers to trigger device reload via crafted HTTP requests to SSL VPN services, resulting in denial-of-service. The flaw affects multiple versions of ASA and FTD with specific VPN configurations enabled, and has been added to CISA’s KEV catalog with a patch deadline of August 14, 2026 for U.S. federal agencies. No workarounds exist; mitigation requires applying vendor-provided hotfixes. Read more
SAP has patched CVE-2026-58231, a CVSS 10.0 vulnerability in Commerce Cloud’s Data Hub Adapter allowing unauthenticated attackers to execute arbitrary code via insufficient authorization and input validation. Patches and mitigation guidance are now available. Read more
ASEC’s August 12, 2026 threat report details ransomware attacks by DragonForce on a Korean online education provider and Qilin on a Korean motor/robotics manufacturer, alongside ShinyHunters’ data theft claim against a U.S. digital healthcare firm, reflecting ongoing regional ransomware trends targeting critical sectors in East Asia and North America. Read more
GovCERT.HK issued a High Threat Security Alert (A26-08-17) on 12 August 2026 warning of active exploitation of CVE-2026-20349, a denial-of-service vulnerability in Cisco Secure Firewall ASA and Threat Defense software. Administrators must apply patches immediately to prevent service disruption. Read more
China RealDID proposes a three-layer architecture that anchors verifiable credentials in state-verified legal identity while preserving payload privacy through a content-blind government relay, addressing the trust gap between decentralized identity systems and legal compliance. Read more
Taiwan's Administration for Cyber Security (ACS) has issued binding guidelines mandating tiered ICT security measures for government personnel traveling abroad, requiring temporary, sanitized devices and data minimization for officials visiting high-risk jurisdictions including mainland China, Hong Kong, and Macau to prevent espionage and data compromise. Read more
Fairis introduces a server-side reweighting scheme that provably reduces adversarial influence in collaborative ML by weighting client updates based on local fairness scores, offering monotone weight reduction against bias while maintaining positive weights for honest participants, with empirical validation on Taiwan Credit data showing 41–54% weight reduction for stealthy adversaries. Read more
The Friendly Fire proof-of-concept demonstrates how attackers can weaponize AI coding agents through prompt injection in project documentation, achieving remote code execution by exploiting the agent's inability to distinguish between data and executable instructions without modifying the agent itself. Read more
ASEC’s analysis of a 2026 phishing email campaign by the Larva-24009 threat actor details how LNK files disguised as legitimate documents deploy PowerShell backdoors, QuasarRAT, UltraVNC, and NirSoft tools for credential theft, with persistence via scheduled tasks and exfiltration through the Telegram API, targeting users in Korea and globally. Read more