Signal Database
East Asia Cyber & AI Risk Tracker
Search structured signals first, then open briefs, exports, or public-source records when a signal deserves deeper review.
Search A Task
Start with a country, CVE, company, sector, source family, or threat theme such as ransomware, JVN, KrCERT, procurement, or AI security.
Inspect Signals
Open source-linked records, compare priority, check dates, and use the related collection pages when a record needs context.
Export Or Monitor
Use capped CSV, indicator CSV, RSS, copyable briefs, and local watchlists for repeat workflow use. Larger data access uses the request form.
Who This Helps
Security, cloud, governance, supplier-risk, and research teams that need English access to East Asia public cyber, AI, cloud, incident, procurement, and CERT signals.
How To Verify
Treat Nogosee as a monitoring layer: open the linked source, compare nearby tracker records, and check methodology and update cadence before making operational decisions.
Public Boundary
Public search, CSV, RSS, and topic pages are capped samples. Full feeds, historical exports, and custom monitoring remain request-only, and private query logic is not published.
Live Database Proof
The tracker is backed by structured public records before any article is written.
This server-rendered proof uses the public-signal summary first, so crawlers, screenshots, and no-JavaScript checks can see that the database is alive.
Latest database activity 2026-06-19 09:00. Snapshot generated 2026-06-19 10:51. Capped public exports prove workflow fit; full feeds and historical access remain request-only.
Dashboard Lens
Regional risk and workflow queue
Use this snapshot to decide whether to start with country monitoring, CVE triage, ransomware watch, cloud/identity review, or API/export evaluation.
- A Practical Workflow for Build a minimal SBOM intake checklist for East Asia supplier riskGlobal / Security
- A Practical Workflow for Convert AWS security bulletins into cloud platform action itemsGlobal / Security
- A Practical Workflow for Cross-check East Asia CERT signals against NVD CVE entriesGlobal / Security
- A Practical Workflow for Create a vendor comms template for urgent patch advisoriesGlobal / Security
151 signals across 24 active days.
28 recently fetched / 27 enabled / 31 configured
Review high-priority and fresh records before export.
Open vulnerability/CVE queryReview high-priority and fresh records before export.
Open ransomware/extortion queryA Practical Workflow for Build a minimal SBOM intake checklist for East Asia supplier risk
A Practical Workflow for Build a minimal SBOM intake checklist for East Asia supplier risk helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Convert AWS security bulletins into cloud platform action items
A Practical Workflow for Convert AWS security bulletins into cloud platform action items helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Cross-check East Asia CERT signals against NVD CVE entries
A Practical Workflow for Cross-check East Asia CERT signals against NVD CVE entries helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Create a vendor comms template for urgent patch advisories
A Practical Workflow for Create a vendor comms template for urgent patch advisories helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for A simple method to dedupe similar advisories across sources and languages
A Practical Workflow for A simple method to dedupe similar advisories across sources and languages helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for What to capture from a data breach disclosure for later follow-up
A Practical Workflow for What to capture from a data breach disclosure for later follow-up helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
FortiBleed Exposes Over 70,000 Fortinet Device Credentials, Taiwan Ranks Third Globally
Over 73,900 unique Fortinet device URLs were compromised in a credential harvesting campaign, with Taiwan accounting for 3,637 exposed devices—the third highest globally. Attackers conducted approximately 1.16 billion login attempts against FortiGate systems and 2.1 billion against SQL Server, leveraging offline GPU cracking to steal plaintext credentials for lateral movement into Active Directory.
A Practical Workflow for How to write an internal alert from a CERT bulletin without exaggeration
A Practical Workflow for How to write an internal alert from a CERT bulletin without exaggeration helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Build a supplier exposure watchlist from East Asia vulnerability notes
A Practical Workflow for Build a supplier exposure watchlist from East Asia vulnerability notes helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Questions to ask when a vendor advisory lacks version ranges
A Practical Workflow for Questions to ask when a vendor advisory lacks version ranges helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
Microsoft Confirms RoguePlanet Defender Zero-Day, Highlights Recurring Privilege Escalation Flaws in Antivirus Engines
Microsoft acknowledged a privilege escalation zero-day (CVE-2026-50656, CVSS 7.8) in its Malware Protection Engine, dubbed RoguePlanet, following public exploit disclosure by researcher Chaotic Eclipse. The flaw allows SYSTEM-level access via a race condition, even with real-time protection disabled, marking the fourth such Defender vulnerability attributed to the same researcher. Analysis indicates persistent wea...
A Practical Workflow for A Taiwan-listed company discloses a cyber incident; what should you verify first?
A Practical Workflow for A Taiwan-listed company discloses a cyber incident; what should you verify first? helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
Converging Ransomware and Data Leak Threats Target South Korea's Critical Sectors in June 2026
In Week 3 of June 2026, South Korea faced a multi-vector cyber threat landscape as Qilin ransomware struck a big data solution provider, Anubis ransomware targeted a semiconductor equipment parts manufacturer, and confidential defense industry documents appeared for sale on the dark web forum Spear Forums, highlighting coordinated risks to national technological and security assets.
Malicious JetBrains Plugins and Chrome Extensions Steal AI API Keys and Chat Data
Researchers uncovered 15 malicious JetBrains plugins posing as AI coding assistants that exfiltrate API keys for OpenAI, DeepSeek, and other LLMs, alongside two Chrome extensions stealing AI chat conversations from major platforms, highlighting supply chain risks in developer tools and browser extensions.
A Practical Workflow for How to use JPCERT/CC alert archives for vendor risk monitoring
A Practical Workflow for How to use JPCERT/CC alert archives for vendor risk monitoring helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Turn CVEs mentioned in East Asia sources into a patch queue
A Practical Workflow for Turn CVEs mentioned in East Asia sources into a patch queue helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for What to capture from a CERT advisory so you can act later
A Practical Workflow for What to capture from a CERT advisory so you can act later helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
RoguePlanet Zero-Day Exposes Critical Race Condition in Microsoft Defender’s Privileged Engine
Microsoft confirmed active development of a patch for CVE-2026-50656, a zero-day elevation of privilege vulnerability in Microsoft Defender that allows attackers to gain SYSTEM access via a race condition in the Malware Protection Engine, affecting fully patched Windows 10 and 11 systems despite real-time protection being enabled.
Supply Chain Attack on Mastra npm Packages Exposes AI Development Environments to Cryptocurrency Theft
A coordinated supply chain attack compromised 144 Mastra npm packages by hijacking a former contributor's account to inject a malicious dependency that steals cryptocurrency and establishes persistence, posing significant risks to AI development workflows and cloud infrastructure environments globally.
A Practical Workflow for What to verify before requesting paid API/database access
A Practical Workflow for What to verify before requesting paid API/database access helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Turn East Asia ransomware reports into a watchlist without panic
A Practical Workflow for Turn East Asia ransomware reports into a watchlist without panic helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for What is JPCERT/CC, and how should global security teams use its alerts?
A Practical Workflow for What is JPCERT/CC, and how should global security teams use its alerts? helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
Malicious LNK Files Disguised as Privacy Consent Forms Target South Korean Users via Fileless PowerShell and Task Scheduler Abuse
AhnLab identifies a campaign distributing malicious LNK files masquerading as personal information consent forms to execute fileless PowerShell scripts, establish persistence via Windows Task Scheduler, deploy info-stealers and backdoors, and use decoy documents to evade detection, with observed TTP overlaps to Kimsuky-like activity.
ScarCruft Uses Fake Microsoft Alerts to Deploy NarwhalRAT via LNK-Based Multi-Stage Loader
North Korean APT37 (ScarCruft) has been observed using spear-phishing emails impersonating Microsoft Account security alerts to deliver NarwhalRAT, a Python-based malware that uses in-memory execution, scheduled tasks for persistence, and dual C2 channels via Korean domains and pCloud API to evade detection.
A Practical Workflow for East Asia telecom and critical-infrastructure cyber signals
A Practical Workflow for East Asia telecom and critical-infrastructure cyber signals helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Maintain a no-hype CVE watchlist for East Asia suppliers
A Practical Workflow for Maintain a no-hype CVE watchlist for East Asia suppliers helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Use Taiwan MOPS cyber disclosures as an incident watchlist
A Practical Workflow for Use Taiwan MOPS cyber disclosures as an incident watchlist helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for East Asia telecom and critical-infrastructure cyber signals
A Practical Workflow for East Asia telecom and critical-infrastructure cyber signals helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for How to decide whether a global vendor story belongs in an East Asia tracker
A Practical Workflow for How to decide whether a global vendor story belongs in an East Asia tracker helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for How to use Nogosee CSV exports in a weekly risk meeting
A Practical Workflow for How to use Nogosee CSV exports in a weekly risk meeting helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
- 100
ScarCruft Uses Fake Microsoft Alerts to Deploy NarwhalRAT via LNK-Based Multi-Stage Loader
High importance / fresh source / threat activity / infrastructure relevance
2026-06-16 · Global · Security - 97
Converging Ransomware and Data Leak Threats Target South Korea's Critical Sectors in June 2026
High importance / fresh source / threat activity
2026-06-17 · Korea · Security - 96
Malicious LNK Files Disguised as Privacy Consent Forms Target South Korean Users via Fileless PowerShell and Task Scheduler Abuse
High importance / fresh source / threat activity
2026-06-16 · Korea · Security - 90
A Practical Workflow for Cross-check East Asia CERT signals against NVD CVE entries
Medium importance / fresh source / vulnerability signal / AI relevance
2026-06-19 · Global · Security - 90
A Practical Workflow for Create a vendor comms template for urgent patch advisories
Medium importance / fresh source / vulnerability signal / AI relevance
2026-06-18 · Global · Security
This summary is rendered by WordPress before browser-side API filters run, so the page remains useful even when the live signal API is slow.
Latest visible signal: A Practical Workflow for Build a minimal SBOM intake checklist for East Asia supplier risk
Coverage snapshot is temporarily unavailable. The tracker still exposes methodology, RSS, CSV, and server-rendered signal cards when cached data is available.
Operational brief and triage details
Scope All public signals
Latest signal 2026-06-19 - A Practical Workflow for Build a minimal SBOM intake checklist for East Asia supplier risk
- 282 total signals
- 236 published briefs
- 122 high importance
- Medium (160)
- High (122)
- Global (190)
- Taiwan (38)
- Korea (30)
- Japan (18)
- Security (261)
- Policy (10)
- Supply Chain (4)
- Product (4)
- Microsoft (28)
- Google (13)
- KISA (12)
- Anthropic (7)
- Technology (102)
- Cybersecurity (86)
- Government (86)
- Cloud Infrastructure (65)
- 100
ScarCruft Uses Fake Microsoft Alerts to Deploy NarwhalRAT via LNK-Based Multi-Stage Loader
Compare against endpoint, identity, mail, proxy, and ticket telemetry for matching behavior.
- 97
Converging Ransomware and Data Leak Threats Target South Korea's Critical Sectors in June 2026
Compare against endpoint, identity, mail, proxy, and ticket telemetry for matching behavior.
- 96
Malicious LNK Files Disguised as Privacy Consent Forms Target South Korean Users via Fileless PowerShell and Task Scheduler Abuse
Compare against endpoint, identity, mail, proxy, and ticket telemetry for matching behavior.
- 90
A Practical Workflow for Cross-check East Asia CERT signals against NVD CVE entries
Check exposure, affected products, patch status, and official advisory details.
- 90
A Practical Workflow for Create a vendor comms template for urgent patch advisories
Check exposure, affected products, patch status, and official advisory details.
- 89
A Practical Workflow for What to capture from a data breach disclosure for later follow-up
Compare against endpoint, identity, mail, proxy, and ticket telemetry for matching behavior.
Coverage and methodology
RSS and source-list items are normalized into structured signals, translated into English when needed, and enriched with entities, sectors, tags, event type, importance, timelines, and primary-source links. Low-value items can remain monitoring records instead of becoming public articles.
Last updated Jun 19, 2026 09:45 UTC. Sources are checked on a conservative cadence, and public articles are published only after quality checks pass.
Core focus: Taiwan, Japan, and Korea. Paused watchlist context: China, Singapore, Philippines, Thailand, and global cyber, AI, cloud, governance, observability, and security operations risk when clearly relevant.