Original: 說明本公司發生網路資安事件
U.R. (5321)Oracle Emergency Mitigations Address Critical PeopleSoft Zero-Day Exploited in Education Sector Data Theft Campaign
Oracle has released emergency mitigations for CVE-2026-35273, a critical unauthenticated remote code execution zero-day in PeopleSoft PeopleTools versions 8.61 and 8.62, actively exploited by the ShinyHunters extortion gang in data theft attacks targeting over 100 organizations, primarily in the U.S. education sector. Mandiant confirmed the exploitation chain involving staging servers, MeshCentral agents, and data exfiltration to ShinyHunters-linked infrastructure, with 68 percent of victims in higher education.
Monitoring Singapore CSA Alerts for Regional Cloud, Finance, and Government Risk
A Practical Workflow for Monitoring Singapore CSA alerts for regional cloud, finance, and government risk helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
Monitoring KrCERT and KISA Notices for South Korea Cyber Risk
A Practical Workflow for Monitoring KrCERT and KISA notices for South Korea cyber risk helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
Using TWCERT/CC Vulnerability Notes (English) to Monitor Taiwan Supply-Chain Risk
A Practical Workflow for Using TWCERT/CC vulnerability notes (English) to monitor Taiwan supply-chain risk helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
Federated Learning Enables Privacy-Preserving Sepsis Prediction Across Chinese Hospitals
A new study shows federated learning achieves sepsis prediction accuracy comparable to centralized models using data from three Chinese tertiary hospitals, without sharing raw patient data or enabling reconstruction attacks, offering a privacy-preserving framework for multi-center medical AI collaboration.
How Security Teams Can Monitor TWCERT/CC Vulnerability Notes for Taiwan Supplier Risk
This evergreen playbook provides practical workflow guidance for global security, cloud, and operations teams to monitor the TWCERT/CC English TVN RSS feed for Taiwan vendor vulnerability notes. It outlines how to preserve source integrity, separate observable facts from interpretation, and apply Nogosee workflow principles without inventing unsupported claims. The article supports continuous monitoring of thin signals in Taiwan’s cybersecurity landscape while maintaining rigorous evidentiary standards.
Monitoring TWCERT/CC vulnerability notes for Taiwan supply-chain exposure
A practical guide for global security, cloud, and operations teams to monitor TWCERT/CC’s Taiwan Vulnerability Notes (TVN) feed for early detection of supply-chain risks affecting Taiwan-based software, vendors, and infrastructure. Focuses on actionable workflow steps, ownership, and flexible review practices without implying timeliness or numerical thresholds.
Build a ‘vendor hotlist’ view from East Asia CERT feeds
This operational guide details how to build and maintain a vendor hotlist using public security signals from Taiwan, Japan, and Korea. By mapping regional CERT advisories to internal asset inventories, security teams can identify localized supply-chain risks, deduplicate cross-border signals, and establish clear ownership for East Asia-specific vendor monitoring and escalation.
Use JVN CVSS vectors to prioritize what to verify first
This tutorial explains how to use CVSS vectors from JVN advisories to prioritize vulnerability verification by interpreting exploitability, impact, and deployment context. It provides actionable steps for security teams to triage JVN entries efficiently without relying on numeric scores alone.
AI-Powered Hacking Tools Proliferate Across Platforms, Enabling Autonomous Attack Orchestration in East Asia
Since WormGPT emerged in June 2023, AI-driven hacking tools have spread via dark web, Telegram, GitHub, and Hugging Face, evolving into a hybrid market of paid SaaS and free open-source distribution. These tools automate phishing, malware development, reconnaissance, brute-forcing, vulnerability exploitation, and social engineering, lowering entry barriers while enabling autonomous attack orchestration, as seen in the Bissa Scanner case exploiting CVE-2025-55182 to compromise over 900 systems and steal 65,000+ credential files, including those linked to Anthropic, OpenAI, Google, AWS, Stripe, and PayPal.