Original: 說明本公司發生網路資安事件
U.R. (5321)How to Compare Taiwan, Japan, and Korea CERT Signals for One Vendor Using Nogosee’s Public Tracker
This practical tutorial guides security teams through comparing CERT and vulnerability signals across Taiwan, Japan, and Korea for a single vendor using Nogosee’s East Asia Cyber & AI Risk Tracker. It provides step-by-step workflow guidance for signal discovery, inspection, and monitoring without implying real-time urgency or inventing unsupported metrics.
MolTrust: W3C-Verifiable-Credential Trust Infrastructure for Autonomous Agents Deployed at Scale
MolTrust implements a production trust infrastructure for autonomous AI agents using W3C Verifiable Credentials and DIDs, with 69,000 bots processing 165 million transactions worth $50M USDC on Base Layer 2 since March 2026, featuring kernel-level authorization enforcement and cross-protocol interoperability.
Taiwan Cyber Risk Signal: What Security Teams Should Monitor
Researchers developed TWGuard, an LLM safety guardrail optimized for the Taiwan linguistic context, achieving a +0.289 F1 gain over foundation models and a 94.9% reduction in false positive rate compared to the strongest baseline, demonstrating the value of linguistic context in AI safety.
Rethinking Frontier AI Safety Cases: Lessons from Safety-Critical Industries
A new research paper argues that current AI safety case methodologies lack rigor by over-relying on alignment community approaches instead of established safety assurance practices from aerospace, nuclear, and automotive sectors, proposing a stronger framework grounded in decades of safety-critical system validation.
Weaponization of CVE-2026-42945: NGINX Rewrite Module Vulnerability Under Active Exploitation
A critical security flaw impacting NGINX Plus and NGINX Open Source, tracked as CVE-2026-42945, has transitioned from public disclosure to active exploitation in the wild. The vulnerability is a heap buffer overflow within the ngx_http_rewrite_module that allows unauthenticated attackers to trigger worker process crashes (denial-of-service) or potentially achieve remote code execution (RCE) via crafted HTTP requests. While RCE is largely mitigated by Address Space Layout Randomization (ASLR), honeypot data confirms threat actors are already weaponizing the flaw to disrupt services. This exploitation coincides with a cluster of attacks targeting openDCIM infrastructure management software, reportedly utilizing AI-assisted vulnerability discovery tools. F5 has released patches, and immediate updates are recommended for all NGINX deployments within the affected version range (0.6.27 to 1.30.0).
Taiwan April 2026 Public Cyber Signals: Listed-Company Incident Disclosures in Context
Nogosee monitored 13 Taiwan listed-company cyber incident disclosures in April 2026. The cleaned month is incident-only: 13 incident records, 0 governance records, and 0 procurement records. This is a MOPS incident-disclosure snapshot for analyst workflow use, not a complete census of Taiwan cyber activity.
How to Build a 15-Minute Daily East Asia Cyber Signal Review Queue
A practical workflow for security teams to efficiently triage East Asia cyber and AI risk signals using Nogosee’s public tracker, focusing on filtering, ranking, and decision-making without hard thresholds or numeric claims.
Thai National ID Exposure Reveals Government Data Governance Gaps
A research study identified over 1.2 million exposed Thai National Identification Numbers via search engines, with most originating from government websites, highlighting systemic data protection failures in public sector digital systems.
How to Review Singapore CSA Alerts for Regional Cloud and Government Risk
A practical tutorial for security teams to integrate Singapore Cyber Security Agency (CSA) alerts into regional East Asia cyber risk workflows, focusing on cloud, government, finance, and supply-chain monitoring with actionable steps for review, triage, and escalation.
Hong Kong Finance and Cloud Security Escalation Checklist: Practical Workflow for GovCERT.HK Alerts
Use this practical checklist to triage Hong Kong finance, cloud, identity, telecom, and critical-infrastructure signals from GovCERT.HK. It provides reader-focused steps, decision criteria, ownership guidance, and escalation thresholds based on alert type, sector relevance, and threat level—without implying new publication or inventing numeric thresholds.