Original: 說明本公司發生網路資安事件
U.R. (5321)Wistron Accelerates Blue Team Response from Hours to Minutes via Generative AI Integration
At the 2026 CYBERSEC Taiwan conference, high-tech manufacturer Wistron revealed how its security operations center (SOC) successfully integrated generative AI to reduce incident analysis time from 15 minutes to 1 minute and overall response times from hours to under 10 minutes, achieving a 97.5% accuracy rate in threat detection.
PCPJack Malware Framework Targets Cloud Infrastructure while Displacing Rival Threat Group
Security researchers have identified a new cloud-native malware framework, PCPJack, which specializes in credential theft across Docker, Kubernetes, and Redis environments. Uniquely, the framework actively removes tools associated with the TeamPCP (PCPcat) threat group, suggesting a possible internal rift or turf war over compromised cloud assets.
Taiwan FSC Unveils Post-Quantum Cryptography Migration Guidelines for Financial Sector
Taiwan’s Financial Supervisory Commission (FSC) has announced a new roadmap for financial cybersecurity resilience, focusing on the ‘AI Vulnerability Storm’ and the transition to Post-Quantum Cryptography (PQC). The commission is set to release a formal PQC migration guide to prepare the industry for ‘Y2Q’ risks by 2029.
SAP Patches Critical Vulnerabilities in S/4HANA and Commerce Cloud with CVSS 9.6 Ratings
SAP has released its May 2026 security updates, addressing 15 vulnerabilities including two critical flaws in S/4HANA and Commerce Cloud that could lead to unauthorized data access and remote code execution.
Coupang Launches Taiwan’s First Public Bug Bounty Program Amid Regional Trust Rebuilding Efforts
Coupang Taiwan has announced a strategic partnership with HackerOne to launch the nation’s first public bug bounty program, marking a significant shift toward open security validation following a 2025 data breach that impacted 200,000 Taiwanese customers.
Microsoft Updates Sysinternals Suite: ProcDump, Autoruns, and ZoomIt Receive Major Enhancements
Microsoft has released significant updates for three core Sysinternals tools—ProcDump, Autoruns, and ZoomIt—enhancing forensic memory capture, startup persistence analysis, and technical presentation capabilities for IT professionals and security researchers.
Broadcom Releases VMware Cloud Foundation 9.1 with Enhanced Lateral Security and CrowdStrike EDR Integration
Broadcom has announced VCF 9.1, introducing a zero-trust architecture for private AI workloads, significant throughput gains for lateral threat detection, and expanded ransomware recovery options through new integration with CrowdStrike Falcon.
Taiwan CERT warns of critical pre-auth RCE flaw in EHG2408 industrial switch firmware (CVE-2026-3823)
TWCERT/CC published a TVN advisory for a critical stack-based buffer overflow in ShangShang Technology’s EHG2408 series Ethernet switches. The flaw (CVE-2026-3823, CVSS 9.8) is reachable over the network without authentication and could allow remote attackers to hijack execution flow and run arbitrary code. Affected users are advised to upgrade to firmware v3.36 or later.
TWCERT warns of brute-force protection bypass in D-Link DWM-222W Wi‑Fi 6 USB modem; firmware update available
Taiwan’s TWCERT/CC published a high-severity vulnerability notice for the D-Link DWM-222W Wi‑Fi 6 USB mobile network adapter/modem. The issue allows an unauthenticated attacker on the same network domain to bypass login attempt limits, enabling brute-force attempts that could lead to device control. D-Link firmware 1.02.00 and later is listed as the fix.
BWH Hotels Discloses Six-Month Data Breach Affecting Guest Reservations
BWH Hotels, operator of the Best Western brand, confirmed a security incident involving unauthorized access to a web application used for guest reservations. The breach spanned approximately six months, exposing personal guest information from October 2025 through April 2026.