Original: 代重要子公司正能量運動(股)公司發生網路資安事件說明
EMT (5348)East Asia Cyber Risk Signal: What Security Teams Should Monitor
Threat actors are actively exploiting CVE-2026-55040, a critical Microsoft SharePoint authentication bypass vulnerability, following the release of a public proof-of-concept by Rapid7. The flaw allows unauthenticated remote attackers to forge JWT tokens and impersonate any SharePoint user, including administrators, to read and modify data. Microsoft patched the vulnerability in its July 2026 Update Tuesday release. Organizations must prioritize patching and monitor for anomalous authentication patterns in SharePoint environments.
GovCERT.HK Alert Highlights OpenSSL Denial-of-Service Flaw CVE-2026-14456 Across Major Release Lines
GovCERT.HK has issued Security Alert A26-08-24 warning of a denial-of-service vulnerability in OpenSSL versions 3.5.x, 3.6.x, and 4.0.x, patched in releases 3.5.8, 3.6.4, and 4.0.2. Tracked as CVE-2026-14456, the flaw poses availability risks to global infrastructure relying on OpenSSL for TLS, with particular relevance to East Asia’s high-density financial, telecom, and cloud environments. The alert, published August 14, 2026, follows the upstream OpenSSL advisory by one day, underscoring the role of regional CERTs in accelerating patch awareness.
Dream Security Details Chinese Hackers’ Eight-Agent AI Attack Framework Targeting Taiwan Government Systems
An Israeli AI security startup disclosed that Chinese threat actors deployed an autonomous AI attack framework utilizing eight concurrent AI agents to breach Taiwan government networks, featuring dual-layer Bayesian decision-making, self-correction of false positives, and cross-agent validation of vulnerabilities.
Cisco ASA and FTD Flaw Exploited in the Wild Triggers Remote DoS
Cisco has confirmed active exploitation of CVE-2026-20349 (CVSS 8.6), a high-severity vulnerability in ASA and FTD software allowing unauthenticated remote attackers to trigger device reload via crafted HTTP requests to SSL VPN services, resulting in denial-of-service. The flaw affects multiple versions of ASA and FTD with specific VPN configurations enabled, and has been added to CISA’s KEV catalog with a patch deadline of August 14, 2026 for U.S. federal agencies. No workarounds exist; mitigation requires applying vendor-provided hotfixes.
Critical SAP Commerce Cloud Flaw Enables Unauthenticated Remote Code Execution
SAP has patched CVE-2026-58231, a CVSS 10.0 vulnerability in Commerce Cloud’s Data Hub Adapter allowing unauthenticated attackers to execute arbitrary code via insufficient authorization and input validation. Patches and mitigation guidance are now available.
ASEC Weekly Report Highlights DragonForce, Qilin, and ShinyHunters Activity Across Education, Manufacturing, and Healthcare Sectors in August 2026
ASEC’s August 12, 2026 threat report details ransomware attacks by DragonForce on a Korean online education provider and Qilin on a Korean motor/robotics manufacturer, alongside ShinyHunters’ data theft claim against a U.S. digital healthcare firm, reflecting ongoing regional ransomware trends targeting critical sectors in East Asia and North America.
GovCERT.HK Warns of Actively Exploited Cisco Firewall DoS Flaw CVE-2026-20349
GovCERT.HK issued a High Threat Security Alert (A26-08-17) on 12 August 2026 warning of active exploitation of CVE-2026-20349, a denial-of-service vulnerability in Cisco Secure Firewall ASA and Threat Defense software. Administrators must apply patches immediately to prevent service disruption.
China RealDID: A State-Bounded Verifiable Credentials Model for Legal Identity Anchoring
China RealDID proposes a three-layer architecture that anchors verifiable credentials in state-verified legal identity while preserving payload privacy through a content-blind government relay, addressing the trust gap between decentralized identity systems and legal compliance.
GovCERT.HK Issues High Threat Alert on Linux Kernel Privilege Escalation Flaws Zapscape and SCTPhantom
GovCERT.HK has issued a High Threat Security Alert (A26-08-15) for two elevation-of-privilege vulnerabilities in the Linux kernel—Zapscape (CVE-2026-64561) and SCTPhantom (CVE-2026-64564)—with public PoC exploit code available for Zapscape, posing immediate risk of VM escape and host compromise.
Taiwan Formalizes Tiered ICT Security for Official Travel to Mitigate Espionage Risks
Taiwan’s Administration for Cyber Security (ACS) has issued binding guidelines mandating tiered ICT security measures for government personnel traveling abroad, requiring temporary, sanitized devices and data minimization for officials visiting high-risk jurisdictions including mainland China, Hong Kong, and Macau to prevent espionage and data compromise.