Data / Tool
Open the risk workbench
Search records, inspect source links, compare priority, export capped samples, and check source freshness before deciding what deserves deeper review.
A Practical Workflow for Using TWCERT/CC vulnerability notes (English) to monitor Taiwan supply-chain risk
A Practical Workflow for Using TWCERT/CC vulnerability notes (English) to monitor Taiwan supply-chain risk helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
TitanCA: LLM Orchestration for Zero-Day Discovery in Open Source Software
TitanCA, a joint project by Singapore Management University and GovTech Singapore, uses a four-module LLM agent pipeline to discover zero-day vulnerabilities, yielding 118 CVEs from 203 confirmed findings in open-source software, demonstrating a practical approach to reducing SAST false positives through AI orchestration.
A Practical Workflow for What is KrCERT, and when should cloud teams act on South Korea alerts?
A Practical Workflow for What is KrCERT, and when should cloud teams act on South Korea alerts? helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
A Practical Workflow for Build an East Asia AI security watchlist for governance teams
A Practical Workflow for Build an East Asia AI security watchlist for governance teams helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
Federated Learning Enables Privacy-Preserving Sepsis Prediction Across Chinese Hospitals
A new study shows federated learning achieves sepsis prediction accuracy comparable to centralized models using data from three Chinese tertiary hospitals, without sharing raw patient data or enabling reconstruction attacks, offering a privacy-preserving framework for multi-center medical AI collaboration.
How Security Teams Can Monitor TWCERT/CC Vulnerability Notes for Taiwan Supplier Risk
This evergreen playbook provides practical workflow guidance for global security, cloud, and operations teams to monitor the TWCERT/CC English TVN RSS feed for Taiwan vendor vulnerability notes. It outlines how to preserve source integrity, separate observable facts from interpretation, and apply Nogosee workflow principles without inventing unsupported claims. The article supports continuous monitoring of thin signals in Taiwan’s cybersecurity landscape while maintaining rigorous evidentiary standards.
Monitoring TWCERT/CC vulnerability notes for Taiwan supply-chain exposure
A practical guide for global security, cloud, and operations teams to monitor TWCERT/CC’s Taiwan Vulnerability Notes (TVN) feed for early detection of supply-chain risks affecting Taiwan-based software, vendors, and infrastructure. Focuses on actionable workflow steps, ownership, and flexible review practices without implying timeliness or numerical thresholds.
Build a ‘vendor hotlist’ view from East Asia CERT feeds
This operational guide details how to build and maintain a vendor hotlist using public security signals from Taiwan, Japan, and Korea. By mapping regional CERT advisories to internal asset inventories, security teams can identify localized supply-chain risks, deduplicate cross-border signals, and establish clear ownership for East Asia-specific vendor monitoring and escalation.
Use JVN CVSS vectors to prioritize what to verify first
This tutorial explains how to use CVSS vectors from JVN advisories to prioritize vulnerability verification by interpreting exploitability, impact, and deployment context. It provides actionable steps for security teams to triage JVN entries efficiently without relying on numeric scores alone.
AI-Powered Hacking Tools Proliferate Across Platforms, Enabling Autonomous Attack Orchestration in East Asia
Since WormGPT emerged in June 2023, AI-driven hacking tools have spread via dark web, Telegram, GitHub, and Hugging Face, evolving into a hybrid market of paid SaaS and free open-source distribution. These tools automate phishing, malware development, reconnaissance, brute-forcing, vulnerability exploitation, and social engineering, lowering entry barriers while enabling autonomous attack orchestration, as seen in the Bissa Scanner case exploiting CVE-2025-55182 to compromise over 900 systems and steal 65,000+ credential files, including those linked to Anthropic, OpenAI, Google, AWS, Stripe, and PayPal.