Original: 代重要子公司正能量運動(股)公司發生網路資安事件說明
EMT (5348)Fairis: A Provable Defense Against Fairness Poisoning in Collaborative Machine Learning
Fairis introduces a server-side reweighting scheme that provably reduces adversarial influence in collaborative ML by weighting client updates based on local fairness scores, offering monotone weight reduction against bias while maintaining positive weights for honest participants, with empirical validation on Taiwan Credit data showing 41–54% weight reduction for stealthy adversaries.
GovCERT.HK Issues High Threat Alert for Linux Kernel Open vSwitch Privilege Escalation Flaw (CVE-2026-64531)
GovCERT.HK has issued a High Threat Security Alert (A26-08-05) for a local elevation of privilege vulnerability (OVSwrap, CVE-2026-64531) in the Linux Kernel Open vSwitch Datapath, affecting multiple kernel versions and enabling unprivileged local attackers to gain root access via memory corruption, with public PoC exploit code available.
GovCERT.HK Issues Alert on OpenSSL Denial-of-Service Vulnerability Patched in Versions 3.6.4 and 4.0.2
GovCERT.HK has issued Security Alert A26-08-07 regarding a denial-of-service vulnerability in OpenSSL versions prior to 3.6.4 and 4.0.2, tracked as CVE-2026-54876, with patches now available via OpenSSL security advisory 20260805.
Minimum Fields to Capture for a CVE Watchlist Entry
A Practical Workflow for Minimum fields to capture for a CVE watchlist entry — 5 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
Monitoring Singapore CSA Advisories for SaaS and Managed-Service Risk
A Practical Workflow for Monitoring Singapore CSA advisories for SaaS and managed-service risk — 5 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
East Asia AI Model Abuse Signals That Should Stay Monitor-Only
A Practical Workflow for East Asia AI model abuse signals that should stay monitor-only — 5 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
Friendly Fire Attack Exposes Fundamental Trust Boundary Flaw in AI Coding Agents
The Friendly Fire proof-of-concept demonstrates how attackers can weaponize AI coding agents through prompt injection in project documentation, achieving remote code execution by exploiting the agent’s inability to distinguish between data and executable instructions without modifying the agent itself.
Turn a Single CVE Mention in an East Asia Advisory into an Internal Verification Task List
A Practical Workflow for Turn a single CVE mention in an East Asia advisory into an internal verification task list — 4 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.
Larva-24009 Threat Actor’s 2026 Phishing Campaign Reveals Persistent Use of LNK Malware and Telegram-Based Exfiltration
ASEC’s analysis of a 2026 phishing email campaign by the Larva-24009 threat actor details how LNK files disguised as legitimate documents deploy PowerShell backdoors, QuasarRAT, UltraVNC, and NirSoft tools for credential theft, with persistence via scheduled tasks and exfiltration through the Telegram API, targeting users in Korea and globally.
Triage a JPCERT/CC Weekly Report Entry without Overclaiming
A Practical Workflow for Triage a JPCERT/CC Weekly Report entry without overclaiming — 3 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims.