Data / Tool
Open the risk workbench
Search records, inspect source links, compare priority, export capped samples, and check source freshness before deciding what deserves deeper review.
TitanCA: LLM Orchestration for Zero-Day Discovery in Open Source Software
A research paper from Singapore Management University and GovTech Singapore details TitanCA, an LLM-based vulnerability discovery system that identified 203 zero-day flaws and generated 118 CVEs in open-source software through a four-agent architecture.
Multiple Vulnerabilities Found in Fujitsu Japan’s Musetheque V4 Information Disclosure for IPKNOWLEDGE
Fujitsu Japan’s Musetheque V4 Information Disclosure for IPKNOWLEDGE contains multiple vulnerabilities, including XSS (CVE-2026-24662) and CSRF (CVE-2026-28761), allowing attackers to execute arbitrary scripts or perform unintended actions via crafted files or pages when users are logged in. Fixes are available in revision rev2603.1.
Cross-Cultural Collaboration Identified as Core Challenge in Global Cybersecurity Governance at Taiwan Cybersecurity Conference
Experts at Taiwan Cybersecurity Conference highlight that the greatest obstacle in multinational cybersecurity governance is not technology, but cultural and cognitive misalignment across teams, requiring deliberate alignment on risk understanding, roles, and communication to overcome interpretation gaps and differing workplace norms.
Linux Zero-Day Exploits Target Dirty Frag Chain Amid Taiwan’s PQC Push
Taiwan faces ongoing Linux zero-day attacks exploiting the Dirty Frag privilege-escalation chain (CVE-2026-43284, CVE-26-43500) affecting major distributions, while financial and healthcare sectors accelerate post-quantum cryptography migration guidance following Taiwan Security Conference insights.
Trojan and Phishing Dominate Korean Phishing Email Attachments in April 2026
In April 2026, Trojan malware accounted for 47% of phishing email attachments in South Korea, followed by phishing payloads at 39%, according to ASEC analysis. Attackers used social engineering lures like fake tax invoices and logistics notifications, with Trojans often delivered via double-extension files and phishing via HTML spoofs. The share of phishing malware rose from 21% to 39% month-over-month.
How to Build a Weekly East Asia Cyber Risk Brief for Executives Using Nogosee Tracker
This practical workflow guides security teams in creating a concise, actionable weekly executive brief from the Nogosee East Asia Cyber & AI Risk Tracker. It outlines signal selection, regional and sector grouping, writing standards, ownership, escalation triggers, and next steps—without requiring breaking news or U.S.-centric impact.
How to Turn East Asia CERT Feeds into SOC Tickets Without Creating Alert Noise
Use Nogosee’s East Asia Cyber & AI Risk Tracker to convert CERT, vulnerability, and security records into SOC tickets only when they meet clear ownership, exposure, urgency, and actionability criteria, reducing alert fatigue through structured triage.
How to Triage a JPCERT/CC Alert in 10 Minutes: A Practical Guide for SOC and Cloud Security Teams
This guide provides a step-by-step workflow for triaging JPCERT/CC security alerts within 10 minutes, focusing on identifying affected technology, exposure, urgency, ownership, ticket priority, and follow-up actions using the official JPCERT/CC RSS feed as the source.
Research Digest: Thai Personal Data Exposure Study Finds 1.2 Million National ID Records Indexed Online
A research paper reports that more than 1.2 million Thai National Identification Numbers were exposed through pages indexed by search engines. This Nogosee research digest translates the paper abstract into English context, links the full paper, and explains the operational relevance for privacy, identity, government web governance, and East Asia risk monitoring.
Japanese Automaker Data Breach and South Korean Steel Ransomware Attack Highlight East Asia Cyber Threats
In March 2026, a Japanese automaker suffered a personal data breach via unauthorized external access, while INC Ransom targeted a South Korean steel manufacturer in a ransomware attack. Simultaneously, the administrator of the LeakBase dark web forum was arrested in Russia. These incidents underscore ongoing cyber risks to manufacturing sectors in Japan and South Korea, with implications for supply chain security and threat actor infrastructure disruption.