News Roundup: August 1-15, 2024
Bite-sized news and updates on the latest in Taiwan cybersecurity
Major Taiwanese Electronics Company Targeted in VPN Access Sale on Dark Web
August 1, 2024
A threat actor has surfaced on the dark web, claiming to sell VPN access to a prominent Taiwanese electronics company with an annual revenue of $20 billion. The access, allegedly configured through the "Dana-na" panel, is protected by two-factor authentication (2FA), which the threat actor indicates must be bypassed to fully utilize the access. As a result, the access is being offered at a discounted price, highlighting significant security concerns for the company. This incident underscores the critical importance of robust 2FA systems and the potential risks that persist even when such security measures are in place.
ANNOUNCEMENT: HITCON Community Subsidy Program Now Open
August 1, 2024
HITCON has launched its "HITCON Community Subsidy" program, designed to encourage greater participation in the HITCON CMT from international attendees and student speakers. The program offers financial support for non-Taiwanese participants and students with accepted sessions, aiming to foster international exchange and broaden the spread of cybersecurity knowledge. Additionally, a new "Information Security Community Self-Media Promotion" subsidy has been introduced to boost public awareness by supporting the promotion of cybersecurity techniques through community and self-media channels. This initiative reflects HITCON's commitment to expanding its global impact and enhancing the cybersecurity community.
Read about the new Community Subsidy guidelines here.
Taiwan Strengthens Cybersecurity Ties with Japan and the U.S.
August 5, 2024
Taiwan is making significant strides in global cybersecurity collaboration, recently hosting two key events. The "Taiwan Security Solution Day in Tokyo" on June 24th deepened Taiwan-Japan cooperation, showcasing Taiwan's cybersecurity research and strengthening ties with Japan's National Institute of Information and Communications Technology (NICT). Shortly after, the TW-US Joint Workshop on “Resilient Networks and AI for Cybersecurity” concluded in Taipei on June 27th, bringing together experts from the newly established Taiwan Academic Cybersecurity Center (TACC) and the U.S. National Science Foundation (NSF). Both events fostered valuable academic exchanges and laid the groundwork for future joint research initiatives, enhancing Taiwan's cybersecurity capabilities on the global stage.
Strengthening Regional Cybersecurity: Taiwan's Collaborative Efforts in Southeast Asia
August 5, 2024
Taiwan is enhancing its role as a cybersecurity leader in Southeast Asia through strategic collaborations with Malaysia and Thailand. In early August, Taiwanese cybersecurity experts convened in Kuala Lumpur and Bangkok for Taiwan Cybersecurity Days, showcasing their expertise in supply chain security, zero trust solutions, and OT cybersecurity technologies. These events, organized by Taiwanese corporations and associations, underscore Taiwan's commitment to bolstering digital transformation and corporate defenses across the region. By fostering close ties with ASEAN nations, Taiwan is not only addressing current cybersecurity challenges but also laying the groundwork for a stronger, more resilient regional cybersecurity network, vital for the future of digital security in Southeast Asia.
APT41 Targets Taiwan Research Institute in Sophisticated Cyber Espionage Campaign
August 5, 2024
China's state-sponsored APT41 group has recently targeted a Taiwan government-affiliated research institute specializing in advanced computing and related technologies. The cyber espionage operation, which began in July 2023, involved the deployment of multiple sophisticated malware tools, including ShadowPad and Cobalt Strike, to gain unauthorized access to three systems within the institute. APT41 successfully exfiltrated sensitive research data, leveraging known vulnerabilities and advanced techniques to evade detection. This incident underscores the persistent and evolving threat that Chinese cyber espionage poses to Taiwan's critical research institutions and highlights the need for enhanced cybersecurity measures to protect valuable intellectual property.
Australia and Taiwan Strengthen Trade and Business Ties
August 7, 2024
Taiwan and Australia continue to deepen their extensive trade and business relationships, as a Taiwanese delegation recently arrived on the Gold Coast to participate in the 37th Joint Business Council. Hosted by the Australia-Taiwan Business Council Ltd and Chinese International Economic Cooperation Association (CIECA), Taiwan, the event focused on exploring new opportunities for collaboration in critical areas such as energy transition, biotechnology, and cybersecurity. This gathering underscores the ongoing commitment between the two nations to enhance economic partnerships and foster innovation in sectors vital to their future growth.
REPORT: Taiwan Reports Over 600 Cybersecurity Incidents in 2023, Mostly Low-Level
August 7, 2024
In 2023, Taiwan's public sector experienced 697 information security incidents, with the Ministry of Digital Affairs (MODA) reporting that the majority were low-level in severity. According to MODA’s Administration for Cyber Security, most incidents (81.78%) were classified as level one, the least severe, while no incidents reached the highest severity level. The most common threats included illegal intrusions, equipment issues, and denial-of-service attacks. The administration identified key vulnerabilities such as email and network device breaches and emphasized the need for enhanced cybersecurity education and training to prevent future incidents.
Read the entire report here.
Taiwan Looks to Estonia for Cybersecurity and Education Inspiration
August 9, 2024
A Taiwanese diplomatic delegation, led by DPP Legislator Fan Yun, recently visited Estonia to explore areas of mutual learning and collaboration. During their visit, the delegation, which included fellow legislators Michelle Lin and Lin I-chin, met with key Estonian officials and were particularly impressed by Estonia's cybersecurity resilience and education system. At Estonia’s CR14 Foundation, Michelle Lin highlighted the parallels between the cybersecurity threats faced by both nations and emphasized the potential for future cooperation in strengthening cyber defenses. The delegation also praised Estonia’s approach to education, noting its substantial investment in schools, autonomy for educators, and efforts to foster digital literacy from an early age—elements Taiwan could emulate to enhance its own systems.
Taiwan's Cybersecurity Leadership Highlighted at DEF CON 2024
August 12, 2024
Deputy Minister of Digital Affairs, Chiueh Her-ming, led a Taiwanese delegation to the 32nd DEF CON in Las Vegas, where he emphasized Taiwan's commitment to global cybersecurity cooperation. Addressing an international audience, Chiueh shared Taiwan's experiences in bolstering cybersecurity and communication resilience, particularly in response to natural disasters and geopolitical tensions. He highlighted Taiwan's proactive measures, such as the deployment of low earth orbit satellites for disaster relief during the Matsu submarine cable disruption and the Hualien earthquake. Taiwan's participation in DEF CON underscores its dedication to enhancing cybersecurity governance and forging stronger international partnerships.
Read more about Taiwan’s Cyber Infrastructure for Natural Disaster Response.
Taiwan Hosts Critical Post-Quantum Cybersecurity Workshop
August 12, 2024
The third "PQC Standardization and Migration Workshop" was held at Academia Sinica, drawing over a hundred participants from Taiwan's government and industry sectors. As quantum computing advances, the workshop highlighted the urgent need for Taiwan to transition to post-quantum cryptography (PQC) standards to protect sensitive data. Experts, including representatives from Google and Fraunhofer SG, discussed the challenges and opportunities posed by quantum computing, emphasizing the importance of establishing widely accepted PQC standards and preparing for the future threats it presents.
CyberSec Taiwan
About CyberSec Taiwan
Your source for the latest news and analysis on Taiwan-centric cybersecurity.