News Roundup: October 1-15, 2024
Bite-sized news and updates on the latest in Taiwan cybersecurity
Digital Taiwan Roundtable Highlights Cybersecurity's Critical Role in National Defense and Supply Chain
October 3, 2024
The Digital Taiwan Roundtable hosted a forum on October 1st to underscore the growing importance of cybersecurity for both business enterprises and national defense. Led by President Luis Ko, the event brought together industry experts and government officials to discuss cybersecurity's impact on supply chains, IT infrastructure, and national security. National Security Council Senior Advisor Lee Yuh-jye emphasized Taiwan's vulnerability to cyberattacks, not only from China but globally, and stressed the need for bold investments in cybersecurity. The forum highlighted the challenges faced by Taiwanese companies, particularly in meeting international cybersecurity standards, and the crucial role of public-private partnerships in securing the nation’s critical sectors.
On the Dark Web: Alleged Data Breach Threatens Chunghwa Telecom Customer's Security
October 3, 2024
A threat actor has reportedly offered unauthorized access to a third-party customer of Chunghwa Telecom, Taiwan's largest telecommunications provider, potentially compromising over 900GB of sensitive data. The seller claims that the access includes root-level permissions to a Linux-based system, available through Secure Shell (SSH), which would allow full control over the system. Priced at $2,000, though negotiable, this offer raises serious concerns about data security within Taiwan's telecom infrastructure. The scale of the potential breach underscores the significant risk to both the company and its client.
In addition to the Chunghwa Telecom incident, other dark web threats targeting Taiwanese companies have surfaced. A threat actor named "Mr. Robot" is allegedly selling access to an unidentified Taiwan company, while another actor is offering access to a Taiwanese industrial equipment manufacturer. Meanwhile, a group known as "SERVER KILLERS" has reportedly targeted multiple airports in Taiwan.
Read more about Chunghwa Telecom’s data breach from earlier this year.
Taiwan's Defense Innovation Task Force Focuses on Advanced Technologies
October 3, 2024
Taiwan's Defense Innovation Task Force, established earlier this year, is spearheading the development of advanced military technologies to bolster the island's defense capabilities. Modeled after the US Defense Innovation Unit, the task force is concentrating on emerging areas like AI-assisted target recognition, cybersecurity, and autonomous systems, including unmanned underwater vehicles. In collaboration with the National Science and Technology Council, the task force aims to integrate Taiwan's defense needs with the capabilities of its civilian industries. The Ministry of National Defense (MND) has announced plans to strengthen ties with US defense research institutions, with a delegation set to visit key agencies and firms in the United States next year to enhance communication and collaboration.
Taiwan Strengthens Personal Data Protection and Cybersecurity: A Report by Lee Tsai & Partners
October 3, 2024
According to a recent report by Lee Tsai & Partners, Taiwan has made significant advancements in personal data protection and cybersecurity in 2024. Following amendments to the Personal Data Protection Act (PDPA) on May 31, 2023, the establishment of the Personal Data Protection Commission (PDPC) is set to take full effect by August 2025. This commission will centralize authority over personal data protection, replacing the role of the National Development Council and streamlining efforts to safeguard sensitive information. As cyber threats continue to rise, Taiwan’s legislative and regulatory progress reflects its commitment to enhancing privacy rights and digital security in today’s rapidly evolving landscape.
Read the full report here.
Taiwan Strengthens Cybersecurity Defense Amid Rising Threats
October 07, 2024
In the latest government cybersecurity report, Taiwan collected 90,510 pieces of joint defense intelligence, reflecting a significant increase in malware detections. The most common threat was information collection (38%), followed by intrusion attempts (23%), and malware (17%). Social engineering attacks targeting government agencies through phishing emails have been a major concern, with attackers attempting to trick recipients into disclosing sensitive information. Additionally, several government websites fell victim to redirect hacking, where hackers tampered with HTML source codes and redirected users to malicious sites. In response, affected agencies rebuilt their website environments and strengthened security through vulnerability scans. Taiwan's proactive approach to cybersecurity defense continues to evolve to mitigate these growing threats.
Foxconn to Build Taiwan's Largest Supercomputer with NVIDIA's Blackwell Platform
October 8, 2024
Foxconn is set to construct Taiwan's most powerful supercomputer in Kaohsiung, using NVIDIA's state-of-the-art Blackwell architecture. The supercomputer, featuring 64 racks and 4,608 Tensor Core GPUs, will deliver over 90 exaflops of AI performance. Once operational in mid-2025, it will support advancements in AI-driven industries, including cancer research, large language models, and smart city innovations. This project, part of Foxconn’s broader strategy in smart manufacturing and urban infrastructure, will position Taiwan at the forefront of global AI and digital twin technologies. Full deployment is expected by 2026.
Taiwan's Cybersecurity and Satellite Internet Push Amid Drone Security Threats
October 8, 2024
Taiwan is advancing its defenses against potential Chinese attacks by securing satellite internet access via Chunghwa Telecom's partnership with Eutelsat OneWeb. This new service, set to launch by the end of the month, will serve as a crucial safeguard for Taiwan’s communication systems, particularly after the failure to secure Elon Musk's Starlink service due to political concerns over Musk's ties to China. While the low-earth orbit satellite service addresses a significant vulnerability, experts suggest that Taiwan should continue exploring additional solutions like undersea cables and other satellite networks to bolster its cybersecurity infrastructure.
Meanwhile, Taiwan's drone industry is under increasing cyber pressure from groups like TIDrone and a new threat named "WordDrone." A recent investigation by the Acronis Threat Research Unit revealed that WordDrone, a sophisticated malware targeting Taiwan’s drone manufacturers, exploits DLL side-loading through a compromised version of Microsoft Word. By using a maliciously crafted wwlib.dll file, WordDrone installs a persistent backdoor on affected systems, with digitally signed malicious DLLs that evade detection. This combination of satellite initiatives and cyber threats underscores the need for continued vigilance and investment in both digital and physical security to protect Taiwan’s critical industries.
Read TrendMicro’s full technical report on TIDRONE targeting military and satellite industries in Taiwan.
Read more about how Taiwan is responding to these threats to IoT and the digital infrastructure.
CyberSec Taiwan
About CyberSec Taiwan
Your source for the latest news and analysis on Taiwan-centric cybersecurity.