The Eclipse leak site has listed Taiwan Otsuka Pharmaceutical, a Taiwan-based pharmaceutical manufacturer, and claims to hold about 832 GB of internal company data. The victim page shows a countdown to a claimed publication deadline. The listing gives examples of allegedly stolen material across many business functions, including finance,…
Cisco Talos disclosed an APT spear-phishing and quishing campaign, tracked as UAT-11985, that targets individuals affiliated with Taiwan research organizations. First seen in mid-2026, it uses fake event invitations to lead victims to an adversary-in-the-middle (AitM) phishing framework that harvests Google account credentials and MFA cod…
GreyNoise reports that a single malicious cyber actor, tracked since 7 May 2026, is a suspected Chinese speaker working in UTC+8 and is the same as or related to Red Heron (reported by Acronis), based on the shared C2 domain, malware family, Gitea exploitation and other TTPs. The actor exploited the wp2shell WordPress chain (CVE-2026-6303…
Trend Micro published its Holidays, Scams, and AI survey of 6,536 consumers across the United States, United Kingdom, Australia, New Zealand, Singapore and Taiwan (2,100 in the U.S.), conducted 31 October to 10 November 2025. It shows a gap between scam-spotting confidence and actual exposure: 56% of Americans are very or extremely confid…
In late August 2026, Sekoia's TDR team observed an attacker compromise an unauthenticated Flowise honeypot (emulating v2.2.8). The attacker harvested stored credentials, tried to plant a malicious chatflow with a callback to 154.217.251.226, and used prompt injection to turn the LLM agent into an offensive analysis assistant. The activity…