13 articles
Advisories tell you what happened today; these guides cover the fundamentals behind them. From reading vulnerability scores and understanding ransomware to what to do during an incident and what Taiwanese regulation requires — every article is sourced and ends with a checklist you can act on.
The terms, IDs and scores you meet in advisories.
CVE is an ID, CVSS rates technical severity, EPSS estimates near-term exploitation odds, KEV lists confirmed exploitation. How to use all four together.
8 min read
A zero-day is exploited before a patch exists; an n-day after the patch ships but before you apply it. The timing gap, and what to do when no patch exists.
7 min read
How attackers get in, what they want, and the early warning signs.
How a ransomware attack unfolds, from initial access and lateral movement to backup deletion, data theft, encryption and extortion, and where to stop it.
8 min read
Common phishing and BEC techniques, from credential theft and AiTM session hijacking to fake vendor bank changes, plus SPF/DKIM/DMARC and payment verification.
8 min read
From SolarWinds, Kaseya and 3CX to xz-utils: the main types of supply chain attack and how vendor risk management, SBOMs and least privilege limit the impact.
9 min read
Patching, MFA, backups and hardening you can roll out.
Backups are the last line of defence against ransomware only if they survive and restore. Covers 3-2-1, offline and immutable copies, RPO/RTO and drills.
8 min read
Why SSL VPNs and firewalls are a top target, plus a checklist: management exposure, patching, MFA, external logs, EOL replacement and integrity checks.
7 min read
How SMS, OTP, push, number matching and FIDO2/passkeys compare on phishing resistance, how push bombing and AiTM bypass MFA, and where to enable it first.
7 min read
You will never patch everything. Build a defensible order from inventory, exposure, KEV/EPSS/CVSS tiers, deadlines, compensating controls and verification.
8 min read
What to do — and not do — when you suspect a breach.
Using advisory IPs, domains and hashes: IOC types and limits, defanged notation, which logs to search, ruling out false positives, and what to do on a hit.
8 min read
Suspect an intrusion? Scope it, preserve evidence, then contain and reset credentials. A first-day plan from NIST and CISA guidance, plus Taiwan reporting.
10 min read
Taiwan's cybersecurity law and listed-company disclosure rules.
Taiwan-listed companies must file material information when a cyber incident causes material damage or impact. Triggers, deadlines, contents and follow-ups.
10 min read
Taiwan's amended Cyber Security Management Act (in force 1 Dec 2025): who is covered, responsibility levels, audits, incident deadlines and supplier impact.
10 min read
Expert help
Our engineers can prioritise the work around your systems and team, roll out the settings, and verify that they actually hold.