According to iThome, on the evening of August 20, Addcn Technology (5287) issued a cybersecurity material announcement on the Market Observation Post System (MOPS) disclosing an abnormal website access incident [1]. The company detected abnormal login activity on its 591 website and confirmed through investigation that external attackers exploited a weakness in the login mechanism to bypass normal authentication procedures and gain unauthorized access [1]. Addcn Technology activated its emergency cybersecurity response mechanism, completing vulnerability patching, blocking abnormal access paths, rotating cryptographic keys, and conducting a site-wide source code security review [1].
Addcn says attackers bypassed 591's login checks; the firm has patched the flaw and rotated keys
1 min read
- Disclosed
- Aug 21, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 10, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Manufacturing
What to do nowOur advice
Addcn Technology activated its emergency cybersecurity response mechanism, completing vulnerability patching, blocking abnormal access paths, rotating cryptographic keys, and conducting a site-wide source code security review [1]
Timeline
- Media reports on this cybersecurity incident[1]
Technical details
Source-Supported Details
Source excerpt: "What stands out in this cybersecurity material announcement is that Addcn Technology outlined five future response measures: first, improving system development processes and security review mechanisms based on the Secure Software Development Life Cycle (SSDLC) framework; second, strengthening login authentication, access control, and abnormal behavior detection mechanisms to enhance real-time blocking of anomalous logins. The company will also continue to strengthen source code security testing and system monitoring, commissioning third-party organizations for penetration testing, vulnerability scanning, and security validation. Finally, the company notified regulatory authorities and affected members in accordance with the law and provided dedicated customer service contact channels." [1].
References
Media1
- [1]
“這則資安重訊比較特別的地方在於,數字科技對於未來因應措施的部分,提出5項作法,首先,他們將依據安全軟體發展生命週期(SSDLC)框架,改善系統開發流程與資安檢視機制;再者,該公司將強化登入驗證、存取控制及異常行為偵測機制,提升對異常登入行為的即時攔阻能力。該公司也將持續強化程式碼安全檢測與系統監控機制,委任第三方機構進行滲透測試、弱點掃描,以及安全性驗證。最後一點,則是該公司依法通報主管機關、通知會員,並提供專屬客服聯繫管道。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.