TWCERT/CC
Also called: TWCERT
Taiwan's computer emergency response and coordination center for businesses. Under the guidance of the Ministry of Digital Affairs it handles incident reports from companies, coordinates product vulnerability reports and shares threat information; the National Institute of Cyber Security currently runs it. Companies not covered by the Cyber Security Management Act can report incidents to it for help, and its vulnerability alerts are worth subscribing to.
Further reading: www.twcert.org.tw
From the Security Academy
DDoS Attacks: Types, Warning Signs and How Companies Prepare
DDoS is more than a slow website. How volumetric, protocol and L7 attacks differ and where each is stopped, ransom and smokescreen tactics, and what to do.
14 min read ·
Phishing and Business Email Compromise (BEC): Spotting and Stopping It
Common phishing and BEC techniques, from credential theft and AiTM session hijacking to fake vendor bank changes, plus SPF/DKIM/DMARC and payment verification.
8 min read ·
The First 24 Hours of a Suspected Breach: What to Do and What to Avoid
Suspect an intrusion? Scope it, preserve evidence, then contain and reset credentials. A first-day plan from NIST and CISA guidance, plus Taiwan reporting.
10 min read ·
Advisories that mention this term
TWCERT: Three High-Severity Vulnerabilities in Abouttime Tech Herowatch Series; Product Reached End-of-Life Without Patch
On November 4, 2026, TWCERT/CC disclosed three high-severity vulnerabilities in Abouttime Tech's Herowatch series, including an insecure direct object reference flaw in Herowatch Go Server (CVE-2026-121817), firmware signed with publicly known test keys in Herowatch Mini (CVE-2026-121818), and missing authentication in the Herowatch Mini ADB service (CVE-2026-121816) .
TWCERT: Two High-Severity AD Authentication Service Vulnerabilities in WatchGuard Fireware OS (CVE-2026-112709 / CVE-2026-112710)
On 2026-11-06, TWCERT/CC reported two heap-based buffer overflow vulnerabilities in WatchGuard Fireware OS, tracked as CVE-2026-112709 and CVE-2026-112710 (CVSS 4.
TWCERT: Multiple High-Risk Vulnerabilities in HPE Networking AOS-10 and AOS-8 Require Prompt Patching
On 2026-11-06, TWCERT/CC reported multiple high-risk vulnerabilities in HPE Networking AOS-10 and AOS-8, including authentication bypass, buffer overflow, SQL injection, command injection, and sensitive information disclosure .
New Type Information NT OneAPP Enterprise Cloud Management System Contains Five Vulnerabilities, Including Hardcoded Credentials and Improper Authentication (CVSS Up to 9.3)
On October 22, TWCERT/CC published TVN-202610006: New Type Information Co.
BA-Workflow Form Platform Contains Three SQL Injection Vulnerabilities (CVE-2026-113405 to CVE-2026-113407)
On October 20, TWCERT/CC published TVN-202610007: Asia Xuan Information's BA-Workflow contains three SQL injection vulnerabilities, each with a CVSS v4.