China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan

A new cyber espionage campaign codenamed Operation Dragon Weave has been observed targeting officials and citizens in the Czech Republic and Taiwan to deliver an AdaptixC2 agent. According to Seqrite Labs, targets of the campaign include government, research, academic, technology, and financial...

CVE-2026-9493

creationtimestamp| type| source ---|---|--- 2026-05-28 22:48:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10940-d90bd-2.html 2026-05-29 09:28:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmy7uzc2ao2e...

CVE-2026-7491

creationtimestamp| type| source ---|---|--- 2026-04-30 02:37:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10897-64257-2.html...

CVE-2026-7489

creationtimestamp| type| source ---|---|--- 2026-04-30 02:20:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10895-25ca1-2.html...

CVE-2026-30769

An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests...

EnTech Taiwan TVicPort 输入验证错误漏洞

EnTech Taiwan TVicPort is a driver development component provided by EnTech Taiwan, which allows users to access hardware ports and control underlying devices. There are input validation vulnerabilities in the EnTech Taiwan TVicPort Product v4.0 version and File v5.2.1.0 version. These...

EUVD-2026-26240

An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests...

CVE-2026-7280

creationtimestamp| type| source ---|---|--- 2026-04-28 01:54:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10885-02d83-2.html...

Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2

Chinese-speaking individuals are the target of a new campaign that uses a trojanized version of SumatraPDF reader to deploy the AdaptixC2 Beacon post-exploitation agent and ultimately facilitate the abuse of Microsoft Visual Studio Code VS Code tunnels for remote access. Zscaler ThreatLabz, which...

CVE-2026-6947

creationtimestamp| type| source ---|---|--- 2026-04-23 20:38:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10865-de323-2.html 2026-04-24 04:50:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk7q3227u32z 2026-04-24 05:19:04+00:00| seen|...

CVE-2026-6886

creationtimestamp| type| source ---|---|--- 2026-04-23 00:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10863-2f48e-2.html 2026-04-23 11:16:37+00:00| seen| Telegram/wFSQsgW7X9YvnPcwQoIwWZcAEOwcl2-nLfGCKL8FlikswBY 2026-04-23 19:44:39+00:00| seen|...

CVE-2026-6887

creationtimestamp| type| source ---|---|--- 2026-04-23 00:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10863-2f48e-2.html 2026-04-23 10:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116453554799004892 2026-04-23 10:30:31+00:00| seen|...

BorG SPM 安全漏洞

BorG SPM is a software platform developed by BorG in Taiwan, China, used for system performance monitoring and resource management analysis. The BorG SPM 2007 version contains a security vulnerability, which stems from an authentication bypass mechanism. This vulnerability could allow unauthorize...

CVE-2026-5966

creationtimestamp| type| source ---|---|--- 2026-04-19 23:52:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10855-e6d1b-2.html 2026-04-20 09:17:22+00:00| seen| Telegram/Lm9dzPhVRFRRMgyzsUGG1X5A2Qj2Q71JCDe8XQUe2-0mpLw 2026-04-20 10:08:41+00:00| seen|...

Simopro WinMatrix 安全漏洞

Simopro WinMatrix is an industrial control software developed by Simopro Company in Taiwan, China. Simopro WinMatrix has a security vulnerability that stems from the lack of authentication, which may allow for the execution of arbitrary code...

CVE-2026-6351

creationtimestamp| type| source ---|---|--- 2026-04-15 18:45:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10843-9ff91-2.html 2026-04-16 05:18:09+00:00| seen| Telegram/RpCSTqHfWBqrKG53EyhvOrMVfWJfX1b8PG9fT94i9MHNW6c 2026-04-16 05:18:17+00:00| seen|...

CVE-2026-6348

creationtimestamp| type| source ---|---|--- 2026-04-15 18:43:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10840-ba9b9-2.html 2026-04-16 05:18:09+00:00| seen| Telegram/RpCSTqHfWBqrKG53EyhvOrMVfWJfX1b8PG9fT94i9MHNW6c 2026-04-16 07:30:38+00:00| seen|...

CVE-2026-3825

creationtimestamp| type| source ---|---|--- 2026-03-11 05:48:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10756-73f66-2.html...

CVE-2026-3824

creationtimestamp| type| source ---|---|--- 2026-03-11 05:48:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10756-73f66-2.html...

CVE-2026-2997

creationtimestamp| type| source ---|---|--- 2026-02-23 01:49:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10721-276b6-2.html...