{
 "type": "bundle",
 "id": "bundle--5cd389a7-0e1a-4e0b-8bad-5ec80d5fcd88",
 "objects": [
  {
   "type": "marking-definition",
   "spec_version": "2.1",
   "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
   "created": "2017-01-20T00:00:00.000Z",
   "definition_type": "tlp",
   "name": "TLP:WHITE",
   "definition": {
    "tlp": "white"
   }
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "SecurityStudies.info",
   "identity_class": "organization",
   "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated."
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--0db8cf87-a221-57a1-9cb2-ee3a259ab206",
   "created": "2026-11-12T12:05:12.132Z",
   "modified": "2026-11-13T00:02:47.918Z",
   "name": "Ministry of Digital Affairs: AI helps hackers launch cyberattacks, over a dozen companies have 8 million personal data records leaked",
   "description": "Detected automatically from 1 article in 1 outlet (New Talk), Nov 12, 2026. Title machine-translated from Chinese. Type: data breach; sectors: government. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 8,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/ministry-of-digital-affairs-ai-helps-hackers-launch-cyberattacks-over-20261112/"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-11-12/1070779",
     "description": "數發部：AI助駭客網攻 十多家企業共800萬筆個資外洩"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-12",
   "x_securitystudies_severity": 4,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Government"
   ],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Taiwan",
   "country": "TW"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--7f4593f3-b068-5154-bb10-4efa555804f1",
   "created": "2026-11-12T12:05:12.132Z",
   "modified": "2026-11-12T12:05:12.132Z",
   "relationship_type": "related-to",
   "source_ref": "incident--0db8cf87-a221-57a1-9cb2-ee3a259ab206",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--64697a14-5b0d-5eca-833d-45551377840f",
   "created": "2026-11-12T18:04:29.493Z",
   "modified": "2026-11-13T00:02:47.959Z",
   "name": "Hack affects 8 million records: official",
   "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Nov 12, 2026. Type: data breach. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 8,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/hack-affects-8-million-records-official-20261112/"
    },
    {
     "source_name": "Taipei Times",
     "url": "https://www.taipeitimes.com/News/taiwan/archives/2026/11/13/2003867667",
     "description": "Hack affects 8 million records: official"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-12",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--6ccc2b53-26c5-5b06-bf90-e2120d8052c5",
   "created": "2026-11-12T18:04:29.493Z",
   "modified": "2026-11-12T18:04:29.493Z",
   "relationship_type": "related-to",
   "source_ref": "incident--64697a14-5b0d-5eca-833d-45551377840f",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--d1c3c241-2889-5719-9709-905e2e0b5de1",
   "created": "2026-11-12T06:04:37.075Z",
   "modified": "2026-11-13T00:02:47.891Z",
   "name": "46,000 employee records put up for sale by hackers; TSMC: No evidence of system intrusion",
   "description": "Detected automatically from 2 articles in 2 outlets (Liberty Times, New Talk), Nov 12, 2026. Title machine-translated from Chinese. Type: data breach. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 46,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/46000-employee-records-put-up-for-sale-by-hackers-tsmc-no-evidence-of-20261112/"
    },
    {
     "source_name": "Liberty Times",
     "url": "https://ec.ltn.com.tw/article/breakingnews/5638252",
     "description": "4.6萬筆員工個資遭駭客兜售 台積電：系統無遭入侵證據"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-11-12/1070798",
     "description": "驚傳4.6萬筆員工個資外洩！台積電今證實 網：連護國神山都守不住了？"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-12",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--c76b4dba-0c7f-5cd0-b01c-c91161ba5e84",
   "created": "2026-11-12T06:04:37.075Z",
   "modified": "2026-11-12T06:04:37.075Z",
   "relationship_type": "related-to",
   "source_ref": "incident--d1c3c241-2889-5719-9709-905e2e0b5de1",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--f227e04e-93b9-5698-aff6-c088900e9cd8",
   "created": "2026-11-12T12:05:12.122Z",
   "modified": "2026-11-13T00:02:47.907Z",
   "name": "Website hacked! Over 70,000 passport photos leaked; Bureau of Consular Affairs: Validity of issued passports unaffected",
   "description": "Detected automatically from 1 article in 1 outlet (New Talk), Nov 12, 2026. Title machine-translated from Chinese. Type: data breach. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 70,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/website-hacked-over-70000-passport-photos-leaked-bureau-of-consular-af-20261112/"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-11-12/1070740",
     "description": "網站遭駭！逾7萬張護照大頭照外洩 領務局：已核發護照效力不受影響"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-12",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--7e0aa62d-5c59-5614-a194-f6c8d26f859c",
   "created": "2026-11-12T12:05:12.122Z",
   "modified": "2026-11-12T12:05:12.122Z",
   "relationship_type": "related-to",
   "source_ref": "incident--f227e04e-93b9-5698-aff6-c088900e9cd8",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--135ccf3d-7a41-5fc5-af4b-6543aadc00e8",
   "created": "2026-11-12T12:05:12.139Z",
   "modified": "2026-11-13T00:02:47.923Z",
   "name": "TSMC just had personal data leaked and sold, Synnex also experiences security incident",
   "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Nov 12, 2026. Title machine-translated from Chinese. Type: data breach. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/tsmc-just-had-personal-data-leaked-and-sold-synnex-also-experiences-se-20261112/"
    },
    {
     "source_name": "Liberty Times",
     "url": "https://ec.ltn.com.tw/article/breakingnews/5638876",
     "description": "台積電才爆個資遭兜售外流 大聯大也發生資安事件"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-12",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--920c1227-81bf-5170-b779-8667f8a700f1",
   "created": "2026-11-12T12:05:12.139Z",
   "modified": "2026-11-12T12:05:12.139Z",
   "relationship_type": "related-to",
   "source_ref": "incident--135ccf3d-7a41-5fc5-af4b-6543aadc00e8",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--9ed722e9-5a35-503b-a98f-f9e3af5c1981",
   "created": "2026-11-12T18:04:29.449Z",
   "modified": "2026-11-13T00:02:47.928Z",
   "name": "Citizen Congress Watch: Donation system attacked, personal data may have been leaked, protection measures initiated",
   "description": "Detected automatically from 1 article in 1 outlet (Focus Taiwan (CNA)), Nov 12, 2026. Title machine-translated from Chinese. Type: data breach. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/citizen-congress-watch-donation-system-attacked-personal-data-may-have-20261112/"
    },
    {
     "source_name": "Focus Taiwan (CNA)",
     "url": "https://www.cna.com.tw/news/aipl/202611120334.aspx",
     "description": "公督盟：捐款系統遭攻擊 個資可能外洩已啟動防護"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-12",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--3b166d90-dd4a-5632-8647-15ec9901a2a6",
   "created": "2026-11-12T18:04:29.449Z",
   "modified": "2026-11-12T18:04:29.449Z",
   "relationship_type": "related-to",
   "source_ref": "incident--9ed722e9-5a35-503b-a98f-f9e3af5c1981",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--03f866d4-14f9-5db9-a122-1f0484262974",
   "created": "2026-11-11T18:04:05.461Z",
   "modified": "2026-11-13T00:02:47.861Z",
   "name": "AI used in cyberattacks, some originating in HK",
   "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Nov 11, 2026. Type: other. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "other",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/ai-used-in-cyberattacks-some-originating-in-hk-20261111/"
    },
    {
     "source_name": "Taipei Times",
     "url": "https://www.taipeitimes.com/News/taiwan/archives/2026/11/12/2003867610",
     "description": "AI used in cyberattacks, some originating in HK"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-11",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--36aa08e3-cc7a-5354-b255-1a36b2bad628",
   "created": "2026-11-11T18:04:05.461Z",
   "modified": "2026-11-11T18:04:05.461Z",
   "relationship_type": "related-to",
   "source_ref": "incident--03f866d4-14f9-5db9-a122-1f0484262974",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--220b273c-a6dd-5a58-8673-4ff233fc2f63",
   "created": "2026-11-11T20:35:30.174Z",
   "modified": "2026-11-13T00:02:47.856Z",
   "name": "300 Italian Schools Receive \"From Taiwan\" Bomb Threat Letters, Da-Yeh University Alumnus Account Suspected Hacked",
   "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Nov 11, 2026. Title machine-translated from Chinese. Type: intrusion; sectors: education. Asia-Pacific countries affected: Taiwan. EU member states named: Italy. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "intrusion",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/300-italian-schools-receive-from-taiwan-bomb-threat-letters-da-yeh-uni-20261111/"
    },
    {
     "source_name": "Liberty Times",
     "url": "https://news.ltn.com.tw/news/society/breakingnews/5637677",
     "description": "義大利300校收「來自台灣」炸彈恐嚇信 大葉大學校友帳號疑遭盜用"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-11",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Education"
   ],
   "x_securitystudies_eu_relevance": "high"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--25d56fc8-0097-5c58-8db1-4aeb352be797",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Italy",
   "country": "IT"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--1a8b590a-a0ee-5302-bd9b-51a47d6ce96d",
   "created": "2026-11-11T20:35:30.174Z",
   "modified": "2026-11-11T20:35:30.174Z",
   "relationship_type": "related-to",
   "source_ref": "incident--220b273c-a6dd-5a58-8673-4ff233fc2f63",
   "target_ref": "location--25d56fc8-0097-5c58-8db1-4aeb352be797",
   "description": "country named in the coverage"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--7b83b865-25b6-5afa-bafd-b174b6b44661",
   "created": "2026-11-11T20:35:30.174Z",
   "modified": "2026-11-11T20:35:30.174Z",
   "relationship_type": "related-to",
   "source_ref": "incident--220b273c-a6dd-5a58-8673-4ff233fc2f63",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--405f3569-5363-54ac-a5c2-56be7e0b152e",
   "created": "2026-11-10T16:32:08.743Z",
   "modified": "2026-11-13T00:02:47.765Z",
   "name": "Din Tai Fung shopping website hit by data breach! City councilor nearly falls for it, issues warning; official statement released urgently",
   "description": "Detected automatically from 1 article in 1 outlet (New Talk), Nov 10, 2026. Title machine-translated from Chinese. Type: data breach; sectors: government, technology, retail. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/incident-20261110/"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-11-10/1070287",
     "description": "鼎泰豐購物網驚傳個資外洩！市議員險上當發文示警 官方急發聲明"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-10",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Government",
    "Technology",
    "Retail"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--1707ef90-2b13-51cd-b1c7-e2d9616c5452",
   "created": "2026-11-10T16:32:08.743Z",
   "modified": "2026-11-10T16:32:08.743Z",
   "relationship_type": "related-to",
   "source_ref": "incident--405f3569-5363-54ac-a5c2-56be7e0b152e",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--3ca3953e-4381-5c42-a175-ce4ed966d19b",
   "created": "2026-11-11T12:23:36.534Z",
   "modified": "2026-11-13T00:02:47.812Z",
   "name": "Kang Chiao International School Linkou campus network hacked; parents receive ransom letters, realize all personal data leaked",
   "description": "Detected automatically from 2 articles in 2 outlets (Liberty Times, New Talk), Nov 10 to Nov 11, 2026. Title machine-translated from Chinese. Type: ransomware; sectors: education. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "ransomware",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/incident-20261110-5/"
    },
    {
     "source_name": "Liberty Times",
     "url": "https://news.ltn.com.tw/news/society/breakingnews/5636370",
     "description": "「康橋國際學校」林口校區網路遭駭 家長收勒索信、驚覺個資全外洩"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-11-11/1070464",
     "description": "康橋林口校區驚傳駭客恐嚇！威脅洩露教職員與家長個資"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-10",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Education"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--d56cb139-dbbb-580b-ae0b-9356de50d760",
   "created": "2026-11-11T12:23:36.534Z",
   "modified": "2026-11-11T12:23:36.534Z",
   "relationship_type": "related-to",
   "source_ref": "incident--3ca3953e-4381-5c42-a175-ce4ed966d19b",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--172d7460-0c5f-5a39-9b0b-d48294521de2",
   "created": "2026-11-10T16:32:08.720Z",
   "modified": "2026-11-13T00:02:47.733Z",
   "name": "Data breach did not compromise credit card numbers, online travel agency says",
   "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Nov 9, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/data-breach-did-not-compromise-credit-card-numbers-online-travel-agenc-20261109/"
    },
    {
     "source_name": "Taipei Times",
     "url": "https://www.taipeitimes.com/News/taiwan/archives/2026/11/10/2003867478",
     "description": "Data breach did not compromise credit card numbers, online travel agency says"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-09",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Government"
   ],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--7020a437-4d6c-580b-a798-65f83c9f375b",
   "created": "2026-11-10T16:32:08.720Z",
   "modified": "2026-11-10T16:32:08.720Z",
   "relationship_type": "related-to",
   "source_ref": "incident--172d7460-0c5f-5a39-9b0b-d48294521de2",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--e25ecd09-4f7f-551b-9d8d-fae17250a435",
   "created": "2026-11-11T20:35:29.968Z",
   "modified": "2026-11-13T00:02:47.717Z",
   "name": "Commanding 12 AI agents alone... Taiwanese hacker breaches fire emergency system and steals patient records",
   "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 9, 2026. Title machine-translated from Korean. Type: data breach; sectors: health. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/commanding-12-ai-agents-alone-taiwanese-hacker-breaches-fire-emergency-20261109/"
    },
    {
     "source_name": "Boannews (Korean)",
     "url": "https://www.boannews.com/news/articleView.html?idxno=147057",
     "description": "혼자서 AI 에이전트 12개 지휘... 대만 해커, 소방 응급 시스템 뚫고 환자 기록 빼내"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-09",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Health"
   ],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--0fbc5fe3-846d-5a1e-b5ad-f612f3853636",
   "created": "2026-11-11T20:35:29.968Z",
   "modified": "2026-11-11T20:35:29.968Z",
   "relationship_type": "related-to",
   "source_ref": "incident--e25ecd09-4f7f-551b-9d8d-fae17250a435",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--1dff11a9-d126-5a2f-b82b-9ea8ccf8ebfa",
   "created": "2026-11-10T16:32:08.695Z",
   "modified": "2026-11-13T00:02:47.684Z",
   "name": "Cyberattack shuts down Internet fan fiction library",
   "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Nov 7, 2026. Type: other; sectors: technology. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "other",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/cyberattack-shuts-down-internet-fan-fiction-library-20261107/"
    },
    {
     "source_name": "Taipei Times",
     "url": "https://www.taipeitimes.com/News/world/archives/2026/11/08/2003867379",
     "description": "Cyberattack shuts down Internet fan fiction library"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-07",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Technology"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--12a00f13-b4b6-5af1-a7f5-6f2e6344f1b4",
   "created": "2026-11-10T16:32:08.695Z",
   "modified": "2026-11-10T16:32:08.695Z",
   "relationship_type": "related-to",
   "source_ref": "incident--1dff11a9-d126-5a2f-b82b-9ea8ccf8ebfa",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--7a33e88b-9d5a-5a8b-a999-6ada6710b702",
   "created": "2026-11-10T16:32:08.626Z",
   "modified": "2026-11-13T00:02:47.603Z",
   "name": "No evidence of customer data leak in unauthorized transactions: SinoPac",
   "description": "Detected automatically from 3 articles in 3 outlets (Liberty Times, New Talk, Taipei Times), Nov 4 to Nov 12, 2026. Type: data breach; sectors: government, financial services. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 40,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/no-evidence-of-customer-data-leak-in-unauthorized-transactions-sinopac-20261104/"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-11-04/1069275",
     "description": "永豐銀行419人遭盜轉！金額約4千餘萬 北檢今分案偵辦"
    },
    {
     "source_name": "Taipei Times",
     "url": "https://www.taipeitimes.com/News/biz/archives/2026/11/05/2003867168",
     "description": "No evidence of customer data leak in unauthorized transactions: SinoPac"
    },
    {
     "source_name": "Liberty Times",
     "url": "https://ec.ltn.com.tw/article/breakingnews/5638871",
     "description": "永豐銀行資安事件今送報告 金管會全面調查缺失"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-04",
   "x_securitystudies_severity": 4,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Government",
    "Financial Services"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--ea92fcab-e2b4-5704-8ab2-7dd9d7a0b086",
   "created": "2026-11-10T16:32:08.626Z",
   "modified": "2026-11-10T16:32:08.626Z",
   "relationship_type": "related-to",
   "source_ref": "incident--7a33e88b-9d5a-5a8b-a999-6ada6710b702",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--95a2737b-40c9-5292-9543-fba9eb088781",
   "created": "2026-11-10T16:32:08.600Z",
   "modified": "2026-11-13T00:02:47.586Z",
   "name": "Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw",
   "description": "Detected automatically from 1 article in 1 outlet (The Hacker News), Nov 3, 2026. Type: ransomware. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "ransomware",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/synology-nas-devices-targeted-in-ransomware-attacks-exploiting-patched-20261103/"
    },
    {
     "source_name": "The Hacker News",
     "url": "https://thehackernews.com/2026/11/synology-nas-devices-targeted-in.html",
     "description": "Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-03",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--e8fc10fe-4ff5-5bdb-8044-5f11b233c0b0",
   "created": "2026-11-10T16:32:08.600Z",
   "modified": "2026-11-10T16:32:08.600Z",
   "relationship_type": "related-to",
   "source_ref": "incident--95a2737b-40c9-5292-9543-fba9eb088781",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--1428a978-541d-52ab-ad64-d3d8aa8f91b2",
   "created": "2026-11-10T16:32:08.559Z",
   "modified": "2026-11-13T00:02:47.546Z",
   "name": "Korean media: Passport data of 168 people including President Lee Jae-myung leaked and uploaded to paid websites",
   "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Nov 2, 2026. Title machine-translated from Chinese. Type: data breach; sectors: government, media. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/168-20261102/"
    },
    {
     "source_name": "Liberty Times",
     "url": "https://news.ltn.com.tw/news/world/breakingnews/5627213",
     "description": "韓媒：總統李在明等168人護照資料外洩 上傳付費網站"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-02",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Government",
    "Media"
   ],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--02d57fc3-146e-53c4-a2c4-fb999d1ab249",
   "created": "2026-11-10T16:32:08.559Z",
   "modified": "2026-11-10T16:32:08.559Z",
   "relationship_type": "related-to",
   "source_ref": "incident--1428a978-541d-52ab-ad64-d3d8aa8f91b2",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--883b513a-9606-589c-a60e-06bc27734a0f",
   "created": "2026-11-10T16:32:08.400Z",
   "modified": "2026-11-12T06:04:36.650Z",
   "name": "Breaking: Apologizing for personal data leak! You Ying-lung reveals 32 IPs had entered: Not necessarily malicious",
   "description": "Detected automatically from 3 articles in 1 outlet (New Talk), Oct 29, 2026. Title machine-translated from Chinese. Type: data breach; sectors: government. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/incident-20261028/"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-10-28/1067851",
     "description": "中選會網站爆千名候選人個資外洩 台灣前進促依法通知、檢討究責"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-10-29/1068124",
     "description": "中選會出包洩候選人個資 國民黨點名沈伯洋：何時到立院質詢這題"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-10-29/1068159",
     "description": "快訊》為個資外洩道歉！游盈隆曝32個IP曾進入：未必不懷好意"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-10-29/1068167",
     "description": "1573人個資外洩！32個IP有無境外介入？中選會坦言：還沒查"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-10-29/1068194",
     "description": "游盈隆為個資外洩道歉 台灣前進促全面清查「宏碁資訊」承包項目"
    }
   ],
   "x_securitystudies_occurred_on": "2026-10-29",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Government"
   ],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--8436f7fe-9ff8-58d1-937b-b8bdc7d53cdf",
   "created": "2026-11-10T16:32:08.400Z",
   "modified": "2026-11-10T16:32:08.400Z",
   "relationship_type": "related-to",
   "source_ref": "incident--883b513a-9606-589c-a60e-06bc27734a0f",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--fcee7409-acab-5ba8-80dc-36cdd32cdcec",
   "created": "2026-11-10T16:32:08.462Z",
   "modified": "2026-11-12T12:05:11.550Z",
   "name": "NSB probes hack on Puma Shen",
   "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Oct 29, 2026. Type: intrusion. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "intrusion",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/nsb-probes-hack-on-puma-shen-20261029/"
    },
    {
     "source_name": "Taipei Times",
     "url": "https://www.taipeitimes.com/News/taiwan/archives/2026/10/30/2003866864",
     "description": "NSB probes hack on Puma Shen"
    }
   ],
   "x_securitystudies_occurred_on": "2026-10-29",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--6c03f090-34e1-5ac1-a776-1f6f161112d3",
   "created": "2026-11-10T16:32:08.462Z",
   "modified": "2026-11-10T16:32:08.462Z",
   "relationship_type": "related-to",
   "source_ref": "incident--fcee7409-acab-5ba8-80dc-36cdd32cdcec",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--7caaa6c2-f765-5f77-8946-36dab00c7c8d",
   "created": "2026-11-10T16:32:08.420Z",
   "modified": "2026-11-11T20:40:49.670Z",
   "name": "CEC responds after 1573 candidates data leakage",
   "description": "Detected automatically from 2 articles in 2 outlets (New Talk, Taipei Times), Oct 28, 2026. Type: data breach. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/incident-20261028-2/"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-10-28/1067987",
     "description": "中選會爆候選人個資外洩 陳冠廷：不能把責任全推委外廠商"
    },
    {
     "source_name": "Taipei Times",
     "url": "https://www.taipeitimes.com/News/front/archives/2026/10/29/2003866804",
     "description": "CEC responds after 1573 candidates data leakage"
    }
   ],
   "x_securitystudies_occurred_on": "2026-10-28",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--31854921-352f-5f9a-8755-02148e76477b",
   "created": "2026-11-10T16:32:08.420Z",
   "modified": "2026-11-10T16:32:08.420Z",
   "relationship_type": "related-to",
   "source_ref": "incident--7caaa6c2-f765-5f77-8946-36dab00c7c8d",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--9ab54f53-548b-590a-b93b-0064a006f43b",
   "created": "2026-11-10T16:32:08.384Z",
   "modified": "2026-11-11T20:40:49.647Z",
   "name": "First-time voter lottery target Yakira hit by cyberattack; Chiang office and KMT councilors show support: Do not create a chilling effect",
   "description": "Detected automatically from 1 article in 1 outlet (New Talk), Oct 27, 2026. Title machine-translated from Chinese. Type: espionage campaign; sectors: government. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "espionage",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/yakira-20261027/"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-10-27/1067745",
     "description": "代抽首投族Yakira遭網攻　蔣辦、藍議員聲援：別造成寒蟬效應"
    }
   ],
   "x_securitystudies_occurred_on": "2026-10-27",
   "x_securitystudies_severity": 4,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Government"
   ],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--3ec711cf-4ce3-54be-a9a2-2f2abd5481c8",
   "created": "2026-11-10T16:32:08.384Z",
   "modified": "2026-11-10T16:32:08.384Z",
   "relationship_type": "related-to",
   "source_ref": "incident--9ab54f53-548b-590a-b93b-0064a006f43b",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--73663dd5-9b72-51bb-9041-a786fc997a68",
   "created": "2026-11-10T16:32:08.365Z",
   "modified": "2026-11-11T20:40:49.621Z",
   "name": "Critical PHP flaw forces Web sites worldwide offline, sparks cyberattack fears PHP爆重大資安漏洞　全球網站緊急下線防駭客攻擊",
   "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Oct 26, 2026. Type: exploitation. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "exploitation",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/critical-php-flaw-forces-web-sites-worldwide-offline-sparks-cyberattac-20261026/"
    },
    {
     "source_name": "Taipei Times",
     "url": "https://www.taipeitimes.com/News/lang/archives/2026/10/27/2003866655",
     "description": "Critical PHP flaw forces Web sites worldwide offline, sparks cyberattack fears PHP爆重大資安漏洞　全球網站緊急下線防駭客攻擊"
    }
   ],
   "x_securitystudies_occurred_on": "2026-10-26",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--4128f210-3565-57e1-97a6-8311d2d2a002",
   "created": "2026-11-10T16:32:08.365Z",
   "modified": "2026-11-10T16:32:08.365Z",
   "relationship_type": "related-to",
   "source_ref": "incident--73663dd5-9b72-51bb-9041-a786fc997a68",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--88ca12c2-29c9-598b-928a-7f6a89141991",
   "created": "2026-11-10T16:32:08.002Z",
   "modified": "2026-11-10T16:40:20.404Z",
   "name": "鴻海研究院資安所所長李維斌：一天遭6億次攻擊  不如控制波及範圍",
   "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Oct 7, 2026. Type: other. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "other",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/6-20261007-2/"
    },
    {
     "source_name": "Liberty Times",
     "url": "https://ec.ltn.com.tw/article/breakingnews/5598981",
     "description": "鴻海研究院資安所所長李維斌：一天遭6億次攻擊  不如控制波及範圍"
    }
   ],
   "x_securitystudies_occurred_on": "2026-10-07",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--92ba1955-b004-5b1b-886e-86405de4a8d4",
   "created": "2026-11-10T16:32:08.002Z",
   "modified": "2026-11-10T16:32:08.002Z",
   "relationship_type": "related-to",
   "source_ref": "incident--88ca12c2-29c9-598b-928a-7f6a89141991",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--9ca06372-b640-5b3c-bbbe-f3d2f56f9c7c",
   "created": "2026-11-10T16:32:07.954Z",
   "modified": "2026-11-10T16:40:20.362Z",
   "name": "104人力銀行遭駭！12萬筆求職者個資恐外洩 官方發重訊證實了",
   "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Oct 6, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 120,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/10412-20261006/"
    },
    {
     "source_name": "Liberty Times",
     "url": "https://news.ltn.com.tw/news/life/breakingnews/5597618",
     "description": "104人力銀行遭駭！12萬筆求職者個資恐外洩 官方發重訊證實了"
    }
   ],
   "x_securitystudies_occurred_on": "2026-10-06",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Financial Services"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--cf3fc73f-9638-5020-b9e5-6214278e1199",
   "created": "2026-11-10T16:32:07.954Z",
   "modified": "2026-11-10T16:32:07.954Z",
   "relationship_type": "related-to",
   "source_ref": "incident--9ca06372-b640-5b3c-bbbe-f3d2f56f9c7c",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--e9cd4260-4348-51b3-9433-2f66babf7c47",
   "created": "2026-11-10T16:32:07.853Z",
   "modified": "2026-11-10T16:40:20.265Z",
   "name": "摩斯漢堡爆個資外洩！母公司重訊證實：已責成委外廠商改善",
   "description": "Detected automatically from 1 article in 1 outlet (New Talk), Oct 2, 2026. Type: data breach. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/incident-20261002-2/"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-10-02/1063172",
     "description": "摩斯漢堡爆個資外洩！母公司重訊證實：已責成委外廠商改善"
    }
   ],
   "x_securitystudies_occurred_on": "2026-10-02",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--e2677e85-3bf9-5095-bd50-60e96da4f7f2",
   "created": "2026-11-10T16:32:07.853Z",
   "modified": "2026-11-10T16:32:07.853Z",
   "relationship_type": "related-to",
   "source_ref": "incident--e9cd4260-4348-51b3-9433-2f66babf7c47",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--df647d8d-ec75-5718-9d55-2e53d4eef250",
   "created": "2026-11-10T16:32:07.751Z",
   "modified": "2026-11-10T16:40:20.189Z",
   "name": "Taiwan faces 2.6m daily cyberattacks, minister says",
   "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Sep 21, 2026. Type: other. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 2,600,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "other",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/taiwan-faces-26m-daily-cyberattacks-minister-says-20260921/"
    },
    {
     "source_name": "Taipei Times",
     "url": "https://www.taipeitimes.com/News/taiwan/archives/2026/09/22/2003864682",
     "description": "Taiwan faces 2.6m daily cyberattacks, minister says"
    }
   ],
   "x_securitystudies_occurred_on": "2026-09-21",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--df2978f2-77b1-5690-aaa2-2e30a2f861ec",
   "created": "2026-11-10T16:32:07.751Z",
   "modified": "2026-11-10T16:32:07.751Z",
   "relationship_type": "related-to",
   "source_ref": "incident--df647d8d-ec75-5718-9d55-2e53d4eef250",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--d92588ab-f6c4-5d8e-a541-58365baaec06",
   "created": "2026-11-10T16:32:07.707Z",
   "modified": "2026-11-10T16:40:20.158Z",
   "name": "資安院電腦系統遭入侵案　4人遭北檢起訴",
   "description": "Detected automatically from 1 article in 1 outlet (New Talk), Sep 18, 2026. Type: intrusion. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "intrusion",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/4-20260918/"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-09-18/1060537",
     "description": "資安院電腦系統遭入侵案　4人遭北檢起訴"
    }
   ],
   "x_securitystudies_occurred_on": "2026-09-18",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--4e887678-52eb-5241-98f5-61c36a9ca958",
   "created": "2026-11-10T16:32:07.707Z",
   "modified": "2026-11-10T16:32:07.707Z",
   "relationship_type": "related-to",
   "source_ref": "incident--d92588ab-f6c4-5d8e-a541-58365baaec06",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--d7d997fa-7cc2-5f06-adf2-3066585e84d0",
   "created": "2026-11-10T16:32:07.697Z",
   "modified": "2026-11-10T16:40:20.149Z",
   "name": "長榮航空、長榮航太深夜發重訊！證實內部系統遭駭、員工資料外洩",
   "description": "Detected automatically from 1 article in 1 outlet (New Talk), Sep 16, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/incident-20260916/"
    },
    {
     "source_name": "New Talk",
     "url": "https://newtalk.tw/news/view/2026-09-16/1060128",
     "description": "長榮航空、長榮航太深夜發重訊！證實內部系統遭駭、員工資料外洩"
    }
   ],
   "x_securitystudies_occurred_on": "2026-09-16",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Transportation"
   ],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--bf89b091-9b96-5d20-bd25-ed13b792178e",
   "created": "2026-11-10T16:32:07.697Z",
   "modified": "2026-11-10T16:32:07.697Z",
   "relationship_type": "related-to",
   "source_ref": "incident--d7d997fa-7cc2-5f06-adf2-3066585e84d0",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--4993de8b-1eda-598c-b85b-f897f4c292c8",
   "created": "2026-11-08T21:16:16.708Z",
   "modified": "2026-11-10T16:26:37.587Z",
   "name": "SecFlow Campaign Uses Commercial AI Agents Against Taiwanese and Indonesian Government Targets",
   "description": "Hunt.io researchers documented Chinese-speaking operators running the SecFlow framework across five exposed directories, routing requests to Claude, Qwen and DeepSeek through private proxy servers on the niestools.com domain as interchangeable operational components. Confirmed targets include Kuomintang Party political archives in Taiwan, the Indonesian Ministry of Foreign Affairs, industrial hosts in Vietnam, and government, education and industrial entities in China. The operators deployed the GLUTTON webshell framework and ASPX web shells, used steganographic PNG payload delivery and a fake MySQL deserialization service, and dumped LSASS memory in 37-block segments. Confirmed impact totals 822 compromised office-automation user records and 1.28GB of exfiltrated data including patient health information.",
   "confidence": 50,
   "labels": [
    "espionage",
    "curated"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/secflow-campaign-uses-commercial-ai-agents-against-taiwanese-and-indonesian-government-targets/"
    },
    {
     "source_name": "source",
     "url": "https://securityaffairs.com/198417/ai/chinese-hackers-use-ai-agents-in-multi-country-cyber-campaign.html"
    }
   ],
   "x_securitystudies_occurred_on": "2026-09-04",
   "x_securitystudies_severity": 4,
   "x_securitystudies_status": "curated",
   "x_securitystudies_sectors": [
    "Government",
    "Education",
    "Manufacturing",
    "Healthcare"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--e7abb989-2773-57b7-ae68-ece06d3664fd",
   "created": "2026-11-08T21:16:16.708Z",
   "modified": "2026-11-08T21:16:16.708Z",
   "relationship_type": "related-to",
   "source_ref": "incident--4993de8b-1eda-598c-b85b-f897f4c292c8",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--c2c1b570-cc1c-557e-ac00-8cbd10cb8abc",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Indonesia",
   "country": "ID"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--4f4f93e7-0fc6-5ae0-a6a0-54fca02eacca",
   "created": "2026-11-08T21:16:16.708Z",
   "modified": "2026-11-08T21:16:16.708Z",
   "relationship_type": "related-to",
   "source_ref": "incident--4993de8b-1eda-598c-b85b-f897f4c292c8",
   "target_ref": "location--c2c1b570-cc1c-557e-ac00-8cbd10cb8abc",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Vietnam",
   "country": "VN"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--46ddf5df-0dfa-5683-b9b8-91ab537721e4",
   "created": "2026-11-08T21:16:16.708Z",
   "modified": "2026-11-08T21:16:16.708Z",
   "relationship_type": "related-to",
   "source_ref": "incident--4993de8b-1eda-598c-b85b-f897f4c292c8",
   "target_ref": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--231e90b4-4920-54e1-af65-e3447d240a54",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "China",
   "country": "CN"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--fb865868-8a32-500d-8fd8-2f35681509ce",
   "created": "2026-11-08T21:16:16.708Z",
   "modified": "2026-11-08T21:16:16.708Z",
   "relationship_type": "related-to",
   "source_ref": "incident--4993de8b-1eda-598c-b85b-f897f4c292c8",
   "target_ref": "location--231e90b4-4920-54e1-af65-e3447d240a54",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Thailand",
   "country": "TH"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--1df41102-2f1d-5e81-b020-e232fb5f92f8",
   "created": "2026-11-08T21:16:16.708Z",
   "modified": "2026-11-08T21:16:16.708Z",
   "relationship_type": "related-to",
   "source_ref": "incident--4993de8b-1eda-598c-b85b-f897f4c292c8",
   "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--51e9a2ca-ecb1-5c26-a8b7-e7de025a6086",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Afghanistan",
   "country": "AF"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--8e9b5194-01ee-57c0-8e08-073a02c4576d",
   "created": "2026-11-08T21:16:16.708Z",
   "modified": "2026-11-08T21:16:16.708Z",
   "relationship_type": "related-to",
   "source_ref": "incident--4993de8b-1eda-598c-b85b-f897f4c292c8",
   "target_ref": "location--51e9a2ca-ecb1-5c26-a8b7-e7de025a6086",
   "description": "country named in the coverage"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--74657fff-2b96-5e87-8bba-660969e4162e",
   "created": "2026-11-08T21:16:16.719Z",
   "modified": "2026-11-10T16:26:37.587Z",
   "name": "China-linked SecFlow campaign uses AI agents against Asian government and industrial targets",
   "description": "Hunt.io documented a Chinese-speaking operation tracked as SecFlow, linked to a username 'Nie' recurring across its infrastructure, which routed Claude, Qwen and DeepSeek through private proxies at niestools.com to automate reconnaissance and exploitation. The toolkit included the GLUTTON webshell framework delivering steganographic payloads inside PNG files, a fake MySQL deserialization service, a Java and CAS exploitation workspace, and Shellshock and credential-testing nodes. Confirmed targeting spanned Kuomintang Party archives in Taiwan, the Indonesian Ministry of Foreign Affairs, and Chinese and Vietnamese government, education and industrial hosts. A confirmed breach of the Fengtai District government office-automation environment yielded 822 OA user records and 1.28GB of data including patient health information.",
   "confidence": 50,
   "labels": [
    "espionage",
    "curated"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/china-linked-secflow-campaign-uses-ai-agents-against-asian-government-and-industrial-targets/"
    },
    {
     "source_name": "source",
     "url": "https://securityaffairs.com/198417/ai/chinese-hackers-use-ai-agents-in-multi-country-cyber-campaign.html"
    }
   ],
   "x_securitystudies_occurred_on": "2026-08-20",
   "x_securitystudies_severity": 4,
   "x_securitystudies_status": "curated",
   "x_securitystudies_sectors": [
    "Government",
    "Education",
    "Defense",
    "Industrial"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--71e28321-0abc-5e25-965c-aa00c51fe6c5",
   "created": "2026-11-08T21:16:16.719Z",
   "modified": "2026-11-08T21:16:16.719Z",
   "relationship_type": "related-to",
   "source_ref": "incident--74657fff-2b96-5e87-8bba-660969e4162e",
   "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--6f5180ac-106f-503e-86ac-5890fc36ea67",
   "created": "2026-11-08T21:16:16.719Z",
   "modified": "2026-11-08T21:16:16.719Z",
   "relationship_type": "related-to",
   "source_ref": "incident--74657fff-2b96-5e87-8bba-660969e4162e",
   "target_ref": "location--c2c1b570-cc1c-557e-ac00-8cbd10cb8abc",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--25b1769c-a3f9-5501-9181-7fe452a1ef4b",
   "created": "2026-11-08T21:16:16.719Z",
   "modified": "2026-11-08T21:16:16.719Z",
   "relationship_type": "related-to",
   "source_ref": "incident--74657fff-2b96-5e87-8bba-660969e4162e",
   "target_ref": "location--231e90b4-4920-54e1-af65-e3447d240a54",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--6ca59b95-4835-5e06-8708-e735d0538a5c",
   "created": "2026-11-08T21:16:16.719Z",
   "modified": "2026-11-08T21:16:16.719Z",
   "relationship_type": "related-to",
   "source_ref": "incident--74657fff-2b96-5e87-8bba-660969e4162e",
   "target_ref": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d",
   "description": "affected country"
  }
 ]
}