Resource Center

The Ministry of Economic Affairs is a highly valuable target, with the ministry and its affiliated institutions' sensitive information regarding investment promotion, energy development, and innovation research projects. The Ministry's scope of business spans multiple domains. In addition to promoting industrial development and facilitating international trade cooperation, the Ministry also oversees several state-owned infrastructures which include Taiwan Power Company, CPC Corporation, and Taiwan Water Corporation.

In this report, CyCraft research team analyzes 27 listed companies in Taiwan, Level-A government agencies and healthcare institutions, covering 46 AD Domains, with 1,057,000 objects included. These statistics from the real-world environment provide solid evidence for readers to comprehend the general management issues and security vulnerabilities of Active Directory (AD). The report includes various AD security issues, such as plaintext passwords, password cracking, misconfiguration, and misusage/misconfigured problems commonly observed in enterprises.

Organizations are struggling to secure complex, changing hybrid cloud/on-premise environments, legacy and modern systems, cross-region operations, working from home employees, with high availability, compliance and ease-of-use requirements.Combined with trying to operate a multi-tiered SOC (Security Operations Center) and hire and retain hard-to-find security talent while facing a barrage of alerts and undetected attacks from ever-aggressive, persistent and sophisticated cyber threats and actors, makes true cyber security seem like an impossible dream to most organizations.‍

This threat report provides an analysis of the advanced persistent threat (APT) attacks that have occurred during the past two years on the semiconductor industry. Our research shows that the majority of these attacks were concentrated on the Taiwan semiconductor sector.

Organizations are struggling to secure complex, changing hybrid cloud/on-premise environments, legacy and modern systems, cross-region operations, working from home employees, with high availability, compliance and ease-of-use requirements. Combined with trying to operate a multi-tiered SOC (Security Operations Center) and hire and retain hard-to-find security talent while facing a barrage of alerts and undetected attacks from ever-aggressive, persistent and sophisticated cyber threats and actors, makes true cyber security seem like an impossible dream to most organizations.

This report provides an analysis of the increasing adoption of effective MDR, AI, and Automation and indicates CyCraft can secure small, medium, and large orgs with its AI technology.

This report not only highlights some of the threats that have been targeting Taiwan and the adversarial techniques, tactics, and procedures these threats have employed but also views these threats in terms of the overall Taiwan cyber landscape.

The CyCarrier AIR platform was able to shorten the pre-acquisition cybersecurity investigation from several months to just a few days, reducing investigation time by over 99%.