{"id":5983,"date":"2026-02-01T10:17:32","date_gmt":"2026-02-01T02:17:32","guid":{"rendered":"https:\/\/cc.tcu.edu.tw\/?p=5983"},"modified":"2026-03-10T11:48:45","modified_gmt":"2026-03-10T03:48:45","slug":"%e3%80%90%e8%b3%87%e5%ae%89%e8%88%87%e9%98%b2%e8%a9%90%e9%9b%bb%e5%ad%90%e5%a0%b1%e3%80%912026%e5%b9%b42%e6%9c%88%e6%9c%80%e6%96%b0%e5%a8%81%e8%84%85%e8%ad%a6%e7%a4%bacybersecurity-anti-scam-up","status":"publish","type":"post","link":"https:\/\/cc.tcu.edu.tw\/?p=5983","title":{"rendered":"\u3010\u8cc7\u5b89\u8207\u9632\u8a50\u96fb\u5b50\u5831\u30112026\u5e742\u6708\u6700\u65b0\u5a01\u8105\u8b66\u793a[Cybersecurity &amp; Anti-Scam Update] February 2026 Latest Threat Warnings"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>1.\u3010\u8edf\u9ad4\u6f0f\u6d1e\u3011Notepad++ \u906d\u690d\u5165\u5f8c\u9580\uff0c\u8acb\u7acb\u5373\u505c\u7528\u81ea\u52d5\u66f4\u65b0<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u6458\u8981\uff1a<\/strong>\u77e5\u540d\u958b\u6e90\u6587\u5b57\u7de8\u8f2f\u5668 Notepad++ \u7684\u66f4\u65b0\u4f3a\u670d\u5668\u906d\u4e2d\u570b\u99ed\u5ba2\u7d44\u7e54 (Lotus Blossom) \u653b\u9677\u3002\u82e5\u4f7f\u7528\u8005\u57f7\u884c\u5167\u5efa\u7684\u81ea\u52d5\u66f4\u65b0\uff0c\u6d41\u91cf\u6703\u88ab\u5c0e\u5411\u60e1\u610f\u4f3a\u670d\u5668\u4e26\u4e0b\u8f09\u540d\u70ba\u300cChrysalis\u300d\u7684\u5f8c\u9580\u7a0b\u5f0f\uff0c\u5c0e\u81f4\u96fb\u8166\u906d\u99ed\u5ba2\u9060\u7aef\u63a7\u5236\u3002<\/li>\n\n\n\n<li><strong>\u5efa\u8b70\u884c\u52d5\uff1a<\/strong>\u00a0\u8acb\u7acb\u5373<strong>\u66ab\u505c\u4f7f\u7528 Notepad++ \u7684\u81ea\u52d5\u66f4\u65b0\u529f\u80fd<\/strong>\u3002\u82e5\u9700\u66f4\u65b0\uff0c\u8acb\u52d9\u5fc5\u624b\u52d5\u524d\u5f80\u5b98\u65b9\u7db2\u7ad9\u4e0b\u8f09\u5b89\u88dd\u6700\u65b0\u7684\u00a0<strong>v8.9.2<\/strong>\u00a0\u7248\u672c<\/li>\n\n\n\n<li><strong>\u53c3\u8003\u9023\u7d50\uff1a<\/strong><a href=\"https:\/\/www.twcert.org.tw\/tw\/cp-104-10725-feaeb-1.html\">TWCERT\/CC \u6f0f\u6d1e\u8b66\u8a0a (\u4f9d\u64da Rapid7 \u5831\u544a\u5f59\u6574)\u00a0<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2. \u3010\u901a\u8a0a\u5b89\u5168\u3011CISA \u793a\u8b66\u9593\u8adc\u8edf\u9ad4\u9396\u5b9a\u901a\u8a0a App\uff0c\u7c72\u505c\u7528\u7c21\u8a0a\u9a57\u8b49<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u6458\u8981\uff1a<\/strong>\u00a0\u7f8e\u570b CISA \u8b66\u544a\uff0c\u99ed\u5ba2\u6b63\u7a4d\u6975\u5229\u7528\u91e3\u9b5a\u3001\u60e1\u610f QR Code \u53ca\u300c\u96f6\u9ede\u64ca\u6f0f\u6d1e\u300d\u7b49\u9ad8\u968e\u624b\u6cd5\uff0c\u9396\u5b9a\u5373\u6642\u901a\u8a0a\u8edf\u9ad4\u7684\u4f7f\u7528\u8005\u9032\u884c\u5e33\u865f\u52ab\u6301\u8207\u8cc7\u6599\u7aca\u53d6\u3002<\/li>\n\n\n\n<li><strong>\u5efa\u8b70\u884c\u52d5\uff1a<\/strong>\u00a01. \u63a1\u7528\u5177\u5099\u300c\u7aef\u5c0d\u7aef\u52a0\u5bc6 (E2EE)\u300d\u7684\u901a\u8a0a\u8edf\u9ad4\u3002 2. \u555f\u7528\u5be6\u9ad4\u5b89\u5168\u91d1\u9470 (\u5982 FIDO) \u9032\u884c\u591a\u56e0\u5b50\u9a57\u8b49\u3002 3.\u00a0<strong>\u5f37\u70c8\u5efa\u8b70\u505c\u7528\u7c21\u8a0a (SMS) \u63a5\u6536\u9a57\u8b49\u78bc<\/strong>\uff0c\u907f\u514d\u906d\u6514\u622a\u6216 SIM \u5361\u633e\u6301\u3002<\/li>\n\n\n\n<li><strong>\u53c3\u8003\u9023\u7d50\uff1a<\/strong><a href=\"https:\/\/www.twcert.org.tw\/tw\/cp-104-10726-fffcd-1.html\">TWCERT\/CC \u884c\u52d5\u901a\u8a0a\u5b89\u5168\u6307\u5357\u8b66\u8a0a<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3. \u3010AI \u6cbb\u7406\u3011\u6b50\u6d32\u767c\u5e03\u5168\u7403\u901a\u7528 AI \u8cc7\u5b89\u6a19\u6e96\uff0c\u9632\u79a6\u751f\u6210\u5f0f AI \u65b0\u578b\u5a01\u8105<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u6458\u8981\uff1a<\/strong>\u6b50\u6d32\u96fb\u4fe1\u6a19\u6e96\u5354\u6703\uff08ETSI\uff09\u6b63\u5f0f\u767c\u5e03\u5168\u7403\u901a\u7528\u7684 AI \u8cc7\u5b89\u6a19\u6e96\uff08ETSI EN 304 223\uff09\u3002\u7531\u65bc\u50b3\u7d71\u9632\u79a6\u7121\u6cd5\u963b\u64cb\u300c\u8cc7\u6599\u6bd2\u5316\u300d\u6216\u300c\u63d0\u793a\u8a5e\u6ce8\u5165\u300d\u7b49\u91dd\u5c0d AI \u7684\u65b0\u578b\u653b\u64ca\uff0c\u8a72\u6a19\u6e96\u91dd\u5c0d\u751f\u6210\u5f0f AI \u7cfb\u7d71\uff0c\u5236\u5b9a\u4e86\u5f9e\u8a2d\u8a08\u3001\u958b\u767c\u3001\u90e8\u7f72\u5230\u9000\u5f79\u7684 13 \u9805\u6838\u5fc3\u5b89\u5168\u539f\u5247\uff0c\u4e26\u660e\u78ba\u5b9a\u7fa9\u4e86\u4f9b\u61c9\u93c8\u4e2d\u5404\u65b9\uff08\u5305\u542b\u7d42\u7aef\u4f7f\u7528\u8005\uff09\u7684\u8cc7\u5b89\u8cac\u4efb\u3002<\/li>\n\n\n\n<li><strong>\u5efa\u8b70\u884c\u52d5\uff1a<\/strong>\u00a0\u6821\u5167\u5404\u55ae\u4f4d\u82e5\u6709\u59d4\u5916\u958b\u767c\u3001\u63a1\u8cfc\u6216\u81ea\u884c\u5efa\u7f6e\u751f\u6210\u5f0f AI \u7cfb\u7d71\u4ee5\u8f14\u52a9\u6821\u52d9\u8207\u6559\u5b78\uff0c\u5efa\u8b70\u8cc7\u8a0a\u4eba\u54e1\u8207\u5c08\u6848\u627f\u8fa6\u4eba\u53ef\u5c07\u6b64\u6a19\u6e96\u7d0d\u5165\u53c3\u8003\uff0c\u5728\u7cfb\u7d71\u8a2d\u8a08\u521d\u671f\u5373\u843d\u5be6\u8cc7\u5b89\u9632\u8b77\uff08\u5b89\u5168\u5373\u8a2d\u8a08\uff09\u3002<\/li>\n\n\n\n<li><strong>\u53c3\u8003\u9023\u7d50\uff1a<\/strong><a href=\"https:\/\/www.twcert.org.tw\/tw\/cp-104-10727-665e8-1.html\">\u00a0\u6b50\u6d32\u96fb\u4fe1\u6a19\u6e96\u5354\u6703\u767c\u5e03 AI \u8cc7\u5b89\u6a19\u6e96 (TWCERT\/CC \u516c\u544a)<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1. [Software Vulnerability] Notepad++ Backdoored: Disable Auto-Update Immediately<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Summary:<\/strong>\u00a0The update server of the well-known open-source text editor Notepad++ has been compromised by a Chinese hacker group (Lotus Blossom). If users execute the built-in auto-update, their traffic will be redirected to a malicious server to download a backdoor program named &#8220;Chrysalis&#8221;, allowing hackers to remotely control the computer.<\/li>\n\n\n\n<li><strong>Action Required:<\/strong>\u00a0Please immediately\u00a0<strong>suspend the use of the auto-update feature in Notepad++<\/strong>. If an update is needed, be sure to manually visit the official website to download and install the latest\u00a0<strong>v8.9.2<\/strong>\u00a0version.<\/li>\n\n\n\n<li><strong>Reference:<\/strong>\u00a0<a href=\"https:\/\/www.twcert.org.tw\/tw\/cp-104-10725-feaeb-1.html\">TWCERT\/CC Vulnerability Alert (Based on Rapid7 Report)\u00a0<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2. [Communication Security] CISA Warns of Spyware Targeting Messaging Apps, Urges Disabling SMS Verification<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Summary:<\/strong>\u00a0The US CISA warns that hackers are actively utilizing advanced tactics such as phishing, malicious QR codes, and &#8220;zero-click exploits&#8221; to target users of instant messaging applications for account hijacking and data theft.<\/li>\n\n\n\n<li><strong>Action Required:<\/strong>\u00a01. Use messaging applications with End-to-End Encryption (E2EE). 2. Enable physical security keys (e.g., FIDO) for multi-factor authentication. 3. It is\u00a0<strong>strongly recommended to disable SMS for receiving verification codes<\/strong>\u00a0to prevent interception or SIM swapping.<\/li>\n\n\n\n<li><strong>Reference:<\/strong>\u00a0<a href=\"https:\/\/www.twcert.org.tw\/tw\/cp-104-10726-fffcd-1.html\">TWCERT\/CC Mobile Communications Security Guide Alert<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3. [AI Governance] Europe Releases Global AI Cybersecurity Standard to Defend Against Emerging GenAI Threats<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Summary:<\/strong>\u00a0The European Telecommunications Standards Institute (ETSI) has officially released a globally applicable AI cybersecurity standard (ETSI EN 304 223). Since traditional defenses cannot block new AI-targeted attacks like &#8220;data poisoning&#8221; or &#8220;prompt injection&#8221;, this standard establishes 13 core security principles for generative AI systems\u2014from design, development, and deployment to retirement\u2014and clearly defines the cybersecurity responsibilities of all parties in the supply chain (including end-users).<\/li>\n\n\n\n<li><strong>Action Required:<\/strong>\u00a0If units within the school outsource the development, purchase, or build their own generative AI systems to assist with school administration and teaching, it is recommended that IT personnel and project managers incorporate this standard as a reference to implement cybersecurity protections during the initial system design phase (secure by design).<\/li>\n\n\n\n<li><strong>Reference:<\/strong>\u00a0<a href=\"https:\/\/www.twcert.org.tw\/tw\/cp-104-10727-665e8-1.html\">ETSI Releases AI Cybersecurity Standard (TWCERT\/CC Announcement)<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>1.\u3010\u8edf\u9ad4\u6f0f\u6d1e\u3011Notepad++ \u906d\u690d\u5165\u5f8c\u9580\uff0c\u8acb\u7acb\u5373\u505c\u7528\u81ea\u52d5\u66f4\u65b0 2. \u3010\u901a\u8a0a\u5b89\u5168\u3011CISA \u793a\u8b66&#8230;<\/p>\n<p class=\"continue-reading-button\"> <a class=\"continue-reading-link\" href=\"https:\/\/cc.tcu.edu.tw\/?p=5983\">\u7e7c\u7e8c\u95b1\u8b80<i class=\"crycon-right-dir\"><\/i><\/a><\/p>\n","protected":false},"author":12,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-5983","post","type-post","status-publish","format-standard","hentry","category-9"],"_links":{"self":[{"href":"https:\/\/cc.tcu.edu.tw\/index.php?rest_route=\/wp\/v2\/posts\/5983","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cc.tcu.edu.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cc.tcu.edu.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cc.tcu.edu.tw\/index.php?rest_route=\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/cc.tcu.edu.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5983"}],"version-history":[{"count":1,"href":"https:\/\/cc.tcu.edu.tw\/index.php?rest_route=\/wp\/v2\/posts\/5983\/revisions"}],"predecessor-version":[{"id":5984,"href":"https:\/\/cc.tcu.edu.tw\/index.php?rest_route=\/wp\/v2\/posts\/5983\/revisions\/5984"}],"wp:attachment":[{"href":"https:\/\/cc.tcu.edu.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5983"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cc.tcu.edu.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5983"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cc.tcu.edu.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5983"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}