###### tags: `資安事件新聞週報`
# 資安事件新聞週報 2026/4/27 ~ 2026/5/1

1.重大弱點漏洞/後門/Exploit/Zero Day
Linux作業系統套件管理器存在資安漏洞Pack2TheRoot，攻擊者能取得root權限
https://www.ithome.com.tw/news/175353

群暉修補SSL VPN Client工具程式兩個漏洞，未更新可能導致敏感資料外洩
https://www.ithome.com.tw/news/175110

SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack
https://thehackernews.com/2026/04/sap-npm-packages-compromised-by-mini.html

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution
https://thehackernews.com/2026/04/google-fixes-cvss-10-gemini-cli-ci-rce.html

New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions
https://thehackernews.com/2026/04/new-linux-copy-fail-vulnerability.html

LMDeploy LLM推論工具SSRF漏洞公開後13小時內即遭利用
https://www.ithome.com.tw/news/175331

LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure
https://thehackernews.com/2026/04/lmdeploy-cve-2026-33626-flaw-exploited.html

LiteLLM重大漏洞公布後36小時出現攻擊活動
https://www.ithome.com.tw/news/175400

LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure
https://thehackernews.com/2026/04/litellm-cve-2026-42208-sql-injection.html

微軟修補Entra ID權限漏洞，防止AI代理管理角色遭到濫用
https://www.ithome.com.tw/news/175399

微軟修補Windows Active Directory重大漏洞，未更新恐成為入侵企業網路入口
https://www.ithome.com.tw/news/175118

微軟開放用戶無限制推遲Windows更新，可不更新就關機
https://www.ithome.com.tw/news/175318

Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover
https://thehackernews.com/2026/04/microsoft-patches-entra-id-role-flaw.html

Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202
https://thehackernews.com/2026/04/microsoft-confirms-active-exploitation.html

APT28將Windows Shell欺騙漏洞用於實際攻擊
https://www.ithome.com.tw/news/175440

美國CISA緊急擴充KEV清單，五大漏洞威脅Windows與網路設備
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=12867

CISA警告ConnectWise ScreenConnect、Windows Shell漏洞已出現攻擊行動
https://www.ithome.com.tw/news/175431

CISA將微軟Defender漏洞BlueHammer列入KEV清單，要求各機構限期修補
https://www.ithome.com.tw/news/175320

CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline
https://thehackernews.com/2026/04/cisa-adds-4-exploited-flaws-to-kev-sets.html

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV
https://thehackernews.com/2026/04/cisa-adds-actively-exploited.html

Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren't Ready for the Remediation Side
https://thehackernews.com/2026/04/mythos-changed-math-on-vulnerability.html

PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks
https://thehackernews.com/2026/04/phantomcore-exploits-trueconf.html

Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE
https://thehackernews.com/2026/04/critical-cve-2026-25874-leaves-hugging.html

cPanel修補重大身分驗證漏洞，未更新可能導致攻擊者接管主機
https://www.ithome.com.tw/news/175449

Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately
https://thehackernews.com/2026/04/critical-cpanel-authentication.html

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push
https://thehackernews.com/2026/04/researchers-discover-critical-github.html

Mandiant示警：企業搶導AI卻忘基本功，舊漏洞趁虛釀成無聲入侵
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=12866

Google發布Chrome瀏覽器更新，修補30個安全性問題，含4個重大漏洞
https://www.ithome.com.tw/news/175444

一次盤點OpenClaw近期嚴重漏洞，關注AI代理框架安全風險
https://www.ithome.com.tw/news/175413

OpenClaw強化權限管理與系統穩定性，修復繞過策略與憑證洩漏等弱點
https://www.ithome.com.tw/news/175372

Hugging Face機器人平臺LeRobot存在重大漏洞，未經身分驗證的攻擊者可執行任意程式碼
https://www.ithome.com.tw/news/175397

高風險GitHub漏洞極容易被利用，攻擊者只需透過推送Git就能觸發
https://www.ithome.com.tw/news/175406

TeamT5 ThreatSonar反勒索軟體存在高風險漏洞，可被提升權限、刪除任何檔案
https://www.ithome.com.tw/news/175410

Google修補Gemini CLI重大漏洞，未更新可能導致開發整合流程遭遇遠端執行程式碼攻擊
https://www.ithome.com.tw/news/175384

韓國KISA首度啟動安全漏洞清理服務，首波因應目標是WGear網銀RCE漏洞
https://www.ithome.com.tw/news/175351

RPC零時差漏洞PhantomRPC可被用於提升權限
https://www.ithome.com.tw/news/175341

Notepad++修補字串輸入漏洞，未更新可能導致資訊洩漏或程式當機
https://www.ithome.com.tw/news/175362

Tenable修補Nessus弱點掃描代理程式漏洞，未更新可能導致攻擊者取得SYSTEM權限
https://www.ithome.com.tw/news/175352

CrowdStrike修補LogScale重大漏洞，未更新可能導致遠端讀取任意檔案
https://www.ithome.com.tw/news/175327

Python存在高風險的記憶體存取漏洞，未修補可能導致越界寫入與記憶體資料損毀
https://www.ithome.com.tw/news/175332

用AI發現漏洞還不夠，Google指出自動化大規模修補才是防禦核心
https://www.ithome.com.tw/news/175328

Google發布Chrome瀏覽器更新，修補19項漏洞，含2個高風險漏洞
https://www.ithome.com.tw/news/175322

Web應用框架ASP.NET Core DataProtection套件存在提權漏洞，受影響環境須升級並輪換金鑰
https://www.ithome.com.tw/news/175258

2.銀行/金融/保險/證券/金融監理 新聞及資安
銀行業加速調整腳步：傳統風險反彈、新型威脅擴大 關注信用風險、金融犯罪
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=12863

一張圖看2026年金融業企業資安風險
https://www.ithome.com.tw/article/175432

資安AI代理崛起，金融和百億企業積極擁抱零信任
https://www.ithome.com.tw/article/175313

FIDO聯盟推動AI代理互動與驗證標準，降低AI代理線上交易風險
https://www.ithome.com.tw/news/175396

整體資安預算大增13％，金融業更加碼近2成
https://www.ithome.com.tw/article/175310

智慧資安攜手池安量子資安 鎖定金融與政府搶攻 PQC 遷移
https://netmag.tw/2026/04/29/taiwan-builds-quantum-resilience

從防禦到韌性：零信任架構重塑金融安全新標竿
https://infosecu.technews.tw/2026/04/27/reshaping-a-new-benchmark-for-financial-security/

Options Technology擴大金融服務版圖，為某一級銀行在冰島大規模佈署人工智慧
https://reurl.cc/zQQvRQ

3.信用卡/電子支付/行動支付/pay/支付系統/資安
美國運通卡支援 Apple Pay 行動支付體驗全面升級
https://www.ctee.com.tw/news/20260428701950-431207

臺網攜手一卡通 強化電子支付資安
https://money.udn.com/money/story/5612/9473746

一卡通導入行動身分識別，靠電信門號身分驗證強化電支交易安全
https://www.ithome.com.tw/news/175386

日本PayPay在台可支付　掃「悠遊付-TWQR」享優惠
https://www.cna.com.tw/news/aloc/202604270315.aspx

日本Bitbank攜手Epos發行加密信用卡 消費享比特幣回饋
https://news.pchome.com.tw/finance/sunmedia/20260429/index-77746758720526329003.html

4.加密貨幣/數位貨幣/挖礦/區塊鍊/智能合約/WEB3 資安
北韓駭客Famous Chollima透過AI生成惡意NPM套件，藉此洗劫開發人員加密貨幣資產
https://www.ithome.com.tw/news/175450

重磅！PayPal 宣布戰略重組將「支付與加密貨幣」納入三大核心業務，高管大換血強攻 AI 轉型
https://www.blocktempo.com/paypal-strategic-restructuring-crypto-ai-leadership-changes/

萬事達卡迎戰支付變革 AI與加密貨幣夥伴關係併行股東挑戰
https://pchome.megatime.com.tw/news/cat1/20260430/77752804696270329003.html

加拿大擬禁加密貨幣 ATM 切斷犯罪關鍵工具
https://www.epochtimes.com/b5/26/4/30/n14753822.htm

日本Bitbank攜手Epos發行加密信用卡 消費享比特幣回饋
https://news.pchome.com.tw/finance/sunmedia/20260429/index-77746758720526329003.html

Veera與Turnkey合作，為其加密銀行帶來10秒快速入門及生物識別登入功能
https://www.mexc.com/zh-TW/news/1066159

5.資安事件新聞

A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式/IOC
委內瑞拉能源及公用事業部門遭資料破壞軟體Lotus Wiper攻擊
https://www.ithome.com.tw/news/175454

後門程式FireStarter鎖定思科防火牆，中國駭客利用已知漏洞滲透裝置
https://www.ithome.com.tw/news/175309

美國聯邦機構的思科防火牆遭後門程式FireStarter攻擊
https://www.ithome.com.tw/news/175314

勒索軟體VECT 2.0加密檔案出錯，受害者付錢也無法完全復原檔案
https://www.ithome.com.tw/news/175417

UNC6692冒充IT服務臺，透過Teams散布惡意軟體套件Snow
https://www.ithome.com.tw/news/175394

蠕蟲程式GlassWorm透過73個VS Code延伸套件潛伏於Open VSX儲存庫
https://www.ithome.com.tw/news/175340

勒索軟體Gentlemen透過代理伺服器工具SystemBC滲透企業組織
https://www.ithome.com.tw/news/175442

Linux惡意軟體GoGra濫用Microsoft Graph API隱匿活動蹤跡
https://www.ithome.com.tw/news/175315

New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs
https://thehackernews.com/2026/04/new-wave-of-dprk-attacks-uses-ai.html

FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches
https://thehackernews.com/2026/04/firestarter-backdoor-hit-federal-cisco.html

Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2
https://thehackernews.com/2026/04/tropic-trooper-uses-trojanized.html

UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware
https://thehackernews.com/2026/04/unc6692-impersonates-it-helpdesk-via.html

Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering Software
https://thehackernews.com/2026/04/researchers-uncover-pre-stuxnet-fast16.html

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware
https://thehackernews.com/2026/04/researchers-uncover-73-fake-vs-code.html

EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades
https://thehackernews.com/2026/04/etherrat-distribution-spoofing.html

B.行動安全 / iPhone / Android /穿戴裝置 /App / 5G / 即時通訊
蘋果App Store驚見假錢包，FakeWallet攻擊竊取助記詞
https://www.ithome.com.tw/news/175477

26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases
https://thehackernews.com/2026/04/26-fakewallet-apps-found-on-apple-app.html

手機借人不怕被亂看！Android新功能可幫App上鎖
https://www.sogi.com.tw/articles/how-to-android/6268420

歐盟出手立法！手機重回「換電池」時代　2巨頭面臨挑戰
https://www.mirrormedia.mg/story/20260428edi029

三星研究指出：大眾對於公共場合使用智慧型手機的隱私保護意識日益提升
https://reurl.cc/2aa2V4

OpenAI 可能會開始生產內建晶片的智慧型手機
https://www.gamereactor.cn/openai-might-start-producing-a-smartphone-with-in-house-chips-1302493/

智生活取得 MAS L3 認證 守護社區 App 資安及隱私
https://news.cnyes.com/news/id/6438608

AI爭奪戰！這款APP大陸用戶增長最猛 遠超其他應用程式
https://udn.com/news/story/7333/9472441

C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件 / 資安人力
600萬臺連網伺服器還在使用FTP，四成未加密
https://www.ithome.com.tw/news/175232

AI代理人9秒刪掉新創公司PocketOS的資料庫及備份
https://www.ithome.com.tw/news/175391

Google六月起將處罰使用返回鍵劫持手法的網站
https://www.ithome.com.tw/news/175106

因應資安人才缺口， 3成CIO想靠AI緩解
https://www.ithome.com.tw/article/175311

人才和資料治理是AI資安兩大難題
https://www.ithome.com.tw/article/175312

中國駭客Tropic Trooper鎖定臺灣、日本、韓國，透過Adaptix C2與VS Code隧道控制受害電腦
https://www.ithome.com.tw/news/175324

中國駭客GopherWhisper鎖定蒙古，利用多種雲端服務從事網路間諜活動
https://www.ithome.com.tw/news/175325

數位控制器製造商新代科技遭勒索軟體攻擊
https://mopsov.twse.com.tw/mops/web/ajax_t05sr01_1?firstin=true&stp=1&step=1&SEQ_NO=1&SPOKE_TIME=213035&SPOKE_DATE=20260429&COMPANY_ID=7750

SAP的NPM套件遭Mini Shai-Hulud攻擊
https://www.ithome.com.tw/news/175446

藏匿於合法流量之中：UNC6692 如何以 AWS S3 繞過網路聲譽過濾
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=12869

荷蘭軍情機構示警：中國網攻能力已與美國並駕齊驅，大量行動潛伏未被偵測
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=12864

Chinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research Cyberattacks
https://thehackernews.com/2026/04/chinese-silk-typhoon-hacker-extradited.html

Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign
https://thehackernews.com/2026/04/brazilian-lofygang-resurfaces-after.html

D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞/網路霸凌/帳號安全
金鑰管理問題大！Thales警示過半企業未自行掌控雲端資料加密金鑰
https://www.ithome.com.tw/news/174807

影音串流平臺Vimeo遭Anodot資料外洩事件波及，部分用戶與客戶資料遭未經授權存取
https://www.ithome.com.tw/news/175403

駭客冒充IT與客服人員，透過跨租戶Teams通訊進行社交工程攻擊
https://www.ithome.com.tw/news/175392

駭客組織BlackFile鎖定零售與餐旅業竊取資料，並索討7位數的高價贖金
https://www.ithome.com.tw/news/175383

Checkmarx證實GitHub資料遭駭客團體Lapsus$流入暗網
https://www.ithome.com.tw/news/175338

醫療設備製造商美敦力資料外洩，駭客聲稱竊取逾900萬筆個資
https://www.ithome.com.tw/news/175360

網路學習平臺Udemy傳資料外洩，ShinyHunters聲稱竊得140萬筆個資
https://www.ithome.com.tw/news/175367

美國NASA傳出遭中國駭客網釣，意圖竊取美國國防軟體
https://www.ithome.com.tw/news/175457

NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense Software
https://thehackernews.com/2026/04/nasa-employees-duped-in-chinese.html

Fake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraud
https://thehackernews.com/2026/04/fake-captcha-irsf-scam-and-120-keitaro.html

ShinyHunters傳竊得保全巨人ADT、遊輪業者Carnival數百萬筆資料
https://www.ithome.com.tw/news/175316

E.研究報告/工具
2025年API資安事故頻傳，遭遇危機的企業比例高達87％
https://www.ithome.com.tw/news/175459

Google警告量子破解門檻下降20倍，ECC攻擊時間縮至分鐘級
https://www.ithome.com.tw/news/174829

3月多起供應鏈攻擊揭露CI/CD管線風險，GitLab提出防護建議
https://www.ithome.com.tw/news/174939

OpenAI開源可自動去識別化資料的Privacy Filter模型，強化AI隱私基礎設施
https://www.ithome.com.tw/news/175246

從「零信任網路」到「雙零安全」
https://www.ithome.com.tw/article/175255

Bridging the AI Agent Authority Gap: Continuous Observability as the Decision Engine
https://thehackernews.com/2026/04/bridging-ai-agent-authority-gap.html

Why Secure Data Movement Is the Zero Trust Bottleneck Nobody Talks About
https://thehackernews.com/2026/04/why-secure-data-movement-is-zero-trust.html

Mythos模型問世，臺灣兩大資安廠商警示AI將使攻擊門檻大幅降低
https://www.ithome.com.tw/news/175398

After Mythos: New Playbooks For a Zero-Window Era
https://thehackernews.com/2026/04/after-mythos-new-playbooks-for-zero.html

What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)
https://thehackernews.com/2026/04/what-to-look-for-in-exposure-management.html

What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)
https://thehackernews.com/2026/04/what-to-look-for-in-exposure-management.html

F.商業
CTM360 Exposes Global GovTrap Campaign With 11,000+ Fake Government Portals Targeting Citizens Worldwide
https://thehackernews.com/expert-insights/2026/04/ctm360-exposes-global-govtrap-campaign.html

2025企業面臨勒索軟體攻擊的衝擊，Veeam警示能完全復原資料的比例不到3成
https://www.ithome.com.tw/news/175416

一張圖看2026年整體臺灣企業資安風險
https://www.ithome.com.tw/article/175420

一張圖看2026年高科技製造業企業資安風險
https://www.ithome.com.tw/article/175433

儲域網路進入128G FC時代，博科第8代產品結合AI與量子安全
https://www.ithome.com.tw/review/172764

Mandiant推出免費資安教學平臺FLARE Learning Hub
https://www.ithome.com.tw/news/175228

今年臺灣大型企業IT預算成長9%，CIO從數位轉型邁向AI轉型布局
https://www.ithome.com.tw/news/175333

Fortinet新一代中高階NGFW登場，提供26 Gbps威脅防護效能
https://www.ithome.com.tw/review/172669

微軟對Exchange與Skype for Business發布第二階段ESU，延長安全更新至2026年10月
https://www.ithome.com.tw/news/175218

為因應生成式AI帶來的資安風險，開源排程平臺Cal.com宣布商業版本轉為閉源
https://www.ithome.com.tw/news/175107

看好基於eBPF的執行期防護與韌體分析市場，義大利商Exein登臺設立亞太營運中心
https://www.ithome.com.tw/news/175206

G.政府
資安院9月啟動第二屆漏洞獵捕　鎖定政府機關常用軟體強化供應鏈安全
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=12868

資安院首屆漏洞獵捕活動發現20個硬體產品漏洞，今年第二屆活動開放AI工具挖掘軟體漏洞
https://www.ithome.com.tw/news/175329

資安署與資安院共同舉辦SBOM工作坊 助企業布局全球市場
https://moda.gov.tw/ACS/press/news/press/19580

臺馬三號海纜部分芯線受損不到一個月發生全斷，中華電信緊急以微波備援東引通訊
https://www.ithome.com.tw/news/175455

臺馬三號北竿東引段海纜全斷 數發部啟動微波備援
https://ec.ltn.com.tw/article/breakingnews/5420382

高德一亮燈，數位發展部露餡了嗎
https://reurl.cc/dppE8k

從算力到碳管理 AI助攻產業雙軸轉型
https://www.cna.com.tw/newsworld/article/20260429n007/

日本前數位大臣平將明訪台 將見賴清德、拜會國防部與數發部
https://today.line.me/tw/v3/article/gz9p1Ra

H.工控系統/ICS/SCADA/IOT/物聯網/車聯網/電動車/人工智慧/AI/ML/人臉辨識/醫療 相關資安
Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering Software
https://thehackernews.com/2026/04/researchers-uncover-pre-stuxnet-fast16.html

關鍵基礎設施資安警訊：美國電力商 Itron 遭駭，DC 電源調節器成新型攻擊入口
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=12865

研究人員揭露比Stuxnet還要早被利用的工控惡意軟體Fast16
https://www.ithome.com.tw/news/175389

CISA警告D-Link路由器命令注入漏洞被用於實際攻擊
https://www.ithome.com.tw/news/175346

殭屍網路Mirai變種綁架生命週期結束的D-Link路由器
https://www.ithome.com.tw/news/175307

樹莓派OS新版改變預設行為，sudo指令需輸入密碼
https://www.ithome.com.tw/news/175109

I.教育訓練
資安事件發生必要知道的復原程序，降低傷害
https://www.ithome.com.tw/pr/163614

iPAS資訊安全工程師中級筆記
https://hackmd.io/@Not/iPASInformationSecuritySpecialist

iPas資安工程師證照考前研習
https://reurl.cc/GEbA3p

iPAS◆資訊安全規劃實務◆中級測驗題庫彙編(123題)
https://reurl.cc/orlD1g

EC Council CASE.NET 認證準備
https://coolmandiary.blogspot.com/2025/04/ec-council-casenet.html

EC Council CASE.NET(312-95)_筆記_Module1專有名詞及定義
https://coolmandiary.blogspot.com/2021/10/ec-council-casenet312-95module1.html

GCP Associate Cloud Engineer (ACE) 學習心得、教材資源與筆記分享 — 學習天然高可用與零信任設計
https://medium.com/blacksecurity/gcp-associate-cloud-engineer-78f736aee7ad

Coursera 盤點 7 項雲端資安認證，高薪跳板都在這了！
https://buzzorange.com/techorange/2022/07/12/cloud-security-certificates/

一般人也能拿到國際資安認證！CSCU安全電腦使用者認證課程
https://www.ithome.com.tw/pr/160954

全球網絡安全勞動力失衡 (ISC)2免費課程及考試填補人才缺口
https://reurl.cc/m39MDj

CISSP資安認證的8大領域
https://2formosa.blogspot.com/2022/12/CISSP-topic-domains.html

CISSP考試心得
https://reurl.cc/KbY83j

CISSP考試心得 – Benson
https://reurl.cc/GbWvxd

目標導向-20天光速考過CISSP
https://reurl.cc/2Zq6zn

CISSP證照考試實戰心得 第一章：初期準備工作
https://netmag.tw/2022/06/17/the-cissp-has-learned-the-first-chapter-in-actual-combat

CISSP證照考試實戰心得 第二章：規律且有紀律的讀書策略
https://netmag.tw/2022/07/01/the-cissp-is-in-the-field-of-combat-chapter-two-regular-and-disciplined-reading-strategies

CISSP證照考試實戰心得 第三章：終極一戰
https://netmag.tw/2022/07/12/the-cissp-has-learned-a-third-chapter-in-actual-combat-experience-the-ultimate-battle

Quick CISSP Infographic for IPSec
https://www.studynotesandtheory.com/single-post/quick-cissp-infographic-for-ipsec

CSSLP Certification - Security models in F#
https://github.com/vbocan/csslp

Certified Secure Software Lifecycle Professional in bullet points
https://github.com/joeyhage/csslp-notes

CPSA(CREST Practitioner Security Analyst) 資安分析師考試心得
https://tech-blog.cymetrics.io/posts/huli/crest-cpsa-prepare/

EC-Council CEH v11 考試心得、改版資訊以及準備方向 2021、2022
https://reurl.cc/1oyEM8

CEH v11 考試心得與準備方式
https://blog.sean.taipei/2022/01/ceh

CEH
https://github.com/a3cipher/CEH

CodeRed by EC-Council
https://github.com/codered-by-ec-council

EC-Council CEH Practical / Master 準備心得 — 讓理論與實作相輔相成的學習
https://medium.com/blacksecurity/ceh-practical-master-3e80cac180a2

EC-Council CEHP考試準備心得
https://hackmd.io/@9dCJrgb6QHGd8dRfgHO0zg/r14xNn1po

My ceh practical notes
https://github.com/dhabaleshwar/CEHPractical/blob/main/Everything%20You%20Need.md

CEHP課程筆記
https://hackmd.io/@nfu-johnny/B1Ju_BMPR

ECSA v10 考試心得與讀書資料分享/ ECSA v10 Review and Study Materials
https://medium.com/blacksecurity/ecsa-v10-1ec76c0eb7d4

EC-Council ECSA資安分析專家 v10 考試心得分享
https://javaxtalk.blogspot.com/2019/05/ec-council-ecsa-v10.html

20180817 EC-Council ECSA v10 PASS
https://www.ptt.cc/bbs/License/M.1534571704.A.5BA.html

關於EC-Council CPENT和LPT Master滲透測試證照準備方式及心得分享
https://medium.com/@ChadSecurity/%E9%97%9C%E6%96%BCec-council-cpent%E5%92%8Clpt-master%E6%BB%B2%E9%80%8F%E6%B8%AC%E8%A9%A6%E8%AD%89%E7%85%A7%E6%BA%96%E5%82%99%E6%96%B9%E5%BC%8F%E5%8F%8A%E5%BF%83%E5%BE%97%E5%88%86%E4%BA%AB-efb63de00a8d

深度解析 CPENT 考試心得、以及與 OSCP 的比較
https://reurl.cc/41eL8v

EC-Council CPENT v1 滲透測試認證 – 內容及心得分享
https://hackercat.org/pentesting/ec-council-cpent-v1-experience-review

CPENT 從暴力到破解
https://hackmd.io/@3WAsoRFgSlyy7pm10p60kg/ByO0zs295

Ec-Council CPENT心得 - 資安菜鳥從CEH到LPT Master
https://4hsienyang.medium.com/cpent-lpt-master-ccaebf2dbc7f

CPENT考試心得分享：一次拿到 LPT 滲透測試大師認證
https://ucom.uuu.com.tw/web/Testimony/Article/4404

kaizensecurity/CPENT
https://github.com/kaizensecurity/CPENT/tree/master

CPENT : Pentesting like NO OTHERS !
https://www.linkedin.com/pulse/cpent-pentesting-like-others-belly-rachdianto/

Journey of My CPENT Exam
https://medium.com/techiepedia/journey-of-my-cpent-exam-3a5d7ee6d917

[備考心得]CompTIA Security+ (SY0–601) 上篇
https://reurl.cc/M053DK

[備考心得]CompTIA Security+ (SY0–601) 下篇
https://reurl.cc/M053Gv

comptia-security-plus
https://github.com/ajfuto/comptia-security-plus

security-plus
https://github.com/fjavierm/security-plus

CompTIA Security+ Certification Practice Test Questions
https://www.examcompass.com/comptia/security-plus-certification/free-security-plus-practice-tests#google_vignette

不只是工程師才要懂的 App 資訊安全：取得資安檢測合格證書血淚史（iT邦幫忙鐵人賽系列書）
https://news.pchome.com.tw/living/books/20220202/index-64375841669874292009.html

App防駭學，資安防護實戰課程全面提升安全觀念
https://www.ithome.com.tw/pr/161505

OSEP (Evasion Techniques and Breaching Defenses (PEN-300) 心得分享
https://hackmd.io/@henry-ko/HyQ56e8eF

OSEP (Evasion Techniques and Breaching Defenses (PEN-300)
http://github.com/In3x0rabl3/OSEP

OSCP（Offensive Security Certified Professional）
https://github.com/0x584A/oscp-notes/tree/master

ISACA Certified Information Systems Auditor® (CISA) 國際電腦稽核師認證準備歷程心得、申請流程分享- 2023年
https://reurl.cc/aVLoX9

Learn NIST Inside Out With 21 Hours of Training @ 86% OFF
https://thehackernews.com/2022/06/learn-nist-inside-out-with-21-hours-of.html

駭客與國家: 網路攻擊與地緣政治新常態
The hacker and the state: cyber attacks and the new normal of geopolitic
https://reurl.cc/D3nKKj

Practical Network Penetration Tester (PNPT) Certification Review
https://tmc222.medium.com/practical-network-penetration-tester-pnpt-certification-review-4280e4e164df

WUSON常用的基本詞彙
https://choson.lifenet.com.tw/?p=1958

證照仍是學習資安基本功的主要管道，有專家打造「資安證照地圖」
https://www.ithome.com.tw/news/156754

用證照證明自己實力之餘，更應將證照視為督促學習的最大動力
https://www.ithome.com.tw/news/156756

打破證照誤解與迷思，資安專家帶你釐清資安證照的意義
https://www.ithome.com.tw/news/156755

Accelerate Your Career with the Global Leader in Cyber Security Training
https://www.sans.org/mlp/promo-partnership-hacker-news/

【成大資安社社課】資安禁術 - 逆向工程地獄試煉
https://www.youtube.com/watch?v=4Yc3-9CjG6U

透過實務演練，教你建立實作標準的安全SOP流程
https://www.ithome.com.tw/pr/163514

6.近期資安活動及研討會
Jamf 資安體驗館 - CYBERSEC 2026 台灣資安大會 2026/5/5 - 2026/5/7
https://jamf.kktix.cc/events/cybersec2026-jamf

邁向現代化資安防禦：以零信任為核心的 macOS 全方位管理架構 2026/5/25
https://jamf.kktix.cc/events/mac-security-workshop-2026q2

Gemini實戰全攻略-打造你的AI工作流 2026/5/30
https://www.accupass.com/event/2602191339327923594810

行動優先時代：如何兼顧工作效率與企業資安 2026/6/5
https://jamf.kktix.cc/events/mobile-security-workshop-2026q2

CraftCon Taiwan 2026｜全台唯一 AI 資安技術研討會 2026/7/3
https://cycraft.kktix.cc/events/craftcon2026