Taiwan notes 5 major cyber risks

Taiwan's cybersecurity authorities have identified five main areas of concern after hundreds of reported cybersecurity incidents involving government agencies in 2025. According to Taiwan's Ministry of Digital Affairs, the country recorded 726 cybersecurity incidents this year, highlighting Taiwan's ongoing cybersecurity challenges linked to ransomware, counterfeit software, supply chain vulnerabilities, and social engineering attacks.

See also: Silver Fox targets Russia and India with ABCDoor malware

The Cybersecurity Administration said the total number of reported incidents decreased slightly compared to 2024, with 29 fewer incidents recorded year-over-year. However, officials warned that attack methods continue to expose weaknesses in government systems and digital infrastructure.

According to reports by CNA and as reported by UDN, most cybersecurity incidents were categorized as low-level threats in Taiwan's classification system. However, authorities stressed that even small breaches can create broader operational and national security concerns if left unresolved.

Under Taiwan's cybersecurity framework, incidents are divided into four levels based on their impact on system confidentiality, integrity, and availability. Level 1 incidents accounted for 87.33% of all reports in 2025, while Level 2 incidents accounted for 9.78%. Level 3 incidents made up 2.89% of the total. No Level 4 incidents — the most serious category — were reported during the year.

Unauthorized access remained the most common issue among reported cybersecurity incidents, accounting for 68.6% of all cases. Equipment-related failures accounted for 15.43% of incidents, while denial-of-service attacks accounted for 4.96%. Website attacks made up another 2.48% of reported cases.

After reviewing cyber threat patterns and incident reports from government agencies, Taiwan's Cybersecurity Administration has identified five major Taiwanese cyber risk trends that officials believe require immediate attention.

See also: United Kingdom: Chinese hackers use proxy networks to avoid detection

One of the biggest cybersecurity risks highlighted by the administration involved fake messaging software distributed through unofficial websites. According to UDN, some users accidentally downloaded fake messaging apps after replacing old devices or setting up new computers.

Authorities said those downloads allowed attackers to install backdoor malware capable of compromising systems and sensitive information. The administration urged government agencies to implement stricter procedures for system modifications and software installations.

Officials have recommended that all software, hardware and application installations must receive prior approval before being used within service systems. The administration warned that unofficial downloads continue to create significant cyber risk exposure for Taiwan's public sector networks.

The second major concern focused on ransomware groups using custom software drivers to infiltrate systems and evade security detection tools. Authorities noted that attackers are becoming more sophisticated in bypassing conventional endpoint security measures.

To reduce the likelihood of future cybersecurity incidents, the administration advised agencies to regularly scan websites for vulnerabilities, implement timely fixes, deploy web application firewalls, and ensure that endpoint protection software remains up to date.

See also: US: 3 men charged with exporting AI technology to China

The ministry stressed that outdated security tools and delayed patch management continue to increase Taiwan's cyber risk to both government and critical infrastructure networks.