Last month, I traveled to four countries in four days to cover Jensen Huang at the height of his power. He was the man at the center of the AI boom and seemed to be on top of the world. Then everything changed. Watch our new episode: The Rise and Reckoning of the Nvidia CEO
https://t.co/MXL7KZ6OhZ
Jensen Huang matters to Nvidia because he can take technologies his engineers believe are possible and turn them into products the whole company commits resources to, takes risks on, and has to deliver. That's why the supply chain gets such strong order visibility and is willing to keep up with aggressive spec upgrades. It also forces competitors to follow, which drives technology upgrades and supply chain investment across the entire AI industry.
Between the two, deciding on aggressive spec upgrades and making them happen is the harder part, compared with giving the supply chain order visibility. Huang doesn't need to be the person at Nvidia who knows the most about new technologies like HVDC, CPO/NPO, or CCL/PTFE. His value is that he weighs strategy, organization, technology, and supply chain all at once, then makes the call quickly and puts resources behind it.
Based on what's public so far, it looks hard for Huang to come out of this unscathed. If so, the practical move may be to gradually reduce Nvidia's reliance on Huang's personal decision-making while preparing a succession plan. Along the way, two things are worth watching to gauge where AI technology and investment are heading: whether Nvidia can keep developing new products and technologies as efficiently as before, and how competitors respond. Supply chain research will be an important basis for that judgment.
🚨 UNC6783 Claims 102GB Leak of Taiwan's National Institute of Cyber Security Documents
A threat actor operating under the alias UNC6783 has claimed responsibility for the theft and leak of 102GB of internal documents from the National Institute of Cyber Security (NICS) in Taiwan. According to a post on an underground forum, the actor alleges that the data covers the period from 2024 to 2025 and includes sensitive operational archives. The post includes a sample document titled "Cybersecurity Joint Defense Monitoring Monthly Report," which appears to be an internal intelligence bulletin distributed to government agencies.
The leaked sample document reveals detailed insights into Taiwan's government cybersecurity posture. It outlines threat trends, source IP analysis, and specific vulnerability alerts shared with public sector entities. Key details exposed in the document include:
* Analysis of threat sources by country and ISP within Taiwan.
* Specific vulnerability advisories for Fortinet FortiOS/FortiProxy (CVE-2024-55591) and Ivanti products.
* Indicators of Compromise (IoCs) for botnet attacks, phishing campaigns, and social engineering attempts targeting government agencies.
* Cross-analysis of security threats across different government business categories (e.g., Finance, Defense, Education).
* Internal blacklists and relay station threat statuses used by NICS for joint defense monitoring.
The National Institute of Cyber Security is a critical entity under Taiwan’s Ministry of Digital Development, responsible for coordinating cybersecurity efforts across all government agencies. The exposure of these monthly monitoring reports could potentially allow adversaries to map out defensive gaps, identify commonly exploited vulnerabilities in the Taiwanese government infrastructure, and understand the specific threat landscape being monitored by national defenders. If authentic, this leak compromises the integrity of the "TLP: GREEN" classified information intended solely for authorized government personnel and their contracted security vendors.
UNC6783 is a ransomware group that has been active in recent years, often targeting organizations in Asia and Europe. While the group has previously claimed attacks on various sectors, this alleged breach targets a high-value national security infrastructure provider. At the time of reporting, the alleged breach has not been independently verified by the National Institute of Cyber Security or other security researchers.