CHT Security

Penetration testing simulates real-world attacks on on-premises, cloud, or hybrid systems to identify vulnerabilities, using automated tools and expert analysis to deliver assessment reports, testing logs, and remediation advice.

The security health check service, rated A+ by Taiwan’s Executive Yuan, covers network, endpoint, configuration, and database security across eight assessment areas, providing risk explanations and improvement recommendations.

Phishing emails are a common attack vector, often used to compromise employee devices and infiltrate corporate networks to steal sensitive data.

The service scans code for vulnerabilities in on-premises, cloud, or hybrid environments, identifies risks, and guides clients in fixing issues to improve system security and reduce development costs.

Researchers discovered PHP use-after-free vulnerabilities (CVE-2026-109618 and CVE-2026-109619), allowing attackers to execute arbitrary code on servers via crafted multipart/form-data HTTP requests without authentication. Proof-of-concept exploits are already circulating online.

CHT Security reported third-quarter 2026 revenue of NT$17.44 billion (year-over-year growth of 19%) and net profit of NT$3.56 billion (year-over-year growth of 12%).

CHT Security’s August 2026 revenue reached NT$1.47 billion (year-over-year growth of 3%), with cumulative eight-month revenue of NT$15.39 billion (year-over-year growth of 17%). Growth is driven by red team exercises, penetration testing, and rising demand for SOC/MDR services.

CHT Security will showcase AI Archway, HorusEyes, SecuTex ED, and SecuTex NP at GovWare 2026 in Singapore, demonstrating AI security governance, external attack surface management, endpoint security, and network threat detection solutions.

CHT Security holds multiple international certifications, including ISO 27001 (information security), ISO 27701 (privacy protection), and ISO 20000 (IT service management). Its Digital Forensics and Security Testing Center also has ISO 17025 and IEC 62443 CBTL lab certifications, ensuring compliance with global standards for high-quality security services.

The company implements an ISO 14001 environmental management system to identify environmental risks, comply with regulations, reduce impact, and promote resource efficiency and continuous improvement.

CHT Security is the project lead for research initiatives in information technology, wireless technology, networks, and multimedia at Chunghwa Telecom’s Telecommunication Research Institute.

PHP contains critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) requiring immediate action.