Top story
Trackers saw billions in crypto leave Binance's hot wallets on 29 October. Binance calls it a security incident, has paused withdrawals on several networks and says $2.54 billion is frozen.
Read the story →A Singapore petrochemical firm paid US$12.8 million to a scammer's account in Cambodia after a fake change of bank details. Police, OCBC and Cambodian police got it all back.
Apple confirms curl, git and python3 on macOS still accept the compromised eMudhra certificates. What Apple, Microsoft, Cisco and Google tell admins to do.
CyberArk research finds 95% of Asia Pacific and Japan organisations suffered two or more identity breaches, with machine identities the least protected.
Group-IB flagged 500+ phishing IPs and 1,900+ malware IPs for INTERPOL's Operation Synergia, which led to 31 arrests and hundreds of C2 server takedowns.
Every connectivity piece of Cloudflare One, its single-vendor SASE platform, is now generally available, including the Magic WAN Connector branch appliance.
A Cloudflare survey of more than 4,000 security leaders in 14 Asia Pacific markets finds 78% hit by incidents and only 38% highly prepared.
Tim Liu of Hillstone Networks names the shifts he expects in 2024: AI threats, cloud gaps, a wider attack surface, human error and digital trust.
Jumio's Frederic Ho argues that as Malaysian banks drop SMS OTPs, biometrics alone will not stop fraud without liveness checks and risk-based orchestration.
Norman Willox and Tom Patterson argue that steal-now-decrypt-later attacks make quantum-safe encryption urgent, and set out a four-step plan to prepare.
Keysight's Keith Bromley explains how a visibility architecture of taps and a network packet broker lets companies get more years out of existing security tools.
Cybereason's Eric Nagel and PLDT and Smart CISO Angel Redoble explain the Defend Forward strategy, the Cyber Defenders Council and why people still decide the fight.
ManageEngine's Subhalakshmi Ganapathy explains why Southeast Asian firms are exposed to breaches and leaks, and what adaptive security requires.
Veritas's Gary Sievers on rising ransomware in Asia Pacific, the security gap left by COVID-era transformation, and a protect, detect and recover framework.
Rackspace Technology's Sandeep Bhargava explains why ticking compliance boxes falls short and why security belongs in a risk-based framework instead.
RMM tools are known for automating IT chores for managed service providers. N-able argues its N-sight platform also closes security gaps for their clients.
A Tenable survey of 1,500 security professionals shows how firms entering the metaverse rate the risk of deepfake avatars, eavesdropping and phishing.
Synthetic identity fraud blends real and invented personal details into a new person. Why banks in Southeast Asia struggle to spot it and what detection relies on.
Ransomware hit several Singapore organisations in 2021. Cohesity's Threat Defense, DataGovern and Project Fort Knox aim to put prevention first.
A use-after-free in the Linux kernel's IPv4 TCP handshake, scored 9.8 in the CVE record. Fixed upstream since 15 October; here is what each distribution has shipped.
CISA added a CVSS 10 GitLab code-execution bug and a Cisco ASA/FTD SSL VPN crash bug to its exploited list on 29 October. Fixed versions and mitigations.
Rhysida listed MISC Group on its leak site on 26 October, claiming 28.4 GB including crew personal data and shipboard credentials. MISC has not commented.
Scripts, cut orders and distribution deals filed with India's censor board were downloadable from the Internet Archive until 12 October. The CBFC has filed a cybercrime complaint and notified CERT-In.
.webp)
.webp)
