Deepfakes in Cybercrime: Phishing, Biometric Fraud and Dark Web Services
VMware's Rick McElroy on how criminals use deepfakes: voice-cloned phishing, fooling biometric checks, and dark web tutorials for evading security controls.
Section
Expert Opinions page 2
Why Hardware, Firmware and Software Supply Chains Put Critical Infrastructure at Risk
Keysight's Gail Ow traces supply chain threats from hacked firmware to NOBELIUM and Colonial Pipeline, and argues bills of materials are the near-term fix.
The Five Most Common Software Security Activities in BSIMM12
Synopsys' Taylor Armerding walks through the five activities most widely adopted by the 128 organisations in BSIMM12, from governance to penetration testing.
Why APIs Could Be Your Weakest Security Link, and How to Protect Them
Synopsys experts set out how to secure APIs: keep an inventory, check identity at every step, validate input and schema, encrypt, configure and monitor.
A New Era of Cyber Illusions as Attackers Manipulate Time and Data Integrity
VMware's Rick McElroy warns that attackers now tamper with timestamps and data integrity, and sets out four tactics CISOs can use to respond.
The Case for a Cryptographic Centre of Excellence in Every Enterprise
Entrust's Kieran Hernon argues that a cryptographic centre of excellence helps firms raise low encryption adoption in Southeast Asia and adapt to new threats.
.webp)
Why Hybrid Work Demands a Rethink of Vulnerability and Patch Management
ManageEngine's Joyal Bennison argues that separate scanning and patching tools slow fixes for remote endpoints, and makes the case for one integrated process.
Passwords and Missed Patches: The Two Weak Points Behind Most Data Breaches
Ivanti's Michael Waring on why reused passwords and slow patching still drive data breaches, and how contextual access and patch automation support zero trust.
Proper Data Management Is a Business Driver as Well as a Responsibility
AdNovum Singapore's David Chan on why data governance earns customer trust and an edge, and the practices he recommends, from discovery to 3-2-1 backups.
Threats Hiding Inside the Network, and How Inline Security Exposes Them
Keysight's Barb Rigel on why breaches go unseen for 206 days, how alert fatigue helps attackers, and why she backs inline security with packet brokers.
What It Takes to Secure the Coming Flood of IoT Devices
Synopsys' Ian Hall sets out four IoT security challenges, from scale and long device lifespans to 5G, and the attack surfaces that testing has to cover.
How a Single Exposed RDP Server Can Seed a Botnet, Darktrace Explains
Darktrace's Max Heinemeyer describes a brute-forced RDP server at an APAC tech firm and how botnet builder kits and DDoS-for-hire made such attacks easy.