What Phishing Is and How Phishers Trick Their Victims
Phishing uses fake emails, websites, calls and texts to extract personal data. Common lures, how spear phishing differs, and what a successful attack costs.
Archive
Latest news, page 9
Six Checks to Find and Fix the Misconfigurations Quietly Weakening Your Network
Keysight's Scott Register cites the Verizon DBiR on rising error-driven breaches and lists six internal checks, from SSL decryption to URL filtering.
Singapore Weighs Data Portability and Breach Notification Updates to Its Privacy Law
Singapore's PDPC proposed adding data portability and mandatory breach notification to the PDPA, a move Malwarebytes Labs links to seeking EU GDPR adequacy.
Alyssa Herrera, 16-Year-Old Bug Bounty Hunter, on SSRF Bugs and Working With Security Teams
Alyssa Herrera, a 16-year-old full-time bug bounty hunter in California, talks about teaching herself, hacking the US DoD and what makes a good bounty programme.
Why Business Leaders Need to Make Cybersecurity a First Priority
ManageEngine's Mohamed Jafriin N H argues that real-time log analysis, user tracking and automated response are how companies catch breaches early.
Fraud Remains the Leading Cause of Cybersecurity Incidents in Malaysia
MyCERT logged 10,772 incidents in Malaysia in 2019, with fraud making up 7,724 cases, close to 70% of the total, as phishing and email compromise keep rising.
How Xiamen University Malaysia Built a Fast, Green and Secure Campus Network
Xiamen University Malaysia's Sepang campus runs on a Huawei network with Wi-Fi 6, programmable switches and a modular data centre that halved deployment time.
Airome Technologies and Group-IB Partner to Fight Digital Banking Fraud
Airome Technologies is combining its PayConfirm e-signature with Group-IB's Secure Bank anti-fraud system to protect remote banking in Singapore and the region.
ManageEngine Launches PAM360 for Enterprise Privileged Access Security
Zoho's ManageEngine has launched PAM360, a privileged access security product with just-in-time elevation, session monitoring and user behaviour analytics.
How AOPG Staff Fared in a Simulated Phishing Test
AOPG ran Barracuda PhishLine against its own staff with personalised lures. Seven of 19 employees clicked, and the exercise showed why one click matters.
How Fileless Intrusions Work: The Anatomy of a Stealth Attack
Fileless intrusions run shellcode in memory, steal credentials, escalate privileges and stay hidden from antivirus. How each stage of the attack works.
CrowdStrike's Shawn Henry on Speed, Nation-State Actors and the 1-10-60 Rule in Asia Pacific
CrowdStrike Services president Shawn Henry discusses Asia Pacific threats, nation-state intrusions, big game hunting ransomware and the 1-10-60 response rule.
