ASEAN | CSO Online

Latest from today

AT&T confirms arrest in data breach of more than 110 million customers

This is apparently the first cybersecurity incident where the Justice Department initially allowed an enterprise to not disclose

By Evan Schuman

12 Jul 20246 mins

Data BreachCyberattacksPrivacy

Mobile surveillance software firm mSpy suffers data breach

12 Jul 20244 mins

Data BreachPrivacy

Known SSH-Snake bites more victims with multiple OSS exploitation

By Shweta Sharma

12 Jul 20243 mins

MalwareOpen Source

Top 10 open source software security risks — and how to mitigate them

By Chris Hughes

12 Jul 202411 mins

Open SourceRisk Management

What is the CIA triad? A principled framework for defining infosec policies

By Josh Fruhlinger

12 Jul 202411 mins

Data and Information SecuritySecurity

Cisco Talos analyzes attack chains, network ransomware tactics

By Michael Cooney

11 Jul 20241 min

RansomwareNetwork Security

Ransomware attackers exploit year-old backup vulnerability

11 Jul 20244 mins

RansomwareCyberattacks

Japan aerospace agency provides details of October data breach

By Evan Schuman

11 Jul 20244 mins

Data BreachRansomwareMalware

Hackers steal data of 200k Lulu customers in an alleged breach

By Shweta Sharma

11 Jul 20243 mins

More security news

Python GitHub token leak shows binary files can burn developers too

Scrubbing tokens from source code is not enough, as shown by the publishing of a Python Software Foundation access token with administrator privileges to a container image on Docker Hub.

By Lucian Constantin

11 Jul 2024 5 mins

DevSecOpsApplication SecuritySoftware Development

Evolve data breach impacted upward of 7.64 million consumers

Ransomware attack saw LockBit group access and download critical customer information.

10 Jul 2024 3 mins

BankingData BreachRansomware

FBI disrupts 1,000 Russian bots spreading disinformation on X

The bot farm was built by a Russian state-sponsored media to spread misinformation in and about a number of countries.

By Shweta Sharma

10 Jul 2024 4 mins

AuthenticationTechnology Industry

MD5 attack puts RADIUS networks everywhere at risk

A design flaw in the decades-old RADIUS authentication protocol allows attackers to take over network devices from a man-in-the-middle position by exploiting MD5 hash collisions.

By Lucian Constantin

09 Jul 2024 7 mins

CyberattacksNetwork Security

Microsoft mandates Chinese staff to use iPhones, not Android

The move is not about Android security as such, but about the unavailability of the Microsoft Authenticator app in Chinese app stores.

09 Jul 2024 3 mins

Multi-factor AuthenticationMobile Security

China’s APT40 group can exploit vulnerabilities within hours of public release

The group — also known as Kryptonite Panda, Gingham Typhoon, Leviathan, and Bronze Mohawk — is believed to be working for China’s Ministry of State Security.

09 Jul 2024 4 mins

Advanced Persistent ThreatsHacker GroupsVulnerabilities

OpenAI failed to report a major data breach in 2023

A hacker infiltrated OpenAI’s internal messaging system, gaining access to employee discussions regarding the company’s latest AI advancements, according to a New York Times report.

08 Jul 2024 4 mins

Data BreachTechnology Industry

New Intel CPU side-channel attack Indirector can leak sensitive data

The Indirector attack discovered by University of California San Diego researchers focuses on the indirect branch predictor of a CPU.

By Lucian Constantin

05 Jul 2024 5 mins

Advanced Persistent ThreatsThreat and Vulnerability ManagementVulnerabilities

Over 35,000 Ether subscribers targeted in a campaign from crypto draining

Users were sent phishing emails linking to a website revealed to be a crypto drainer.

By Shweta Sharma

05 Jul 2024 3 mins

Europol disrupts about 600 abusive Cobalt Strike servers

The coordinated operation took down 593 IP addresses, which were flagged for abuse of the legitimate pen-testing software.

By Shweta Sharma

04 Jul 2024 3 mins

HackingPenetration Testing

Passkeys aren’t attack-proof, not until properly implemented

Almost all software and IT service authentications with passkey implementation are open to AitM attacks as they provide less secure backup options.

By Shweta Sharma

03 Jul 2024 4 mins

Multi-factor Authentication

Cisco patches actively exploited zero-day flaw in Nexus switches

The moderate-severity vulnerability has been observed being exploited in the wild by Chinese APT Velvet Ant.

By Lucian Constantin

02 Jul 2024 4 mins

Threat and Vulnerability ManagementZero-day vulnerabilityNetwork Security

Explore a topic

Popular topics

Cybercrime

Logic bombs explained: Definition, examples, prevention

By Josh Fruhlinger

05 Jul 2024 12 mins

MalwareCybercrimeSecurity

Why identity security Is essential to cybersecurity strategy

By Claudio Neiva, CyberArk’s Field Technology Director (LATAM), PAM and Identity Security

24 Jun 2024 6 mins

Understanding APIs and how attackers abuse them to steal data

By John Walsh, senior product marketing manager at CyberArk

24 Jun 2024 5 mins

Careers

More than a CISO: the rise of the dual-titled IT leader

By Rosalyn Page

10 Jul 2024 8 mins

CSO and CISOCareersIT Leadership

CRISC certification: Exam, requirements, training, potential salary

By Josh Fruhlinger

09 Jul 2024 8 mins

CertificationsIT SkillsIT Training

Top 12 cloud security certifications

28 Jun 2024 14 mins

CertificationsIT SkillsCloud Security

IT Leadership

If you’re a CISO without D&O insurance, you may need to fight for it

By Linda Rosencrance

08 Jul 2024 7 mins

CSO and CISOInsurance IndustryIT Leadership

Tabletop exercise scenarios: 10 tips, 6 examples

By Josh Fruhlinger and Sarah D. Scalet

04 Jul 2024 16 mins

RansomwarePhishingDisaster Recovery

What is digital executive protection and how does it work?

By Deb Radcliff

26 Jun 2024 8 mins

CSO and CISOCyberattacksEmployee Protection

Upcoming Events

CSO30 Awards ASEAN

14 Nov 2024Singapore

View all events

In depth

Who owns your data? SaaS contract security, privacy red flags

Companies looking to use SaaS solutions should involve the security team in the procurement process and pay attention to contract language.

By Andrada Fiscutean

27 Mar 202410 mins

Data and Information Security

Data center

Show me more

6 tips for consolidating your IT security tool set

11 Jul 202410 mins

IT StrategySecurity PracticesSecurity Software

Software supply chain still dangerous despite a slew of efforts

By Cynthia Brumfield

10 Jul 202410 mins

Cloud SecuritySecurity PracticesSupply Chain

Identity security: The keystone of trust

By Claudio Neiva, CyberArk’s Field Technology Director (LATAM), PAM and Identity Security

09 Jul 20248 mins

CSO Executive Session India with Charanjit Bhatia, Head of Cybersecurity, COE, Bata Brands

08 Jul 202418 mins

CSO Executive Sessions: Data protection in Malaysia

02 Jul 202415 mins

CSO Executive Session India with Mrinal Kanti Roy, CISO, Cairn Oil and Gas

01 Jul 202416 mins

Cybersecurity Insights for Tech Leaders: Addressing Dynamic Threats and AI Risks with Resilience

10 Jul 202424 mins

CSO Executive Session India with Charanjit Bhatia, Head of Cybersecurity, COE, Bata Brands

08 Jul 202418 mins

CSO Executive Session India with Mrinal Kanti Roy, CISO, Cairn Oil and Gas

01 Jul 202416 mins