Posts

Showing posts with the label computer security

Zonta Club Kathmandu Launches Cybersecurity Awareness Programs

Image
Cybersecurity Awareness Campaigns Address Digital Abuse in Nepal In a significant effort to combat digital abuse and raise awareness about cybersecurity, the Zonta Club Kathmandu launched a series of programs across different regions of Nepal. These initiatives were part of the global 16 Days of Activism Against Gender-Based Violence under the UNITE campaign. The events aimed to educate the public on the dangers of cybercrime and provide practical solutions for staying safe online. The campaigns were conducted in collaboration with several key stakeholders, including the Cyber Bureau of Nepal Police, women lawyers, and Chandragiri Municipality. Over 600 individuals, including children, took part in these activities, highlighting the widespread interest in the topic. Key Topics Covered in the Programmes The sessions focused on various aspects of cybersecurity, such as identifying common forms of cybercrime in Nepal, implementing safety practices, understanding available support mec...

Sophos XDR Sets New Benchmark in MITRE ATT&CK Enterprise 2025 Evaluation

Image
Sophos XDR Demonstrates Exceptional Detection Capabilities Sophos XDR has demonstrated remarkable performance in detecting adversary behaviors across two complex attack scenarios. The evaluation covered the Scattered Spider, tracked by Sophos X-Ops as GOLD HARVEST, a financially motivated cybercriminal collective, and Mustang Panda, tracked as BRONZE PRESIDENT, an espionage group linked to the People’s Republic of China (PRC). The Scattered Spider scenario involved activities across Windows, Linux, and AWS cloud environments, while the Mustang Panda scenario focused solely on Windows systems. This comprehensive approach allowed for a thorough assessment of Sophos XDR's capabilities. Key Achievements in the Evaluation Sophos achieved 100% detection coverage for all 90 sub-steps of adversary behaviors across these scenarios. This is a significant milestone, showcasing the platform's ability to identify and respond to threats effectively. Additionally, Sophos earned the highes...

PIPC to Levy 10% Fines for Data Breaches

Image
Strengthening Personal Data Protection: New Measures Introduced The Personal Information Protection Commission (PIPC) has unveiled a series of new measures aimed at enhancing the protection of personal data in South Korea. These initiatives include introducing a punitive surcharge special provision that could result in fines of up to 10% of a company's total sales for repeated or major violations of the Personal Information Protection Act. During a presidential work report held at the Government Complex Sejong Convention Center on the 12th, the commission announced its plan to strengthen sanctions, including this new measure. The goal is to shift the current personal information protection system from one that focuses primarily on post-sanction collection regulations to a more proactive approach. Punitive Surcharge Special Provision For repeated or major violations, the PIPC plans to establish a punitive surcharge special provision to ensure strong deterrence. If specific requ...

Government strengthens ISMS and ISMS-P certifications following data leaks

Image
Strengthening Post-Certification Management for Information Security Systems The government has taken significant steps to enhance the post-certification management and review criteria for two critical systems: the Information Security Management System (ISMS) and the Information Security and Personal Information Protection Management System (ISMS-P). This decision comes in response to multiple instances of personal information leaks at companies that had previously obtained these certifications, such as Coupang. The initiative aims to ensure that certified entities maintain high standards of data protection and security. Reform Plan and Certification Requirements The Personal Information Protection Commission (PIPC) and the Ministry of Science and ICT announced on the 6th that they held an interagency task force meeting to discuss improvements to the certification system. As part of the reform plan, the ISMS-P certification, which was previously voluntary, will now be mandatory fo...

Africa Needs Own Cybersecurity Intelligence, Says Tizel CEO at AfriTech 5.0

Image
The Need for a New Cybersecurity Paradigm in Africa At the recent Africa Tech Alliance Forum (AfriTech 5.0), one of the most compelling discussions centered on the urgent need for a new approach to cybersecurity in Africa. Happiness Obioha, Managing Director and Chief Executive Officer of Tizel Cybersecurity, presented a powerful argument for shifting from foreign-based solutions to homegrown cybersecurity intelligence tailored to the continent's unique digital landscape. Obioha’s speech, under the theme “Beyond Firewalls: The Case for Homegrown Cybersecurity Intelligence in Africa,” highlighted the limitations of relying on imported cybersecurity technologies that were never designed for Africa’s distinct challenges. She emphasized that the continent faces a complex array of threats, including unique threat actors, infrastructural constraints, cultural differences, and business practices that global platforms often fail to comprehend. She pointed out that traditional perimeter-...

South Korean Firms Overlook Security: 97% Lack Dedicated Teams

Image
A small tax law firm in Seoul, with just 15 employees, does not have a dedicated budget for cybersecurity. The firm relies on specialized programs connected through the cloud (virtual servers) for its tax-related work and shares files using Google Drive or Microsoft OneDrive. Its internal computers are managed with outdated antivirus software. The firm has never considered the possibility that malware could infiltrate all its computers via employee emails and subsequently breach the cloud. Representative A, who is 46 years old, stated, “I’ve never thought about hacking while doing business,” and added, “I wonder if a company like ours needs to do that.” As hackers around the world target South Korea, with over 60 million cases of personal information leakage this year alone, Korean companies are falling into a “three-nothing” state—no budget, no dedicated personnel, and no will to improve security. While the risk of secondary damages such as illegal payments and phishing scams due to...

South Korea's Cybersecurity Falls Behind Emerging Markets

Image
South Korea's Cybersecurity Industry Faces Challenges in Global Competition South Korea has made significant strides in various industries, including semiconductors, mobile phones, and content creation. However, the cybersecurity sector remains underdeveloped compared to global standards. A high-ranking executive from a domestic security company highlighted that while K-companies have achieved international recognition in other sectors, the cybersecurity industry still operates at an emerging market level. No local firms have managed to enter the global top 10, which is a major concern given the increasing sophistication of cyber threats. To address these challenges, the industry needs to expand its scale and invest more in research and development (R&D). The gap in revenue between South Korean companies and their global counterparts is stark. For instance, U.S. firm Palo Alto Networks reported annual revenue of $9.2 billion (approximately 13.5 trillion Korean won), while glo...

North Korean Hackers Wipe Devices, Spread KakaoTalk Malware

Image
Emerging Cyber Threats Linked to North Korean Hackers A recent cyberattack, attributed to North Korean hacker groups Kimsuky and APT37, has been uncovered, involving the deployment of malware that infected Android smartphones and PCs. The malware was designed to erase critical data such as photos, documents, and contacts from affected devices. This alarming development was revealed in a threat analysis report released by Genians Security Center, a cybersecurity firm, on the 10th. According to the report, the attackers are strongly suspected to be backed by North Korea. They exploited Google’s “My Device Hub” service, a feature intended to locate stolen or lost Android devices, to infect smartphones and tablets with malware. The hackers then used this access to forcibly reset the devices, deleting personal data without user authorization. This marks the first known case where hackers gained remote control via stolen Google accounts to track device locations and execute remote resets,...

Job Scams Exploit Dating Apps, Government Alerts Users

Image
Rise in Scams Through Secondhand Trading Platforms Recent reports have highlighted a growing concern regarding the misuse of personal information through job recruitment ads on secondhand trading platforms. This issue has prompted authorities to issue warnings and advise users to be more vigilant. According to the Korea Communications Commission (KCC) and the Korea Information and Communications Promotion Agency, there have been multiple instances where personal data was stolen via these platforms. The stolen information has been used for unauthorized sign-ups on dating apps, raising concerns about potential romance scams. How Scammers Operate Perpetrators often use recruitment ads that contain enticing phrases such as “packaging part-time work,” “short-term employment,” or “remote work.” These ads are designed to attract part-time job seekers. Once individuals click on these ads, they are directed to external websites where they are asked to register. During this process, scammer...

KPMG Shares Cybersecurity Knowledge with Jane Montessori Students

Image
KPMG Engages Junior High School Students in Cybersecurity Awareness A professional services firm, KPMG, has recently engaged junior high school students from Jane Montessori School (JMS) in Accra to educate them on essential cybersecurity awareness. This initiative, held in celebration of Global Cybersecurity Day 2025, is a key component of the company’s corporate social responsibility (CSR) program. The program aims to foster a digitally conscious and secure society. The educational session focused on critical topics relevant to the modern digital age, such as protecting personal identity and understanding how to safeguard one's digital footprint. In addition to the informative content, the team also shared KPMG-branded souvenirs with the students. Students were introduced to concepts related to secure login practices and password management. During a practical exercise, the team demonstrated the use of 'Password Monster' software, a tool that visually illustrates the ...

Exclusive: 80% of Private Universities Miss Hacking Training Deadline

Image
Rising Concerns Over Data Leaks in South Korean Universities Over the past five years, South Korean universities have faced a growing number of personal information leaks, with more than 2.5 million cases reported. These incidents have highlighted serious vulnerabilities in the cybersecurity measures of both public and private institutions. One of the most notable cases involved Ewha Womans University, which disclosed that personal data of over 160,000 individuals was compromised due to hacking attacks originating from Cambodia and Hong Kong. Similarly, Hongik University experienced six data breaches between 2022 and last year, all attributed to employee errors, resulting in the exposure of personal information for 13,750 individuals. Despite these alarming statistics, a significant portion of universities has failed to engage in critical cybersecurity training programs. According to data obtained by Representative Jin Sun-mi of the Democratic Party of Korea from the Ministry of Educ...

Government Systems Stuck in Redundancy Quagmire Like Kakao

Image
Government IT Systems Face Criticism After Fire at Daejeon Data Center A recent fire at the Daejeon National Information Resources Management Service’s computer room has sparked significant criticism over the government’s reliance on inadequate cloud redundancy for data storage. This event highlights a recurring issue that was previously seen during the ‘Kakao outage’ in October 2022, now impacting public administration systems. The affected computer room is part of the ‘G-Cloud Zone,’ an initiative by the National Information Resources Management Service to meet the IT needs of various administrative institutions. The disaster recovery (DR) system typically requires both server and cloud DR environments. However, reports indicate that while the server DR environment is in place, the cloud DR environment remains underdeveloped. This lack of comprehensive redundancy means that critical data is not being replicated across multiple locations, increasing vulnerability to disruptions. In...

AI reshapes cyberthreats and defences, survey reveals

Image
Rising AI Threats and Strategic Shifts in Cybersecurity A recent survey by Fortinet has revealed that 58% of organisations in Thailand faced cyberthreats powered by artificial intelligence (AI) in the past year. This figure highlights the growing sophistication of cyberattacks, as attackers leverage AI to create more adaptive and stealthier threats. Additionally, 90% of organisations are already using AI within their security environments, indicating a significant shift in how cybersecurity is approached. The findings come from the 2025 IDC survey, which gathered insights from 550 IT and security leaders across 11 Asia-Pacific markets, including Thailand. The survey was conducted between February and April 2025, with 88% of respondents representing organisations with over 250 employees who were directly involved in cybersecurity decision-making. Supakorn Kungpisdan, country manager for Fortinet Thailand and Laos, noted that CISOs in Thailand are entering a more advanced phase of cyb...

Zero-Click Hacking Sparks Cybersecurity Alertness

Image
Cyber threats have become a growing concern across various sectors, including telecommunications, finance, and retail. As personal data breaches continue to rise, individuals are increasingly vulnerable to phishing, hacking, and other cyberattacks. The emergence of "zero-click" hacking—where systems are infiltrated through software vulnerabilities without user interaction—has made these threats even more complex. With the widespread use of smart devices such as smartphones, smart TVs, and AI speakers, concerns about cybersecurity are at an all-time high. For individuals, countering these attacks on their own is nearly impossible. Even government agencies acknowledge that no program can completely prevent hacking. Experts stress that following basic security practices is the most effective way to protect oneself. Based on guidelines from official sources and expert advice, here are seven essential cybersecurity rules to safeguard personal information and assets. The Most ...

NCSOC Launches Cyber Defense Hub

Image
Launch of National Cyber Protection Strategy and Operations Centre Sri Lanka has taken a significant step towards securing its digital future with the launch of the National Cyber Protection Strategy (2025-2029) and the inauguration of the National Cyber Security Operations Centre (NCSOC). This initiative marks a pivotal moment in the country's efforts to build a secure, reliable, and inclusive digital ecosystem. The strategy was unveiled during a ceremony held at the Bandaranaike Memorial International Conference Hall (BMICH) in Colombo. The event was attended by key stakeholders, including government officials, digital economy experts, and representatives from various sectors. The President emphasized the importance of digitalization in driving economic and social progress, highlighting that transparency and efficiency across all sectors are essential for sustainable development. Key Objectives of the Strategy The National Cyber Protection Strategy is designed to establish a ...

Korea Confronts Quantum 'Harvest Now, Decrypt Later' Risk

Image
The Growing Threat of Quantum Cybersecurity Risks At the Quantum Campus of Kookmin University in Seongbuk-gu, Seoul, on the 3rd of last month, a significant event took place. The ‘Quantum Security Innovation Meeting,’ organized by the Ministry of Science and ICT, brought together key players from the telecommunications sector and quantum-related industries. One of the presenters, Jo Ji-hoon, an executive at Samsung SDS, highlighted the growing concern around a specific type of cyber threat known as Harvest Now, Decrypt Later (HNDL). According to Jo, this method involves stealing encrypted data now with the intention of decrypting it once quantum computing technology advances. He emphasized that this poses a serious risk to national security and stressed the urgent need for preparation, particularly within the public sector, which holds vast amounts of long-term stored data. Understanding the HNDL Threat The HNDL strategy, sometimes referred to as “Steal First, Decrypt Later,” is bec...

NITDA and Kaspersky Forge Strategic Partnership to Boost Nigeria's Cybersecurity

Image
Strengthening Nigeria’s Cybersecurity Through Strategic Collaboration Nigeria is taking a significant step forward in its quest to enhance digital security by forming a strategic partnership with Kaspersky, a global leader in cybersecurity. This collaboration was formalized through a Memorandum of Understanding (MoU) signed during the GTIEX Nigeria event in Lagos. The agreement marks a pivotal moment in the country’s digital transformation and reflects a strong commitment to securing critical infrastructure. The MoU aligns with NITDA’s Strategic Roadmap and Action Plan (SRAP 2.0), particularly under its fifth pillar focused on “Strengthening Cybersecurity and Enhancing Digital Trust.” It also supports the Renewed Hope Agenda, which emphasizes national security for peace and prosperity. This partnership underscores Nigeria’s growing recognition of the importance of cybersecurity in safeguarding its digital future. Human Capacity as the Foundation of Cybersecurity The Director Genera...

Firm Reaffirms Commitment to Protect Nigeria's Digital Future

Image
Commitment to Cybersecurity in Nigeria Posture Cyber Security Technologies, a prominent Nigerian firm specializing in cybersecurity solutions, has reaffirmed its dedication to enhancing the resilience of both national and organizational systems against the escalating threat of cybercrime. The company plays a crucial role in safeguarding critical infrastructure and digital assets, ensuring that businesses and government institutions remain secure in an increasingly digital world. The company is led by its Chief Security Officer, Emmanuel Enamejewa, who has been instrumental in shaping the organization's mission and strategic direction. Based in Ikota, Lekki, Lagos, Posture Cyber Security Technologies provides a comprehensive range of services designed to address the complex challenges of modern cybersecurity. Key Services and Expertise Posture Cyber Security Technologies offers a wide array of services, including threat prevention, detection, application security, consultancy, d...

Fortinet Identifies Cybersecurity Trends

Image
Emerging Cybersecurity Trends in Thailand Supakorn Kungpisdan, the newly appointed country manager of Fortinet Thailand, highlights several key trends shaping the cybersecurity landscape in the region. Unified security platforms, agentic AI-powered security systems, and post-quantum cryptography are currently at the forefront of innovation. These technologies are being embraced by businesses looking to strengthen their digital defenses against increasingly sophisticated threats. The Thai cybersecurity market is valued at approximately US$450 million and is expected to see double-digit growth this year. Mr. Supakorn, who took on his new role on July 16, brings with him 24 years of experience in the IT and cybersecurity sectors. His previous position as managing director of Cyber Elite Co Ltd, under the Benchachinda Group, has given him a deep understanding of the industry's challenges and opportunities. Mr. Supakorn emphasizes that his leadership approach remains consistent acros...

How Hackers Break Into CBT Center Servers

Image
The Rise of Exam Malpractice in Nigeria's Unified Tertiary Matriculation Examination The 2025 Unified Tertiary Matriculation Examination (UTME) has become a focal point for concerns over widespread malpractice, particularly within Computer-Based Test (CBT) centres accredited by the Joint Admissions and Matriculation Board (JAMB). Reports suggest that some operators of these CBT centres have been implicated in large-scale fraudulent activities, undermining the integrity of the examination process. Investigations revealed that technical information was shared with individuals who then hacked into servers to manipulate the exam. This led to significant disruptions during the UTME, resulting in a high number of candidates scoring below the passing threshold. The incident sparked public outrage, with JAMB’s Registrar, Prof. Is-haq Oloyede, expressing deep distress over the technical errors that affected scores. In response to the growing concerns, authorities arrested 20 suspects in ...