Posts

Showing posts with the label information security

Sophos XDR Sets New Benchmark in MITRE ATT&CK Enterprise 2025 Evaluation

Image
Sophos XDR Demonstrates Exceptional Detection Capabilities Sophos XDR has demonstrated remarkable performance in detecting adversary behaviors across two complex attack scenarios. The evaluation covered the Scattered Spider, tracked by Sophos X-Ops as GOLD HARVEST, a financially motivated cybercriminal collective, and Mustang Panda, tracked as BRONZE PRESIDENT, an espionage group linked to the People’s Republic of China (PRC). The Scattered Spider scenario involved activities across Windows, Linux, and AWS cloud environments, while the Mustang Panda scenario focused solely on Windows systems. This comprehensive approach allowed for a thorough assessment of Sophos XDR's capabilities. Key Achievements in the Evaluation Sophos achieved 100% detection coverage for all 90 sub-steps of adversary behaviors across these scenarios. This is a significant milestone, showcasing the platform's ability to identify and respond to threats effectively. Additionally, Sophos earned the highes...

Hammouchi Launches Security Institute in Ifrane to Elevate Morocco's Training Standards

Image
Opening of the Higher Institute of Security Sciences Abdellatif Hammouchi, the Director General of National Security and Territorial Surveillance, officially opened the Higher Institute of Security Sciences in Ifrane on this Friday. This new establishment is set to elevate and refine Morocco's security training framework. The inauguration was graced by the presence of both international and national partners active in academic and police training, alongside numerous presidents of national universities and academic institutes. According to a statement from the DGSN, the Higher Institute of Security Sciences is a key component of the DGSN's strategic vision to advance police training programs, aligning them with emerging security challenges and issues. This institute bolsters Morocco's security training network, complementing the Royal Police Institute of Kenitra and various regional police academies. Objectives of the Institute The primary objective is to cultivate secu...

Government strengthens ISMS and ISMS-P certifications following data leaks

Image
Strengthening Post-Certification Management for Information Security Systems The government has taken significant steps to enhance the post-certification management and review criteria for two critical systems: the Information Security Management System (ISMS) and the Information Security and Personal Information Protection Management System (ISMS-P). This decision comes in response to multiple instances of personal information leaks at companies that had previously obtained these certifications, such as Coupang. The initiative aims to ensure that certified entities maintain high standards of data protection and security. Reform Plan and Certification Requirements The Personal Information Protection Commission (PIPC) and the Ministry of Science and ICT announced on the 6th that they held an interagency task force meeting to discuss improvements to the certification system. As part of the reform plan, the ISMS-P certification, which was previously voluntary, will now be mandatory fo...

Africa Needs Own Cybersecurity Intelligence, Says Tizel CEO at AfriTech 5.0

Image
The Need for a New Cybersecurity Paradigm in Africa At the recent Africa Tech Alliance Forum (AfriTech 5.0), one of the most compelling discussions centered on the urgent need for a new approach to cybersecurity in Africa. Happiness Obioha, Managing Director and Chief Executive Officer of Tizel Cybersecurity, presented a powerful argument for shifting from foreign-based solutions to homegrown cybersecurity intelligence tailored to the continent's unique digital landscape. Obioha’s speech, under the theme “Beyond Firewalls: The Case for Homegrown Cybersecurity Intelligence in Africa,” highlighted the limitations of relying on imported cybersecurity technologies that were never designed for Africa’s distinct challenges. She emphasized that the continent faces a complex array of threats, including unique threat actors, infrastructural constraints, cultural differences, and business practices that global platforms often fail to comprehend. She pointed out that traditional perimeter-...

South Korean Firms Overlook Security: 97% Lack Dedicated Teams

Image
A small tax law firm in Seoul, with just 15 employees, does not have a dedicated budget for cybersecurity. The firm relies on specialized programs connected through the cloud (virtual servers) for its tax-related work and shares files using Google Drive or Microsoft OneDrive. Its internal computers are managed with outdated antivirus software. The firm has never considered the possibility that malware could infiltrate all its computers via employee emails and subsequently breach the cloud. Representative A, who is 46 years old, stated, “I’ve never thought about hacking while doing business,” and added, “I wonder if a company like ours needs to do that.” As hackers around the world target South Korea, with over 60 million cases of personal information leakage this year alone, Korean companies are falling into a “three-nothing” state—no budget, no dedicated personnel, and no will to improve security. While the risk of secondary damages such as illegal payments and phishing scams due to...

South Korea's Cybersecurity Falls Behind Emerging Markets

Image
South Korea's Cybersecurity Industry Faces Challenges in Global Competition South Korea has made significant strides in various industries, including semiconductors, mobile phones, and content creation. However, the cybersecurity sector remains underdeveloped compared to global standards. A high-ranking executive from a domestic security company highlighted that while K-companies have achieved international recognition in other sectors, the cybersecurity industry still operates at an emerging market level. No local firms have managed to enter the global top 10, which is a major concern given the increasing sophistication of cyber threats. To address these challenges, the industry needs to expand its scale and invest more in research and development (R&D). The gap in revenue between South Korean companies and their global counterparts is stark. For instance, U.S. firm Palo Alto Networks reported annual revenue of $9.2 billion (approximately 13.5 trillion Korean won), while glo...

KPMG Shares Cybersecurity Knowledge with Jane Montessori Students

Image
KPMG Engages Junior High School Students in Cybersecurity Awareness A professional services firm, KPMG, has recently engaged junior high school students from Jane Montessori School (JMS) in Accra to educate them on essential cybersecurity awareness. This initiative, held in celebration of Global Cybersecurity Day 2025, is a key component of the company’s corporate social responsibility (CSR) program. The program aims to foster a digitally conscious and secure society. The educational session focused on critical topics relevant to the modern digital age, such as protecting personal identity and understanding how to safeguard one's digital footprint. In addition to the informative content, the team also shared KPMG-branded souvenirs with the students. Students were introduced to concepts related to secure login practices and password management. During a practical exercise, the team demonstrated the use of 'Password Monster' software, a tool that visually illustrates the ...

Exclusive: 80% of Private Universities Miss Hacking Training Deadline

Image
Rising Concerns Over Data Leaks in South Korean Universities Over the past five years, South Korean universities have faced a growing number of personal information leaks, with more than 2.5 million cases reported. These incidents have highlighted serious vulnerabilities in the cybersecurity measures of both public and private institutions. One of the most notable cases involved Ewha Womans University, which disclosed that personal data of over 160,000 individuals was compromised due to hacking attacks originating from Cambodia and Hong Kong. Similarly, Hongik University experienced six data breaches between 2022 and last year, all attributed to employee errors, resulting in the exposure of personal information for 13,750 individuals. Despite these alarming statistics, a significant portion of universities has failed to engage in critical cybersecurity training programs. According to data obtained by Representative Jin Sun-mi of the Democratic Party of Korea from the Ministry of Educ...

AI reshapes cyberthreats and defences, survey reveals

Image
Rising AI Threats and Strategic Shifts in Cybersecurity A recent survey by Fortinet has revealed that 58% of organisations in Thailand faced cyberthreats powered by artificial intelligence (AI) in the past year. This figure highlights the growing sophistication of cyberattacks, as attackers leverage AI to create more adaptive and stealthier threats. Additionally, 90% of organisations are already using AI within their security environments, indicating a significant shift in how cybersecurity is approached. The findings come from the 2025 IDC survey, which gathered insights from 550 IT and security leaders across 11 Asia-Pacific markets, including Thailand. The survey was conducted between February and April 2025, with 88% of respondents representing organisations with over 250 employees who were directly involved in cybersecurity decision-making. Supakorn Kungpisdan, country manager for Fortinet Thailand and Laos, noted that CISOs in Thailand are entering a more advanced phase of cyb...

Zero-Click Hacking Sparks Cybersecurity Alertness

Image
Cyber threats have become a growing concern across various sectors, including telecommunications, finance, and retail. As personal data breaches continue to rise, individuals are increasingly vulnerable to phishing, hacking, and other cyberattacks. The emergence of "zero-click" hacking—where systems are infiltrated through software vulnerabilities without user interaction—has made these threats even more complex. With the widespread use of smart devices such as smartphones, smart TVs, and AI speakers, concerns about cybersecurity are at an all-time high. For individuals, countering these attacks on their own is nearly impossible. Even government agencies acknowledge that no program can completely prevent hacking. Experts stress that following basic security practices is the most effective way to protect oneself. Based on guidelines from official sources and expert advice, here are seven essential cybersecurity rules to safeguard personal information and assets. The Most ...

FG and Imo Set to Spearhead Nigeria's Data Preservation Initiative

Image
The Urgency of Data Preservation in Nigeria Nigeria's public sector is being called upon to treat the preservation of data and public records as a critical infrastructure, comparable to roads, electricity, and water. This initiative aims to build trust, foster innovation, and protect institutional memory. The call was made during the Piql West Africa Public Sector Breakfast Meeting held in Abuja, where representatives from the Federal Government, the National Archives, and cultural and research institutions gathered to discuss how to future-proof Nigeria’s public records. Senator George Akume, delivering remarks on behalf of the Secretary to the Government of the Federation (SGF), emphasized the importance of the collaboration between the National Archives and Norwegian digital preservation company Piql. He described this partnership as a significant step toward creating a "secure, accessible, and future-proof national data repository." The SGF's office linked this ...

NCSOC Launches Cyber Defense Hub

Image
Launch of National Cyber Protection Strategy and Operations Centre Sri Lanka has taken a significant step towards securing its digital future with the launch of the National Cyber Protection Strategy (2025-2029) and the inauguration of the National Cyber Security Operations Centre (NCSOC). This initiative marks a pivotal moment in the country's efforts to build a secure, reliable, and inclusive digital ecosystem. The strategy was unveiled during a ceremony held at the Bandaranaike Memorial International Conference Hall (BMICH) in Colombo. The event was attended by key stakeholders, including government officials, digital economy experts, and representatives from various sectors. The President emphasized the importance of digitalization in driving economic and social progress, highlighting that transparency and efficiency across all sectors are essential for sustainable development. Key Objectives of the Strategy The National Cyber Protection Strategy is designed to establish a ...

Korea Confronts Quantum 'Harvest Now, Decrypt Later' Risk

Image
The Growing Threat of Quantum Cybersecurity Risks At the Quantum Campus of Kookmin University in Seongbuk-gu, Seoul, on the 3rd of last month, a significant event took place. The ‘Quantum Security Innovation Meeting,’ organized by the Ministry of Science and ICT, brought together key players from the telecommunications sector and quantum-related industries. One of the presenters, Jo Ji-hoon, an executive at Samsung SDS, highlighted the growing concern around a specific type of cyber threat known as Harvest Now, Decrypt Later (HNDL). According to Jo, this method involves stealing encrypted data now with the intention of decrypting it once quantum computing technology advances. He emphasized that this poses a serious risk to national security and stressed the urgent need for preparation, particularly within the public sector, which holds vast amounts of long-term stored data. Understanding the HNDL Threat The HNDL strategy, sometimes referred to as “Steal First, Decrypt Later,” is bec...

NITDA and Kaspersky Forge Strategic Partnership to Boost Nigeria's Cybersecurity

Image
Strengthening Nigeria’s Cybersecurity Through Strategic Collaboration Nigeria is taking a significant step forward in its quest to enhance digital security by forming a strategic partnership with Kaspersky, a global leader in cybersecurity. This collaboration was formalized through a Memorandum of Understanding (MoU) signed during the GTIEX Nigeria event in Lagos. The agreement marks a pivotal moment in the country’s digital transformation and reflects a strong commitment to securing critical infrastructure. The MoU aligns with NITDA’s Strategic Roadmap and Action Plan (SRAP 2.0), particularly under its fifth pillar focused on “Strengthening Cybersecurity and Enhancing Digital Trust.” It also supports the Renewed Hope Agenda, which emphasizes national security for peace and prosperity. This partnership underscores Nigeria’s growing recognition of the importance of cybersecurity in safeguarding its digital future. Human Capacity as the Foundation of Cybersecurity The Director Genera...

Firm Reaffirms Commitment to Protect Nigeria's Digital Future

Image
Commitment to Cybersecurity in Nigeria Posture Cyber Security Technologies, a prominent Nigerian firm specializing in cybersecurity solutions, has reaffirmed its dedication to enhancing the resilience of both national and organizational systems against the escalating threat of cybercrime. The company plays a crucial role in safeguarding critical infrastructure and digital assets, ensuring that businesses and government institutions remain secure in an increasingly digital world. The company is led by its Chief Security Officer, Emmanuel Enamejewa, who has been instrumental in shaping the organization's mission and strategic direction. Based in Ikota, Lekki, Lagos, Posture Cyber Security Technologies provides a comprehensive range of services designed to address the complex challenges of modern cybersecurity. Key Services and Expertise Posture Cyber Security Technologies offers a wide array of services, including threat prevention, detection, application security, consultancy, d...

Fortinet Identifies Cybersecurity Trends

Image
Emerging Cybersecurity Trends in Thailand Supakorn Kungpisdan, the newly appointed country manager of Fortinet Thailand, highlights several key trends shaping the cybersecurity landscape in the region. Unified security platforms, agentic AI-powered security systems, and post-quantum cryptography are currently at the forefront of innovation. These technologies are being embraced by businesses looking to strengthen their digital defenses against increasingly sophisticated threats. The Thai cybersecurity market is valued at approximately US$450 million and is expected to see double-digit growth this year. Mr. Supakorn, who took on his new role on July 16, brings with him 24 years of experience in the IT and cybersecurity sectors. His previous position as managing director of Cyber Elite Co Ltd, under the Benchachinda Group, has given him a deep understanding of the industry's challenges and opportunities. Mr. Supakorn emphasizes that his leadership approach remains consistent acros...

Cyberspace Emerges as Fifth Battlefield: Experts Confirm

Image
Cybersecurity as a Pillar of National Development A recent seminar titled 'Cyber Security: Pakistan Vision 2047' brought together a diverse group of experts, including defense professionals, technologists, policymakers, academics, and representatives from the private sector. The event was organized by the Centre for Aerospace and Security Studies (CASS) in Islamabad, in collaboration with the Pakistan Information Security Association (PISA). The purpose of the seminar was to explore long-term strategies for strengthening Pakistan's cybersecurity framework. The discussions focused on the evolving nature of cyberspace, which has now become the fifth domain of warfare, alongside traditional domains such as land, sea, air, and space. Experts highlighted the increasing complexity of cyber threats, emphasizing that national institutions, critical infrastructure, and financial systems are under constant risk from increasingly sophisticated attacks. The Need for a Clear Cybersec...

NITDA Promotes AI and Security for Sustainable Growth

Image
The Role of Intelligence, Security, and Sustainability in Nigeria’s Digital Transformation Kashifu Inuwa, CCIE, the Director General of the National Information Technology Development Agency (NITDA), has underscored the importance of integrating intelligence, security, and sustainability as key drivers for Nigeria's digital transformation and global competitiveness. His remarks were made during a goodwill message delivered at the opening of the 19th International Conference (CONNOVATE 2025) of the Nigerian Computer Society (NCS), which was themed “Intelligent, Secure, and Sustainable Innovations for a Connected World.” Inuwa was represented by Engr. Salisu Kaka, Director of E-Government and Digital Economy Development, who emphasized that these three elements are now essential for national progress. He pointed to the convergence of these factors as a way to unlock new opportunities within Nigeria's technology sector. As an example, he referenced Estonia’s X-Road platform, whi...

The Human Factor: Reimagining Cybersecurity Training

Image
Understanding the Human Factor in Cybersecurity The digital landscape is continuously evolving, and with it, the frequency and sophistication of cyberattacks are on the rise. This rapid development has raised significant concerns about how well organizations can withstand these threats. Despite the widespread implementation of cybersecurity awareness programs, the expected reduction in incidents—especially those involving social engineering—has not materialized as hoped. At the heart of this ongoing vulnerability is the human factor, which has long been recognized as the weakest link in cybersecurity. While many organizations invest in awareness campaigns and mandatory e-learning modules, the reality is that simply possessing knowledge does not necessarily lead to a change in behavior. Insights from Behavioral Research Drawing upon behavioral psychology, particularly Social Cognitive Theory (SCT) and the Theory of Planned Behavior (TPB), research has explored what truly drives effe...