Alvin Chan

🇵🇭 The Armed Forces of the Philippines (AFP) is preparing for future cyber attacks by forming an exclusive "cyber command” of online security specialists.    This comes after a spate of online attacks targeting both corporations and governmental agencies in the Philippines – where we are already actively helping to provide cybersecurity. 🦾   As a result, the AFP now plans to tailor its recruitment process towards a more cyber-focused approach and harvesting brain power among new recruits, particularly in cybersecurity. 🤖   We are an active security partner to several Philippine brands, including the Philippine National Bank, which has resulted in a significant enhancement in its threat prevention, detection, and response capabilities.🛡️   Read more in our latest blog: https://lnkd.in/ev5JdRdv   #CyberAttack #Cybersecurity #C8Secure

8

Samson Tiara gives Incident Command System (ICS) Course: https://lnkd.in/g-NfGW2J An Incident Command System (ICS) Course is given to Onshore Emergency Management Support Teams. This course is designed to train new or existing Members of the EMT & CMT Groups so that they can become proactive & effective supporting & liaison members within the ICS Structure in the company. - Pre-requisite: The participants are designated as the members of the Crisis or Emergency Support Management Teams - Numbers of participants: Maximum 8 - Duration: 2 Days - Venue: Emergency Command / Coordination Center owned by the company where the participants work The course gives knowledge about: - Philosophy of Emergency Management - Principles & Strategies of ICS - Roles & Responsibilities - Leadership & Team Management - Prioritizing Tasks & Tactics - Incident Planning Requirements - Gathering Incident Intelligence & Delegation - Establishing a Control Structure - Incident Control & Resource Deployment - Communications Processes - Post Incident Management - Stress Management - HR & Media Liaison Issues Our courses will update your knowledge & skills, so your job can be done correctly & safely! To enquire & book, please contact Samson Tiara Marketing Team: [email protected] Our local & international courses are given to individuals & companies. Courses are provided weekly & upon request. About us: https://lnkd.in/gSC8Xgc9 #SamsonTiara #Fire #Safety #Survival #Security #Emergency #Oil #Gas #Energy #Offshore #Onshore #Training #Course #Leadership #Education #Digital #Online #Rescue #Disaster #Aid #Collaboration #Innovation #Excellence

2

1 Comment

Elevating Security Consciousness: Safeguarding Japanese Consumers in the Modern Age https://lnkd.in/gJxGf87Q #WPG #ExecutiveProtection #ArmedSecurity #RiskVulnerabilityAssessment #EstateSecurity #PrivateInvestigations #GoldStandardService #privacyisluxury

1

China’s defence budget reflects the country’s increasing military might and aspirations, with the 14th Five-Year Plan seeking to modernise the People’s Liberation Army and bolster national security. Incremental and sustained defence spending, with targets like modernisation in 2027, 2035, and mid-century, demonstrates this commitment. The lack of transparency about China’s real numbers raises concerns about its intentions, and therefore its increasing defence budget calls for caution.   Read more in RSIS Commentary “China’s Defence Budget – The Trend of the Ascending Numbers” by Amrita Jash.   #RSIS #RSISCommentary #ChinaRelations #ChinaBudget

6

Taiwan aims to war-proof its communications networks, with or without outside help - The island’s space programme is leveraging domestic expertise to build out critical low Earth orbit communication satellite links in event of war - Taiwan’s communications with the outside world rely on a total of 15 undersea cables – a tenuous state of affairs for the self-ruled island, which lies about 200km (124 miles) from mainland China, and next door to world’s largest army, by headcount, and the largest navy, by total number of ships. - It is no surprise then that given the fraught relations between Beijing and Taipei that the leaders of the island of 23 million people have called for more reliable and secure communications infrastructure in the event of war. - The most obvious inspiration has been Ukraine, which has endured almost 1,000 days of a Russian invasion, in part by being able to maintain critical communication links to help coordinate military responses, despite serious damage to ground communication infrastructure. The vital links have been made possible by the Starlink satellite network, a division of Elon Musk’s space flight company SpaceX. - “Our sights are set on making Taiwan the Asian hub of uncrewed aerial vehicle supply chains for global democracies and developing the next generation of medium- and low-orbit communications satellites, bringing Taiwan’s space and aerospace industries squarely into the international sphere,” Lai said. - Space is one of Taiwan’s six strategic pillar industries, the island’s government announced four years ago. In 2023, Taipei established the Taiwan Space Agency (Tasa), which was tasked with implementing low Earth orbit (LEO) communication satellite projects. Tasa plans to launch its first batch of Beyond 5G (B5G) satellites in 2026, to be followed by a second batch two years later. https://lnkd.in/e5vWMXRE

4

#Singpass credentials can be used to facilitate scams posing various security risks. For example, fraudulent Singpass credentials could be used in hiring processes, posing a risk to the organisation if the candidate is not properly verified. Minimise your hiring risk, by working with a accredited background screening service like Sterling, to protect your business and employees from engaging with untrustworthy and high-risk candidates. Speak to us today! https://lnkd.in/gteBeBia #Credentials #BackgroundScreening #Fraud #Security

4

The cheese 🧀 has moved and keep on moving. "It is not the strongest of the species that survives, nor the most intelligent that survives. It is the one that is most adaptable to change" said Charles Darwin 💫 Why it matters: Changing the way we think is the first step for doing the right thing in the right direction, it is a prerequisite but it is not enough, it has to be with the right resources 💰 💫 The big pic: The nature of the threat we are facing with is dynamic. We need to analyze it and understand it will change again and again. #Agility is a key characteristic in the basis for threat analysis. 💫 What can be done: in matters of national security the second step after threat analysis is generating scenarios. The idea of scenarios is the deep understanding that there are several options for the evolving threats, thus the solutions have to be very flexible and as versatile as possible. 💫 Open innovation: governments can adopt the mechanism of innovation centers, accelerators and #cvc methodologies. Publish calls for startups or proposals, fund pilots and quickly decide on the right projects after validation and risk reduction with small money 💵. 💫 Dive deeper: Tony Blair Institute for Global Change has published a great report: “Reimagining Defence and Security: New capabilities for new challenges”, it deals with the threats and agile solutions, it deeply analyses the current situation and where are going to. By Benedict Macon-Cooney , Amalia Khachatryan , Melanie G. , Jeegar Kakkad , Daniel Sleat , Luke Stanley & Kevin Luca Zandermann. From #UK 🇬🇧 perspective… #innovation #strategy #defensetech #industry #technology https://lnkd.in/d68dzuiY

15

2 Comments

Based on its location, I assess this is an very good decision. #philippines #airfield #capabilities #subicbay #cubipoint https://lnkd.in/eQSHyRR2

8

With Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and other U.S. and international partners, we published a joint advisory that outlines activity and tradecraft of a state-sponsored cyber group associated with the PRC Ministry of State Security. It is based on current, shared understanding of advanced persistent threat group, APT 40, and recent ASD’s ACSC incident response investigations. https://go.dhs.gov/3mu APT 40 demonstrates agility in quickly using public exploit proofs of concept (POCs) to target networks of interest, conducts regular reconnaissance against networks of interest, and exploits rapidly new public vulnerabilities in widely used software. To help cybersecurity practitioners identify, prevent and remediate APT 40 intrusions against their own networks, the advisory provides a couple significant case studies of this adversary’s malicious activity against victim network. Recommended mitigations to reduce risk to being compromised by similar activity include comprehensive and historical logging information, prioritize patching for all internet exposed devices and services, and segment networks to limit or block lateral movement. https://go.dhs.gov/3mu

109

1 Comment

Software Defined Defence – The Way Ahead How do we pave the way to information superiority in an age of relentless technological progress? This question will guide our upcoming panel discussion led by Lieutenant General Michael Vetter at the Berlin Security Conference, as we explore what’s needed to ensure that Software Defined Defence becomes not just an ambition, but a reality.  The path forward is clear but challenging. It demands solutions for critical issues: the need to standardize IT systems without sacrificing interoperability, the urgency of adopting post-quantum cryptography before quantum threats materialize, and the responsibility of the tech industry in bridging innovation and accountability.  I’m genuinely looking forward to diving into these topics with my fellow panelists Alexander Philipp, Brigadier General Hanson, Harald Mannheim, Marc Akkermann, and Dr Timo Haas. Each of them brings unique expertise and insights, and I’m excited to see where our discussion will lead as we tackle these crucial questions together.    #CyberSecurity #SoftwareDefinedDefence #BSC24

132

1 Comment

DFBA's Plans and Operations representative met with the US Army Pacific (USARPAC) G3-Training personnel to exchange ideas and information on USARPAC activities and capability developments. Specific areas discussed were software developments to support sensitive site exploitation and identity activities in support of military operations. #NationalSecurity #biometrics

4

🔍 SideWinder, one of the most prolific APT groups, has been active since 2012. Known for targeting military and government entities in South and Southeast Asia, the group is now expanding its operations into the Middle East and Africa, launching new attacks on high-profile entities and strategic infrastructures. #CyberSecurity #APT #ThreatIntelligence 📧 The group’s attack chain typically begins with spear-phishing emails that deliver malicious attachments, often Microsoft OOXML documents or ZIP files. These attachments lead to multi-stage infection chains, with the final payload being the advanced espionage tool, StealerBot. #Phishing #Malware #CyberThreat 💻 The infection vectors involve exploiting CVE-2017-11882, a Microsoft Office vulnerability, to deliver shellcode and avoid detection. Techniques like memory checks, CPU identification, and anti-sandboxing tricks ensure the malware stays hidden and effective. #Vulnerability #CVE201711882 #InfoSec 🕵️ SideWinder has deployed StealerBot, a modular implant that enables espionage by capturing sensitive data like screenshots, keystrokes, and files. The tool can also intercept RDP credentials and steal browser tokens. #StealerBot #Espionage #DataBreach 🔗 The group uses a complex network of command-and-control (C2) servers, often hosted on dedicated VPS rented for short periods, and utilizes domains resembling legitimate government or military websites in its targeted countries. #APT #C2Servers #CyberInfrastructure 🎯 SideWinder’s recent targets include government, military, logistics, and telecommunications sectors in countries like Bangladesh, Nepal, Saudi Arabia, and Myanmar. The group also shows an increasing interest in strategic infrastructures in these regions. #APTGroup #CriticalInfrastructure #CyberAttacks 🛡️ Despite using older vulnerabilities and tools like public RATs, the group's true capabilities emerge in their sophisticated post-exploitation activities. This evolution underlines the need for vigilance and advanced defense strategies. #AdvancedThreats #CyberDefense #ThreatHunting

5

I was scrolling through my open-source intelligence (OSINT) feeds this morning and came across one situation unfolding (reference links below) related to Thailand's apparently emergent battle in rooting out fraud, corruption, grifting, money-laundering, and illicit transfer of assets, under the newly-minted Prime Minister Paetongtarn Shinawatra. Thailand is facing a massive investment fraud scandal involving 'The iCon Group', where over 4,500 victims lost THB 1.3 billion ($39.3M USD). With arrests of high-profile figures and asset seizures, the case exposes deep-rooted corruption and financial system vulnerabilities. What I find particularly interesting, is that as it is not a current hot-topic conflict (see: Middle East Terrorists/Supporters vs. Israel, Russia vs. Ukraine, etc.), it is getting almost no play in mainstream journalism/OSINT reporting. This is problematic, because it signals that we are collectively not paying attention to the threats or impacts to life, liberty, and economy this type of behavior enables. There is no direct indication at this time that those involved are funding terrorism. There are definitive implications, however, that Thai government officials have been found embroiled in controversy and scandal related to the operation. This is so much so, that the Prime Minister ordered the investigation of the investigation officials themselves. Much of the illicit currency/trade market filters through far east financial infrastructure which funds problems more localized to you and me. For those that have a bit of knowledge regarding tradecraft, financial intelligence (FININT), and [counter] threat finance (CTF), you might find interesting the ramifications. We know that deeply entrenched insurgencies have the capability to generate enormous sums from far east regions, often through layering/embezzlement, other times through unsuspecting public apparatus' (as appears to be the case here). Furthermore, Thailand's strategic location (and those like it) as a hub for tourism, trade, and finance in Southeast Asia increases the risk of transnational criminal organization (TCO) networks using the country as a base for money laundering and fraud schemes, linking illicit financial flows to more violent consequences in other parts of the world. Consequently, fraud and corruption in Thailand can facilitate the movement of funds to terrorist organizations and violent extremist groups globally. Beyond the local impact, this fraud and others like it poses a global threat, as illicit funds often fuel TCOs and terrorism. As Thailand investigates, the international community must remain vigilant, as unchecked corruption can have violent, far-reaching consequences. REFERENCE https://lnkd.in/gjRXZkt4 https://lnkd.in/g5AFMXQX #FinancialCrime #Corruption #ThreatFinancing #GlobalSecurity #Fraud

5

Vietnam’s Ministry of Defence (MoD) has revealed its intention to acquire the K9 Thunder self-propelled howitzer (SPH) from South Korea’s Hanwha Aerospace for integration into the People’s Army of Vietnam. Vice-Minister of National Defence Hoang Xuan Chien articulated this plan during the ’11th Korea-Vietnam Defense Strategy Dialogue’ convened in Hanoi on April 23rd. The dialogue, serving as a platform for regular consultations between the Vice Ministers of Defense of both nations, underscores their commitment to enhancing mutual defense cooperation and industry collaboration. Initiated in 2012, this bilateral forum has facilitated annual exchanges aimed at bolstering defense ties. Mutual appreciation was expressed for the strides made in defense exchanges and cooperation, with a consensus to intensify collaboration across multiple domains, including maritime security, cyber defense, and defense industry logistics. Moreover, both parties resolved to reinforce cooperation in maritime security, cyber defense, and logistical support. As part of efforts to broaden defense and industry collaboration, the dialogue culminated in an agreement to incorporate the newly identified areas of cooperation into the existing bilateral defense agreement inked in 2010. The Vietnamese official sought cooperation from the Korean government to facilitate this objective. #military #defense #defence #militaryleak https://lnkd.in/dEyw5biF

4

On September 9, 2024, the National Technical Committee 260 on Cybersecurity (SAC/TC260) officially released the Artificial Intelligence Safety Governance Framework (hereinafter referred to as the Framework). This Framework serves as a comprehensive guide for establishing an all-encompassing, full-lifecycle governance system for AI development, ensuring its healthy growth and regulated application. The Framework aligns with China’s approach toward AI, namely the “people-centered approach” and its vision of “AI for good”. The Framework supports the implementation of the Global AI Governance Initiative proposed by China. Key Components of the AI Safety Governance Framework The Framework is structured into four sections: governance principles, safety risks, technical measures, and safety guidelines. Governance Principles: The Framework outlinesfour key principles forAI safety governance, namely: be inclusive and prudent; identify risks with agile governance; integrate technology and management for a coordinated response; and promote openness and cooperation for joint governance and shared benefits. These principles highlight collaboration, open governance, and shared responsibility, offering a holistic approach to AI safety. Safety Risks: Inherent Safety Risks: These stem from AI’s inherent technological flaws, such as biases, poisoned training data, and data leakage. Safety Risks in AI Applications: These result from improper or malicious use of AI, including its role in illegal activities, the amplification of “information cocoons”, and the creation of fake news. Technical Measures: For internal risks related to models, data, and systems, the Framework suggests technical measures such assecure development, content identification, and responsible R&D systems. It also emphasizes comprehensive governance solutions, including supply chain security. For application risks in areas like network security, ethics, and cognition, it proposes measures such as security safeguards, end-use tracking, and tiered management systems. Additionally, talent cultivation and classification of AI-related activities are essential to mitigatingthese risks. Safety Guidelines: The Framework provides specific safety guidelines for various stakeholders, including model developers, service providers, and users in key sectors. These guidelines ensure that all parties involved in AI development and application adhere tostandardized safety practices. https://lnkd.in/gcdhFf8a

3