Elaine Lee

What's going on on the State of Pentesting? Discover insights from the State of Pentesting 2024 Report on security practices in APAC organizations: 📅 69% update IT infrastructure quarterly🕒 Only 39% pentest as often 🚨 Despite investing $1.4M annually in security, 50% encountered breaches Find out how APAC organizations tackle evolving IT challenges in an interview with Jason (Jay) Mar-Tang, CISSP, CCSP on Cybersec Asia: https://okt.to/pP7vQ9 Pentera #AutomatedSecurityValidation

9

1 Comment

🚀 Exciting Announcement: Introducing Xcitium CNAPP - Redefining Cloud Security! 🚀 As cloud-native technologies continue to transform the digital landscape, organizations are faced with new challenges in securing their applications and infrastructure. Enter CNAPP - Cloud-Native Application Protection Platforms: ✅ Gaps in coverage from traditional security tools ✅ Deployment and maintenance complexities of scanners and agents ✅ Alert fatigue due to ineffective risk prioritization ✅ Lack of security integration throughout the development lifecycle ✅ Overhead created by multiple disparate security tools At Xcitium, we're proud to introduce our latest innovation: Xcitium CNAPP. Designed to seamlessly integrate security into the entire cloud-native application lifecycle, Xcitium CNAPP offers unparalleled protection and visibility across your cloud environment. Key features of hashtag hashtag #XcitiumCNAPP include: 🔒 Cloud Security Posture Management (CSPM) 🛡️ Kubernetes Security Posture Management (KSPM) 🌐 Cloud Workload Protection Platform (CWPP) 📊 Application Security Posture Management (ASPM) 📝 Compliance Automation 💼 Integrated Managed EDR, MDR, XDR, and more! Our Unified Zero Trust (hashtag #UZT) approach ensures end-to-end security, from endpoint to cloud workloads, with continuous monitoring, threat detection, and response capabilities. With Xcitium CNAPP, organizations can effectively mitigate risks and secure their cloud-native applications with confidence. Reach out to your Xcitium Channel contact today to learn more! Dani Pickens (covering) - North East Kimberly Jackson - TX/OK <-- That's Me Drew Stratton - Ohio Valley + Southeast Brice Kohara - Midwest + Central Jessica Taussig - Mountain West Rodrigo Lemos - LATAM hashtag #Xcitium #CNAPP #CloudSecurity #ZeroTrust #CloudNative #Innovation, #Cybersecurity #XcitiumChannel

21

Advanced identity security solutions are crucial for financial institutions to safeguard sensitive data and uphold regulatory compliance. Eric Kong, Managing Director, ASEAN, SailPoint shares with The Exchange Asia how a modern, autonomous and unified identity security approach addresses all identities and applications within an organization, ensuring the resilience of its cybersecurity infrastructure: https://slpnt.co/3VxvfoY #SailPoint #IdentitySecurity #IdentityManagement #Cybersecurity #FinancialServices #FinancialInstitutions #DigitalBanking #DigitalTransformation #RegulatoryCompliance #MachineLearning #ArtificialIntelligence #AI #Automation #AutonomousIdentity #UnifiedIdentity

17

1 Comment

More tools don't always mean better security—44% of CISOs couldn’t detect a breach in the past year despite existing solutions. Overwhelmed by blind spots in hybrid cloud environments, 6 in 10 are prioritizing tool consolidation. With AI-fueled ransomware threats on the horizon, 85% say deep observability is key to stronger security in 2025. Read full article here: https://lnkd.in/gpNEPg2d #Cybersecurity #CloudSecurity #AIThreats #HybridCloud #Observability #DataInMotion #CybersecAsia

6

As Strong as your weakest link

4

Cloudera Achieves PCI DSS 4.0 Compliance to Unlock Business Value from AI for Financial Institutions Cloudera, the only true hybrid platform for data, analytics, and AI, today announced it has achieved Level 1 compliance with the Payment Card Industry’s (PCI) Data Security Standard (DSS) for Service Providers. This certification demonstrates Cloudera's commitment to cybersecurity and compliance in its mission to help financial institutions unlock business value from AI. With this milestone, Cloudera’s Platform as a Service (PaaS) and Private Cloud (PVC) are both PCI DSS v4.0 compliant, the newest major version of the framework. PCI DSS standards define rigorous security controls and processes for entities involved in the payment ecosystem, as well as requirements for developers and solution providers to build and securely manage payment devices, software, and solutions for the payment industry. As the rise of e-commerce has rapidly scaled the amount of data that financial institutions have under management, the need to protect that data has grown as well. According to the International Monetary Fund’s 2024 Global Financial Stability Report, the financial sector is the target for one-fifth of all cyber-attacks, and this risk is largely driven by its dependence on third-party IT providers. Certification with the most recent security standards for the PCI is a testament to Cloudera’s ability to quickly adapt to the latest financial sector security requirements, where threats are constantly evolving and becoming more sophisticated. #clouderagenAI #securitymatters #hybridcloud

19

People give away their personal data every day. Organisations and individuals rely on technologies to safeguard their data and protect privacy. Tune in to an insightful discussion on 🎙️CNA938 about Privacy Enhancing Technologies (PETs) with Proofpoint expert Jennifer Cheng, Director of Cybersecurity Strategy for Asia Pacific and Japan. Discover how technologies e.g. PETs and AI can protect our online privacy and personal data. #DataProtection #personaldata

1

Fresh from the Oven! IDC Info Snapshot: Navigating Cloud Security Complexities — Identity at the Core, targeting specifically on South East Asia market. In this 4-pages snapshot, it expound on key ideas such as - Challenges faced by organizations with rapid cloud adoption and multi cloud complexities - The importance of advanced identity - The role of CNAPP and CIEM as pillars for robust cloud security in managing cloud identities and entitlements Key Highlights: - In a digital-driven ecosystem, 38% of Southeast Asian organizations struggle with multicloud complexity. - IDC’s Asia/Pacific IT and Business Services Sourcing Survey, 2023, shows that 30% of enterprises in Southeast Asia recognize strong identity and access management (IAM) as one of the most important factors in ensuring and maintaining cyber-resiliency. - NIST CSF 2.0, an update to the established guidelines, places a stronger emphasis on identity management, recognizing it as a cornerstone of a robust cybersecurity strategy. - IDC survey also revealed that 38% of enterprises in Southeast Asia recognize strong IAM solutions as a primary technology for achieving a holistic zero trust strategy. Much appreciation goes to Lily Low, Alvin Yeo and Wing Churn Leong in creating our first Cloud Analyst Report for SEA! #tenable #exposuremanagement #tenableone #cnapp #cloudsecurity

5

Excited to be speaking at the ISOG Event today on “Incident Management: A Critical Component of Cyber Resiliency!” I’ll be diving into how organisations can respond and recover swiftly from cyber incidents—because resilience isn’t just about preventing attacks, it’s about how you bounce back. If you’re attending, feel free to drop by and say hi! 👋 Let’s discuss how we can help strengthen your organization’s resilience and improve your incident management strategy. Looking forward to connecting with you all! Trellix Chris Ginter Nanaiah Porangada Benjamin Lim Cey Maricel Reyes Aubrey Detablan Pauline Wong #isog #isogx #Cybersecurity #CybersecurityPH #CybersecurityPhilippines

58

2 Comments

Can #cybersecurity keep pace with #AI-enhanced cybercrime? Trellix Head of Threat Intelligence John Fokker lends perspective on the evolving landscape of #GenAI technologies used by cybercriminals on 16 October at GovWare in Singapore. #GovWare2024

2

Connect with Netskope at GovWare 2024 in Singapore from October 15-17. #TeamNetskope is ready to meet with you to dive deeper into how we can help you stay ahead of your specific cloud, data, and network security challenges. #GovWare2024 #SICW2024 #GovWare

1

LogRhythm's Leonardo H., along with various regional industry experts were interviewed about Malaysia's Cybersecurity Bill. Focusing on National Critical Information Infrastructure (NCII), Leo shared that the structured framework is timely, given the upticks of highly targeted attacks on NCII entities and the government sectors worldwide. Read more of his thoughts here: https://ow.ly/PMU750RY3ea

3

CISOs: Navigate Cyber Risk Complexities with ASM. Discover solutions to advanced threats, hybrid infrastructures, and evolving regulations. Learn more now!

3

JAKARTA (IndoTelko) - Cloudflare, Inc., a leading cloud connectivity company, recently released a study titled “Navigating the New Security Landscape: Asia Pacific Cybersecurity Readiness Survey.” The report highlights rising challenges like ransomware, data breaches, and the growing complexity of AI-driven threats. Key findings reveal that 41% of organizations in APAC experienced a data breach in the past year, with sectors like Construction, Travel, and Financial Services hit the hardest. Alarmingly, 87% of respondents expressed concerns over AI’s role in escalating the severity and frequency of these breaches. With this evolving landscape, Cloudflare’s AI-powered security solutions are critical for protecting businesses. From real-time DDoS mitigation to advanced WAF capabilities, Cloudflare ensures organizations stay secure and resilient. Learn more here: https://lnkd.in/gHDGrAta #Cloudflare #CyberSecurity #AI #DataBreach #APAC #BusinessContinuity #TechSecurity

11

🔍 2024 Strategic Insights: API Security in APAC🔍 Driven by a surge in API adoption, the digital landscape in Asia Pacific is rapidly evolving. But are you keeping pace with the best practices in API security? Our latest report, “2024 Strategic Insights: API Security in APAC”, offers a comprehensive analysis of the region's unique security challenges and best practices. The report dives deep into the APAC's API security landscape. Here's a sneak peek of the key findings: 🔑 API2, API7, and API8 from OWASP Top 10 API Security Risks emerge as Top Concerns: Broken Authentication (API2), Server-Side Request Forgery (SSRF) (API7), and Security Misconfiguration (API8) are top concerns due to widespread adoption of REST/RPC APIs, internal APIs, and diverse deployment environments. 🔐 Priorities in an API Security Lifecycle: API security testing, access control, and runtime protection are crucial for APAC organizations to identify, mitigate, and prevent API vulnerabilities throughout the development and deployment stages. 💡 Embracing Advanced Solutions: Over 50% of APAC organizations leverage AI/ML, API gateways, and code security practices to bolster their API security posture. Keen to learn more? Download “2024 Strategic Insights: API Security in APAC” now and discover how to navigate the unique API security landscape of the region. Source:https://lnkd.in/gD4_VkVV #APISecurity #CyberSecurity #APAC #DigitalTransformation #TechTrends #2024Insights #F5 #F5XC #F5DistributedCloud

13

Today Singapore passed a Bill that seeks to expand the oversight of CSA over any computer system that is critical to the nation and at high risk of cyber attacks. Cyber Security Agency of Singapore (CSA) will create two new classes of regulated entities – entities of special cyber-security interest and foundational digital infrastructure, which will be subjected to “light touch” regulations as they are not critical information infrastructure. https://lnkd.in/gn9PrVkY

24

How much are you spending on cybersecurity? SG$3.3 billion? Well, that's how much Singapore is! Okay, to be fair, not all of that is going to cyber. That amount is going towards enhancing ICT infrastructures and digital services, but security does play a big part in this. This line below from the official government statement I think is one that could apply to any organization: "Existing infrastructure must be re-engineered to reduce the complexities of ICT systems, modernize aging systems, and bolster defenses against evolving cybersecurity threats." As more and more Singaporeans are relying on online government services, we have to enhance our cybersecurity! ---------------------------------------------------------------------------------- If you're interested in cybersecurity for your organization, connect with me or click the link below for the Proofpoint Data Loss Report. https://lnkd.in/g8vnUKrt

16

2 Comments