Karimullah Bin Syed Ahmed

𝗔 𝗻𝗲𝘄 𝗽𝗮𝗿𝗮𝗱𝗶𝗴𝗺 𝗳𝗼𝗿 𝗰𝘆𝗯𝗲𝗿 𝗱𝗲𝗳𝗲𝗻𝘀𝗲?     I have been posting about the past sponsors of the PCI Asia Pacific Community Meeting (APCM), namely, LGMS Berhad and ControlCase.    This post will cover an interesting report by our Bronze Sponsor, SISA and it was co-authored with the Data Security Council of India (DSCI), an industry body that protects data in India by driving cybersecurity and privacy best practices, standards and initiatives.    The author(s) captured my attention as soon as I started reading by highlighting:   “𝘈𝘭𝘦𝘳𝘵 𝘰𝘷𝘦𝘳𝘭𝘰𝘢𝘥 𝘵𝘳𝘢𝘯𝘴𝘧𝘰𝘳𝘮𝘴 𝘢 𝘸𝘦𝘭𝘭-𝘪𝘯𝘵𝘦𝘯𝘵𝘪𝘰𝘯𝘦𝘥 𝘴𝘦𝘤𝘶𝘳𝘪𝘵𝘺 𝘴𝘵𝘳𝘢𝘵𝘦𝘨𝘺 𝘪𝘯𝘵𝘰 𝘢 𝘴𝘦𝘭𝘧-𝘥𝘦𝘧𝘦𝘢𝘵𝘪𝘯𝘨 𝘰𝘯𝘦.”   This has been one of my focus areas and related to PCI DSS Requirement 10 i.e. “Log and Monitor All Access to System Components and Cardholder Data”.  With more systems getting deployed, it can only get more complex with more logs and alerts generated. This is overwhelming the cybersecurity heroes tasked to detect and defend against attacks in the midst of an avalanche of false positive alerts.  SISA quoted from Statista that organizations take around 204 days to detect a data breach!   Since the publication of PCI DSS v4.0, a new requirement has been added for organizations to use automated mechanisms to perform audit log reviews. This is a future dated requirement and will be effective from 1 April 2025, however you are strongly encouraged to consider adopting this requirement soon given current threats.   Back to the document co-authored by SISA... it introduced me to a new acronym, MXDR (Managed Extended Detection and Response).  To over-simplify, this approach provides a comprehensive view and control across an organization with better identification of threats, an ability to respond more effectively and most importantly, the ability to perform monitoring continuously.  Amazing!   Get the report from the SISA website: https://lnkd.in/gpbfWHA8   SISA will be a sponsor and exhibition partner at the North America CM in Boston and they will be back as an exhibition partner at the APCM in Hanoi in November!  Thank you Dharshan Shanthamurthy and team for your support!  This will be a good opportunity to find out more about MXDR from the SISA experts who will be present at the events.    Disclaimer: PCI Council is a neutral body and my personal post is not an endorsement of any organization or solution. If you have an interest in payments, cybersecurity, compliance, risk management and technology, do consider joining us in either Boston (Sep), Barcelona (Oct) or Hanoi (Nov).  Find out more at the PCI Events link below or drop me a message: https://lnkd.in/g7rBGdSf   #pcissc #pcicommunity #pcidss #pcidssv4 #datasecurity #cybersecurity #payments #paymentsecurity Video credit: Thank you Canva for your platform and the royalty-free video.

28

1 Comment

Singapore is cranking up the heat when it comes to AI in cyber. The Cyber Security Agency (CSA) is planning on releasing a draft of the Technical Guidelines for Securing AI Systems for public consultation, offering "practical measures" to bolster AI security. The CSA has stated that it will include: - Voluntary Guidelines: These can be adopted alongside existing security processes to address potential AI risks. - Adversarial Machine Learning: Techniques that allow attackers to compromise AI models. - Public & Private Sector Collaboration: Essential for understanding and mitigating evolving AI threats. AI is everywhere now, exposing new risks and expanding the attack surface for data exposure, so the more available resources like this, the merrier. ---------------------------------------------------------------------------------- If you're interested in cybersecurity for your organization, connect with me or click the link for the Proofpoint Voice of the Ciso Report. https://lnkd.in/gUhxKKi2

14

2 Comments

Register now https://lnkd.in/gaPbMTgP to learn how advanced penetration testing can uncover and identify vulnerabilities in your IT Security infrastructure before hackers can attack! Our featured speaker will be Ashritha Alva - Vice President & Head of Penetration Testing Services, Accorian People often ask: - What is Continuous Penetration Testing - Why does a company need continuous penetration testing? - Who should be involved in the Pen test? - How will the security team perform the intrusive test? - Will the test team exploit vulnerabilities or simply identify them? - How long will it take to perform the pen test? - What valuable information will be included in the report? and more....

3

#StatelyTaurus #APT (#MustangPanda) are the first to adopt #VSCode as a remote access tool and have deployed it in an Asia based government. Cortex by Palo Alto Networks helped protect against these activities using both agent and analytics capabilities. Extremely interesting research by Tom Fakterman.

24

2 Comments

The average salary for a security architect in Singapore is approximately $150,000 per year (source: https://hubs.la/Q02zFgMr0). Becoming a successful security architect requires a blend of technical expertise and essential soft skills. Here’s a breakdown of what you need: To be a successful Security Architect, you need a mix of technical expertise and essential soft skills. Here’s what you need: Technical Skills: •  Network and System Security •  Vulnerability Assessment •  Infrastructure Security and Tools •  Frameworks and Standards •  Programming and Scripting Languages Soft Skills: •  Analytical Thinking •  Communication •  Ethics and Professional Conduct •  Management and Guidance •  Continuous Learning and Adaptability Security Architects can work in various settings, including government agencies, private companies, consulting firms, and academic institutions. They may work in-house, remotely, or in a hybrid model. Ready to advance your career in cybersecurity? Book a FREE Information Session with The Centre For Cybersecurity and learn everything you need to know to start a cybersecurity career even without background ➡ https://hubs.la/Q02zFC_c0 #SecurityArchitect #CyberSkills #TechExpertise #SoftSkills #CyberSecurityCareer #NetworkSecurity #InfrastructureSecurity #ProfessionalDevelopment #CareerGrowth #ContinuousLearning #CyberTraining #CentreForCybersecurity #TechCareer #CyberSecurityCourses #CareerAdvancement #InfoSession #CyberSecurityEducation #EthicalHacking

3

The webinar on PCI v4.0.1 March 2025 requirements is now live on our YouTube channel! Dive into the New Requirements with insights from our special guest, Yew Kuann CHENG (YK) from the PCI Security Standards Council. Watch now to stay updated:   #ControlCase #PCIDSSv4 #PCISSC #webinar

12

Our new Cyber Defense Platform has been released, and integrates cyber defense solutions into a single, cloud-native system aimed at enhancing organizational cyber postures. Check out the article below with details. BENCH PR #cyberdefense #bluevoyant #cyberplatform #bluevoyant

12

SINGAPORE - The Cyber Security Agency of Singapore (CSA) is starting a study aimed at raising the productivity and professionalism of cyber-security workers. It may result in an outline of the competencies required of chief information security officers, or Cisos, and their teams of security executives who are in high demand, given their key role amid surging cyber attacks. Ms Veronica Tan, director of CSA’s safer cyberspace division, told The Straits Times: “For organisations, clarity in standards and desired skills for various roles will mean greater improvements in workforce competency and productivity.”

3

𝗪𝗵𝘆 𝗺𝘂𝘀𝘁 𝗜 𝗰𝗼𝗺𝗽𝗹𝘆 𝘄𝗶𝘁𝗵 𝗣𝗖𝗜 𝗗𝗦𝗦? This is one of the questions that I frequently get since I started at PCI Council. And my standard response is… PCI Council does not manage the compliance nor enforcement to our standards. Huh? 𝗪𝗵𝗮𝘁 𝗱𝗼𝗲𝘀 𝗣𝗖𝗜 𝗦𝗦𝗖 𝗱𝗼? PCI SSC strengthens payment security globally through the 15 security standards that we help to manage. This is done together with our PCI Exco as well as the PCI Community, which includes the Affiliate Members, security assessors, Participating Organizations (PO), etc. Any questions about your legal obligations to comply with PCI standards including PCI DSS (Data Security Standard) should be raised with your compliance-accepting entity. Depending on your role in the payment ecosystem, your compliance-accepting entity is probably your acquirer or the Payment Brands who are also the PCI Exco. This includes any questions on non-compliance penalties, enforcement actions or implications in the event of a data breach. 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗮𝘀𝗶𝗱𝗲, 𝗶𝘁 𝗶𝘀 𝘆𝗼𝘂𝗿 𝗿𝗲𝗽𝘂𝘁𝗮𝘁𝗶𝗼𝗻! PCI standards help maintain trust in the payment ecosystem and upholds your brand promise to your customers, stakeholders, shareholders and investors. In a hyper-competitive environment, a data breach may have a catastrophic impact to your business and speaking from personal experience, it can be costly to regain the trust of your customers… if at all. 𝗪𝗲𝗹𝗹 𝗱𝗼𝗻𝗲, 𝗥𝗶𝗰𝗼𝗵 𝗨𝗦𝗔! This is where best-in-class organizations differentiate themselves.  I enjoyed reading the article below from Ricoh USA, Inc., a global provider of integrated digital services.  Why we chose PCI certification over PCI compliance, Ricoh USA, undated, accessed on 4 May 2024. https://lnkd.in/gKquG6Ms While some clarifications are required on the terminologies used, the key point that I noted is “(Our PCI certification) assures you of our commitment to data security and securing your data.” Kudos as well to the Ricoh USA team for highlighting that “they also need to consider how their vendors and partners that touch cardholder data address PCI standards.”  You are responsible for your brand and your customer’s data even if you have outsourced your operations to a vendor or partner.  A major risk event impacting your service provider will likely also negatively impact you. David Levine, thank you for the article and please help to credit your ex-team at Ricoh USA. #pcissc #pcicommunity #pcidss #pcidssv4 #datasecurity #cybersecurity #payments #paymentsecurity Video credit: Thanks to Canva for your platform and the royalty-free video.

51

⚠️The order has changed for MSPs. Embrace it and rise to the challenge. 🏰Time for Defensibility is Now 🫡We need to Rally the #MSPs to Protect Our Clients 🐲Just like House of the Dragon (#hod) taught us about defending key strongholds. 🪜MSPs must now step up to safeguard our clients in the cybersecurity landscape. 🔥For years, hackers have attacked behind the scenes, exploiting every gap we left open. 👉Now, it’s time to rally, build our defenses, and raise an army of #MSPs ready to protect our clients 🔥 Here’s how we start to #shiftLeft 1️⃣ Fortify Core Infrastructure 👉Build robust defenses for your clients, securing data centers, cloud environments, and critical systems, end users and “all the things”. 2️⃣ Strategic Alliances 👉Partner with key cybersecurity leaders and vendors to strengthen your arsenal. 3️⃣ Proactive Documentation 👍Start by getting your policies, procedures, and compliance in place. Don’t wait for the incident—prepare for it. Build your defenses by ensuring that everything is documented and tested. 4️⃣ Proactive Risk Management 👉 conducting regular risk reviews and gap analysis, defining business outcomes, and tracking those outcomes. 💪Defending our clients isn’t just about reacting to threats; it’s about being proactive and building your defenses now. #CyberDefense #ShiftLeft #MSPCommunity #DigitalProtection #ProactiveSecurity #

10

2 Comments

🚨 Major Cyberattack Alert! #Cicada3301 Hits #TriStarDisplay with 95GB Data Breach 🚨 The infamous ransomware group, Cicada3301, has taken responsibility for a substantial data breach at Singapore's Tri-Star Display Pte Ltd. According to the group's dark web site, they have exfiltrated over... To know the full story and its nuances, click the link below 👇 https://lnkd.in/gyGGJ9Eh #CyberSecurity #Ransomware #DataBreach #Cicada3301 #CyberAttack #InfoSec #DataProtection #HackerNews #TriStarDisplay #DarkWeb #CyberThreats #IncidentResponse #CyberAwareness #DataSecurity #CyberDefense #CyberCrime #SecurityBreach #DigitalSecurity #Hackers #CyberResilience

1

⚠️Another Major Data Breach – Ticketek Impacted⚠️ Following 3 days after the alarming breach at Ticketmaster, another incident has surfaced. Ticketek Australia has disclosed a cyber incident involving customer information stored in a third-party cloud environment. Although the extent of the breach is still under investigation, it may include customer names, dates of birth, and email addresses, adds to the urgency of the cyber security conversation. Why Do Cybercriminals Sell Data for So Little? 🔹️Quick Profits and cash flow 🔹️Reduced Risk: Quick, low-cost transactions minimise the risk of detection and capture. 🔹️Reputation Building: Selling cheap can build their reputation within the hacker community, attracting more business. 🔹️Market Saturation: With an abundance of stolen data, prices drop due to oversupply ❗️The Need for Urgent Action❗️ With back-to-back breaches at Ticketmaster and Ticketek, the urgency to bolster cyber security measures cannot be overstated. Companies must prioritise robust security measures, data minimisation and quick incident response to safeguard customer information. ➡️For those affected: 🔹️Change Your Passwords to your important accounts! 🔹️Be Alert for Phishing Scams 🔹️Regularly check your bank and credit card statements for any unusual activity. 🔹️Enable Multi-Factor Authentication: Add an extra layer of security to your accounts. Read their public statement here: https://lnkd.in/gbNgmtJH

41

23 Comments

The latest release from Check Point's External Risk Management team covers the emerging trends and tactics used by malicious actors in the Philippines. From #ransomware to #phishing to DDoS attacks, the report covers the rising threats and how to combat them. Have a read: https://lnkd.in/g8CWqrXc

1

Faced with overwhelming alerts, this Government Authority took control of their security with Vectra AI. Now, they can cut through the noise, detect threats faster, and respond with confidence. Check out the full story here: [link]

2

Latest report from the OAIC reveals a significant increase in #DataBreach notifications in Australia, reaching their highest levels in three years. This surge emphasises the urgent need for enhanced #cybersecurity measures. Read more here: https://ow.ly/mU2J30sHSGy

7

1 Comment

⚡ The threat actor behind #LightSpy, who we believe with a high level of confidence is associated with Chinese cyber-espionage group #APT41, has now expanded their toolset with the introduction of DeepData, a modular Windows-based surveillance framework that significantly broadens their espionage capabilities, including: - A new modular malware framework (DeepData v3.2.1228) - 12 specialized plugins for comprehensive data theft - Enhanced cross-platform surveillance capabilities, including infiltration of major messaging platforms (WhatsApp, Telegram, Signal, WeChat) - Sophisticated command-and-control infrastructure - Strategic targeting of communications platforms Full technical details, including actionable countermeasures in our latest BlackBerry Threat Research & Intelligence report: https://lnkd.in/egtyRUbK

36