Michael Hill - Author - Channel Asia

Sharing sensitive business data with ChatGPT could be risky

ChatGPT and similar large language models learn from the data you put in — and there are big risks in sharing sensitive business information with AI chatbots.

UK bans TikTok on government devices over data security fears

The UK has joined international partners in banning social media app TikTok from government electronic devices over concerns the Chinese-owned app could pose a security risk.

GitHub begins 2FA rollout for code contributors

GitHub’s 2FA rollout seeks to enhance the security of developer accounts and protect the software supply chain.

Darktrace launches AI-driven vulnerability detection, alert system Newsroom

Newsroom uses AI-assisted knowledge of a customer’s external attack surface to measure exposure to detected vulnerabilities and provides a summary of exploits, affected software and assets.

Open Systems launches Ontinue MDR division, new MXDR service Ontinue ION

Ontinue ION promises faster detection and response, deeper understanding of customer’s environments, and the ability to maximise Microsoft security investments.

HTML smuggling campaigns impersonate well-known brands to deliver malware

Researchers cite an increased prevalence of HTML smuggling activity including impersonation of brands such as Adobe Acrobat, Google Drive, and the US Postal Service.

Cohesity Data Cloud 7.0 enhances privileged access authentication, ransomware recovery

Data security and management vendor Cohesity has announced the 7.0 software release of its Cohesity Data Cloud platform.

Microsoft attributes Charlie Hebdo attacks to Iranian nation-state threat group

NEPTUNIUM group claims access to the personal information of more than 200,000 Charlie Hebdo customers and uses sock puppet accounts to taunt France’s cyber security sector.

New 'MITRE ATT&CK-like' framework outlines software supply chain attack TTPs

The OSC&R Framework aims to help security professionals better understand and measure software supply chain risk.

IoT, connected devices biggest contributors to expanding application attack surface

The growth of the internet of things and connected devices are the biggest contributing factors to organisations’ expanding attack surfaces.

Threat actors abuse Microsoft’s “verified publisher” status to exploit OAuth privileges

Proofpoint discovers threat actors targeting verified status in the Microsoft environment to abuse OAuth privileges and lure users into authorising malicious apps.

Perception Point launches Advanced Threat Protection for Zendesk

Perception Point says new platform has been built to help protect vulnerable help desks and customer support teams from external threats such as malicious content within tickets.

European data protection authorities issue record €2.92B in GDPR fines

DLA Piper’s GDPR and Data Breach survey shows a 168 per cent increase in fines in the last 12 months.

Royal ransomware group actively exploiting Citrix vulnerability

At-Bay cyber research team believes the Royal ransomware group is actively exploiting critical Citrix system security flaw CVE-2022-27510.

MTTR “not a viable metric” for complex software system reliability and security

MTTR isn’t a viable metric for measuring the reliability or security of complex software systems and should be replaced by other, more trustworthy options.

Stories by Michael Hill