Singapore SME Cyber Threats on the Rise

Singapore is a highly-connected country that consists of a strong network of Small and Medium Enterprises (SMEs). However, despite several efforts made in the past to strengthen the security of this network, these SMEs have been, and continue to be vulnerable to cyber attacks. In 2017, there was a significant rise in the cybercrimes in…

America Plays Catchup to GDPR

The United States (US) is working on its own version of the European General Data Privacy Regulation (GDPR). However, this regulation, which is currently in its drafting phase, will not constitute any laws or fines for rule-breakers. On 25th September, the US government initiated a public comment period for its initial proposal so that the…

Monetary Authority of Singapore Proposes 6 Legally Binding Cyber-Security Measures

In June 2013, the Monetary Authority of Singapore (MAS) released their Technology Risk Management Guidelines (TRM) advising Singaporean Financial Institutions’ (FI) on how to protect their systems, data, and networks from a magnitude of technology risks. The guidelines set out risk management principles & best practices standards to guide FI’s in establishing a robust technology…

IMPORTANT THREAT ALERT! MAS Guidelines– Apache Struts Vulnerability (CVE-2018-11776)

Have you deployed security updates yet?  Are you vulnerable to the recent threat? Apache Struts is a popular open-source Java-based web application framework used for developing many enterprise web applications globally. On August 22, 2018, the Apache Foundation released a critical security update for CVE-2018-1176, a remote code execution vulnerability affecting Apache Struts versions 2.3 to 2.3.34 and…

MAS ADVISORY – Recommendations on Safeguards Against Cyber Threat

The Monetary Authority of Singapore has released a circular in relation with the previous cyber attack which was disclosed on July 20, 2018. Singapore has been hit by what local media is calling the country’s “worst” cyber attack. Hackers targeting Singapore’s largest health care institution, SingHealth, stole the personal profiles of some 1.5 million patients along with the details…