Privasec Content

New Rules for the Financial Sector in Singapore – MAS Third Party Risk Management Directive

The ripple effect from Russia-linked SolarWinds hack has reached the banking shores of Singapore. The Monetary Authority of Singapore (MAS) is issuing a third-party risk management directive that requires all financial institutions to assess and manage their exposure to technology risks with third-party suppliers, before entering into a contractual agreement. What does this actually mean […]

New Rules for the Financial Sector in Singapore – MAS Third Party Risk Management Directive Read More »

CVE-2020-3977: VMware Horizon DaaS Broken Authentication (MFA Bypass)

Not long ago, I assisted a client of ours with a penetration test of their VMware Horizon remote access solution and discovered a vulnerability affecting how it handles Multi-Factor Authentication (MFA). As a result, with a compromised user account password, I could gain access to the organisations internal network from the internet, bypassing the MFA requirement. In this blog, I’ll provide a high-level summary and explain how I identified and exploited the vulnerability.

CVE-2020-3977: VMware Horizon DaaS Broken Authentication (MFA Bypass) Read More »

Long-Term Cyber Hygiene Practices | Privasec

Ensure business continuity via long-term Cyber Hygiene practices

Written by Breton Chan, Privasec’s Marketing Executive

How prepared is your business for upcoming challenges in the digital landscape?

In recent research data released by the Ponemon Institute and IBM Security, cyber crimes accounted for 18.6% of all crime in Singapore. The average cost of a data breach per organisation in the ASEAN bloc sits at about S$2.7m, with the time taken to identify and subsequently contain an attack clocking in at 287 days; this is an increase from 2019, when the average cost and response time were about S$2.6m and 259 days respectively.

Ensure business continuity via long-term Cyber Hygiene practices Read More »

Fireworks over Singapore city skyline, Singapore, Singapore

Singapore’s Safer Cyber Space Masterplan 2020

Singapore’s Safer Cyberspace Masterplan 2020 builds on the second Pillar of the 2016 Singapore Cybersecurity Strategy and outlines a plan towards the creation of a safer and more secure cyberspace in Singapore. The Cyber Security Agency of Singapore (CSA) has developed this Masterplan in consultation with the cybersecurity industry and academia, to raise the general level of

Singapore’s Safer Cyber Space Masterplan 2020 Read More »

Scroll to Top