Written by Steven CheahMarch 15, 2023Emails have become an essential part of our personal and professional lives and are used extensively in every organization. As a result, email is a popular attack for phishing and malware. Furthermore, email can be a conduit for the unintentional disclosure of sensitive data. Unfortunately, email infrastructure is less secure relative to other technologies, which is why email addresses can be spoofed
Written by Li WeichaoMarch 1, 2023The use of cloud technology has become a vital aspect of modern business operations, providing organizations with the ability to store, share, and access data from anywhere. However, with this convenience comes the risk of data breaches and cyber-attacks. To protect personal and business data in the cloud, it’s essential to implement robust security measures. One of the key best practices
Written by Lai Yong XingFebruary 15, 2023In William Shakespeare’s Hamlet, Act 1 Scene 3, Polonius gave his son Laertes the advice ‘This above all: to thine own self be true,’. This is advice we all can get behind, however when signing documents today your personal identity would typically get mixed up with your professional identity. What are some options available to sign documents solely, in your professional
Written by Edmund LimFebruary 1, 2023Traditional security models, for example, Defence-in-depth security architectures have generally prioritized protecting the network perimeter. However, many of today’s breaches come from within enterprises, and these strategies are failing them. Zero trust is a strategic approach to cybersecurity by eliminating implicit trust and continuously validating every state of digital interaction. Zero Trust’s goal is to reduce the danger of cyberattacks in
Written by Lisa LimJanuary 18, 2023Generally, people don’t think much about how their data is transmitted across the internet but if you’re responsible for keeping sensitive information safe, it’s important to understand how TLS/SSL works and its importance. TLS (Transport Layer Security) and SSL (Secure Sockets Layer) are protocols that provide security for communication over networks such as the internet. They use a combination of public
Written by Heide de OcampoJanuary 4, 2023The world’s most popular security protocol, SSL/TLS, is a critical part of any organization’s digital strategy. However, since 1 September 2020, Apple started reducing SSL/TLS validity to just 398 days (one year, plus roughly one month to facilitate renewals). This decision was then followed by both Google and Mozilla. These web browser makers believed in the benefits of reduced SSL Certificate
Written by Larry LeeDecember 21, 2022An asset is defined in general dictionaries as something useful or valuable. The task of any organization is to ensure that the existing IT assets meet the said criteria above. It is undeniable that any component of an organization’s IT environment has a lifecycle, be it on the software or hardware level. Before we can even start to track this specific
Written by Fareez Noor MohdDecember 7, 2022Which type of SSL would be the right fit for me between DV, OV and EV SSL? This is the exact question that will be asked from time to time among everyone that is in need of an SSL certificate. When considering which SSL certificate to buy for your website, you will have to choose between a Domain Validation (DV), Organization
Written by Harpreet Singh KangNovember 23, 2022Given the ubiquitous nature of information technology, anyone can pick up a computer, watch a tutorial, and start coding. This individual may then hone their skills via formal education or informal means such as boot camps and short courses, and eventually go on to create a career out of the skills they acquired. And despite having spent hours upon hours honing
Written by Eugene LamNovember 9, 2022I was planning to write my opinions about the breach on Optus when I read about the news that Telstra was under attack as well. In case you are unaware of what has happened, in late September 2022, Optus released a statement that it was “investigating the possible unauthorised access of current and former customers’ information”. It has been further revealed
