Connect with us

Technology

Tenable Research Uncovers Thousands of Vulnerable Cyber Assets Amongst Southeast Asia’s Financial Sector

Published

on

Over 26,500 internet-facing assets susceptible to potential exploitation

SINGAPORE, Aug. 29, 2024 /PRNewswire/ — New research conducted by Tenable®, Inc., the exposure management company, has uncovered more than 26,500 potential internet-facing assets among Southeast Asia’s top banking, financial services and insurance (BFSI) companies by market capitalisation across Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam. 

On July 15, 2024, Tenable examined the external attack surface of over 90 BFSI organisations with the largest market capitalisations across the region. The findings revealed that the average organisation possesses nearly 300 internet-facing assets susceptible to potential exploitation, resulting in a total of more than 26,500 assets across the study group.

Singapore ranked the highest among the six countries assessed, with over 11,000 internet-facing assets identified across its top 16 BFSI companies. Over 6,000 of those assets are hosted in the United States.  Next on the list is Thailand with over 5000 assets. The distribution of internet-accessible assets underscores the need for cybersecurity strategies that adapt to the rapidly evolving digital landscape.

Country

Number of internet-facing assets amongst top 90 BFSI
companies by market capitalisation

1. Singapore

11,000

2. Thailand

5,000

3. Indonesia

4,600

4. Malaysia

4,200

5. Vietnam

3,600

6. Philippines

2,600

“The results of our study reveal that many financial institutions are struggling to close the priority security gaps that put them at risk. Effective exposure management is key to closing these gaps,” said Nigel Ng, Senior Vice President, Tenable APJ. “By identifying and securing vulnerable assets before they can be exploited, organisations can better protect themselves against the growing tide of cyberattacks.”

Cyber Hygiene Gaps 
The Tenable study revealed many potential vulnerabilities and exposed several cyber hygiene issues among the study group, including outdated software, weak encryption, and misconfigurations. These vulnerabilities provide cybercriminals with easily exploitable potential entry points, posing potential risk to the integrity and security of financial data.

Weak SSL/TLS encryption
A notable finding is that among the total assets, organisations had nearly 2,500 still supporting TLS 1.0—a 25-year old security protocol introduced in 1999 and disabled by Microsoft in September 2022. This highlights the significant challenge organisations with extensive internet footprints face in identifying and updating outdated technologies.

Misconfiguration increases external exposure
Another concerning discovery was that over 4,000 assets, originally intended for internal use, were inadvertently exposed and are now accessible externally. Failing to secure these internal assets poses a significant risk to organisations, as it creates an opportunity for malicious actors to target sensitive information and critical systems.

Lack of encryption
There were over 900 assets with unencrypted final URLs, which can present a security weakness. When URLs are unencrypted, the data transmitted between the user’s browser and the server is not protected by encryption, making it vulnerable to interception, eavesdropping, and manipulation by malicious actors. This lack of encryption can lead to the exposure of sensitive information, such as login credentials, personal data, or payment details, and can compromise the integrity of the communication.

API vulnerabilities amplify risk
The identification of over 2,000 API v3 out of the total number of assets among organisations’ digital infrastructure poses a substantial risk to their security and operational integrity.

APIs serve as crucial connectors between software applications, facilitating seamless data exchange. However, inadequate authentication, insufficient input validation, weak access controls, and vulnerabilities in dependencies within API v3 implementations create a vulnerable attack surface.

Malicious actors can exploit such weaknesses to gain unauthorised access, compromise data integrity, and launch devastating cyber attacks.

“The cybersecurity landscape is evolving faster than ever, and financial institutions must evolve with it, so they can know where they are exposed and take action to close critical risk” Ng added. “By prioritising exposure management, these organisations can better protect their digital assets, safeguard customer trust, and ensure the resilience of their operations in an increasingly hostile digital environment.”

About Tenable
Tenable® is the exposure management company, exposing and closing the cybersecurity gaps that erode business value, reputation and trust. The company’s AI-powered exposure management platform radically unifies security visibility, insight and action across the attack surface, equipping modern organizations to protect against attacks from IT infrastructure to cloud environments to critical infrastructure and everywhere in between. By protecting enterprises from security exposure, Tenable reduces business risk for more than 44,000 customers around the globe. Learn more at tenable.com.

Notes to Editors:

Tenable examined the top 12-16 BFSI companies discoverable based on market cap.In the context of this alert:An asset is a domain name, subdomain, or IP addresses and/or combination thereof of a device connected to the Internet or internal network. An asset may include, but not limited to web servers, name servers, IoT devices, network printers, etc. Example: foo.tld, bar.foo.tld, x.x.x.xs.The Attack Surface is from the network perspective of an adversary, the complete asset inventory of an organisation including all actively listening services (open ports) on each asset.

 

View original content:https://www.prnewswire.com/apac/news-releases/tenable-research-uncovers-thousands-of-vulnerable-cyber-assets-amongst-southeast-asias-financial-sector-302232805.html

SOURCE Tenable

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

AI-Powered Connectivity: APAC Charts a Path to a Smarter Digital Future

Published

on

By

Asia-Pacific’s first Broadband Development Summit brings regulators and operators to Bangkok to set the agenda

BANGKOK, July 19, 2026 /PRNewswire/ — Government officials, standards bodies and telecom operators gathered in Bangkok on 14 July for the inaugural Broadband Development Summit APAC 2026, convened by the World Broadband Association (WBBA) to build consensus on AI-era networks.

Participants included the ITU, Thailand’s National Board of the Digital Economy and Society, WBBA, IAB, FNCAP, WAA, NIDA and the IPv6 Council, alongside operators Telkomsel, XLSmart, Surge, Globe, AIS, CMI and HKT and Huawei.

Denny Deng, President of Huawei Asia Pacific Carrier Business, envisions a “faster, smarter, greener” Asia-Pacific.

VOICES FROM THE SUMMIT

“To seize the opportunities of the AI era, we call on the industry to accelerate broadband evolution, advance computing-network synergy, and strengthen the cross-border connectivity. Together, let us build faster, smarter, and greener digital infrastructure for Asia-Pacific.”
— Denny Deng, President of Asia Pacific Carrier Business, Huawei

“High-speed broadband is no longer just about ‘getting online’ — it is the vital infrastructure upon which the entire AI revolution is being built. We view AI not merely as a tool, but as a primary engine for national competitiveness and a catalyst for improving the quality of life for all.”
— Wetang Phuangsup, Ph.D., Secretary-General, the National Board of the Digital Economy and Society, Thailand

“Three initiatives define the road to 2030. We must close the quality divide so the value of broadband reaches everyone. We must build AI-ready networks — 10G access, 800GE cores, intelligence end to end. And we must do it together, through shared standards.”
— Martin Creaner, Director General of WBBA

“Moving towards next-generation networks, network architectures must continue to evolve to deliver broader connectivity, superior quality, enhanced security, and greater intelligence. This evolution is essential for Net5.5G, positioning the network not simply as infrastructure, but as the foundation that enables AI, strengthens resilience and efficiency, and supports digital transformation across industries.”
— Dhruv Dhody, Industry Standardization Expert at Huawei, Chair of the IAB, IETF

“Across Asia-Pacific, fibre is extending beyond homes and offices into rooms, devices, and machines. By working together, we can accelerate fibre innovation and adoption to build truly AI-ready infrastructure.”
— Ilham Nandana, Chair of the Market Intelligence Committee, Fiber Network Council APAC (FNCAP)

“We fixed it before you feel it!  AIS is redefining premium home broadband by combining ultra-fast connectivity with AI-driven network intelligence and smart home ecosystem — delivering proactive, invisible service excellence that transforms connectivity into differentiated customer value and sustainable ARPU growth.”
— Thanit Chaiyaboonthanit, Head of Technology Department, Broadband Business, AIS

“Connecting the Unconnected: Affordable Broadband at Scale. Create equal access to global information and empower Indonesia’s digital society.”
— Shannedy Ong, CTO of Surge Indonesia

“Beyond Connectivity: Telkomsel is transforming into a true value creator. By leveraging our FBB market-leading footprint, we power growth through service excellence, customer loyalty, and a next-generation home ecosystem.”
— Stanislaus Susatyo, Director of Sales, Telkomsel Indonesia

“We stopped treating AI as an add-on feature. Instead, our approach at Globe starts with architecture, embedding intelligence into the very core of how we build, how we sell, and how we operate.
AI continuously monitors network health, customer behavior and service quality. Rather than waiting for failures, the system predicts degradation and initiates corrective actions. By maintaining minute-level awareness of network health, our systems automatically resolve 30% of all Wi-Fi issues without any human intervention.”
— Danny Theseira, Head of Broadband Business Group at Globe Telecom

“Huawei is driving the Optics-AI Synergy to foster their collaborative growth. Through AI-ON, operators could build an AI-centric all-optical target network and establish 1-5-20ms latency circles across the Asia Pacific region. AI-ON also supports efficient computing access and usage while delivering an ultimate network experience through gigabit/ultra-gigabit home broadband, accelerating the widespread adoption of AI services.”
— Kim Jin, Vice President & Chief Marketing Officer Optical Business Product Line, Huawei

“Connectivity is not just about technology. It is a lifeline, a platform for opportunity, and a driver of sustainable development. I believe the intersection of connectivity and artificial intelligence will shape the future of smarter, more resilient networks.”
— Dr. Cosmas Zavazava, Director of the Telecommunication Development Bureau, ITU

“Performance and user experience are the essential path to the next-generation WLAN. Based on standards and AI-driven innovation, let’s jointly explore the path to the future autonomous WLAN with all the stakeholders.”
— Dr. Crane H. Yang, Secretary-General, World WLAN Application Alliance (WAA)

“At the summit, NIDA and WBBA signed an MOU to accelerate next-generation network evolution and establish pioneering smart city benchmarks through the co-development of industry standards, the harmonization of global regulations, and the sharing of vertical industry insights.
NIDA focuses on advancing network architecture standards, while WBBA drives global consensus on broadband evolution. This natural strategic complementarity creates vast opportunities for future collaboration.”
— Joey Deng, Secretary-General of NIDA

“ION-2030 develops the global standard for next generation optical networks in the AI era. It provides exceptional AI application and service experience. The WBBA and ITU will jointly accelerate its development, and this is a unique opportunity for Asia-Pacific stakeholders to actively influence the future of optical broadband networks.”
— Dr. Marcus Brunner, Chief Expert Standardization, WBBA WG1 Chair and Vice-Chair of ETSI ISG F5G

“The transition into the AI era demands a high-quality, deterministic digital foundation. By releasing Net5.5G policy guidelines, Malaysia is accelerating the evolution of next-generation network standards based on IPv6, establishing an innovative infrastructure to unleash AI’s value and drive a prosperous digital economy for 2030.”
— Prof. Sureswaran Ramadass, Chair of APAC at IPv6 Council, Industry Partner of WBBA

“The digital economy is thriving across the Asia-Pacific region, with AI emerging as a core catalyst for intelligent transformation. China Mobile International (CMI) is driving regional growth by integrating China’s advanced AI capabilities with comprehensive communications, computing, and AI services. Moving forward, CMI will collaborate closely with industry partners to foster a shared, AI-driven future for the region.”
— Paul Lin, Managing Director of Commercial and Technology, Asia Pacific, China Mobile International

“Next-generation network infrastructure is the oxygen of the intelligent economy. By integrating cutting-edge 800G connectivity with quantum-safe security, HKT is laying the essential foundations to keep Hong Kong’s enterprises highly competitive, secure, and ready for the computing paradigm shifts of tomorrow.”
— Wilson Cheung, Vice President, Broadband Design & Cyber Security, HKT

“The evolution toward Net5.5G AI WAN is an important step in strengthening XLSMART’s transport network for the future. By progressively adopting AI-assisted operations, SRv6, SDN, service differentiation, and higher-capacity transport infrastructure, we are enhancing network intelligence, operational efficiency, and service resilience while supporting long-term sustainability. This transformation is a continuous journey that aligns with the industry’s vision of AI-native broadband networks. Through collaboration with our technology partners and the broader ecosystem, we will continue to develop capabilities that deliver better network performance and support Indonesia’s growing digital connectivity needs.”
— Regie Ginanjar, Head of Transport Autonomy & Orchestration, Transport Network Transformation, XLSMART

“For the AI era, Huawei upgrades the IP bearer network via security resilience, multi-dimensional awareness, and network autonomy. This empowers carriers to guarantee service experience, accelerate monetization, and enhance efficiency, ushering in a new chapter of intelligent connectivity.”
— Arthur Wang, Vice President of Data Communication Product Line, Huawei

A CONVERGING VIEW

Speakers agreed AI is shifting networks from connectivity to intelligent connectivity, as broadband, IP, computing and cross-border infrastructure converge to support innovation and coordination.

WBBA launched the AI-Net Certification, a global benchmark for national policy, industrial ecosystems and network intelligence. XLSmart was named first AI-Net Champion, and Indonesia was among the first with a certified operator, backed by its Net5.5G roadmap.

In another high-profile segment, WBBA Director General Martin Creaner presented the Gigacity Certification to KOMDIGI, SURGE, Telkomsel, AIS, TRUE, HKT and Globe, recognizing regional broadband pioneers.

 

View original content to download multimedia:https://www.prnewswire.com/apac/news-releases/ai-powered-connectivity-apac-charts-a-path-to-a-smarter-digital-future-302829032.html

SOURCE HUAWEI

Continue Reading

Technology

Laifen Expands U.S. Retail Footprint with Costco Launch of Best-Selling SE Hair Dryer

Published

on

By

Starting July 18, Costco Members Can Shop Laifen’s Award-Winning Hair Dryer in Select Warehouse Locations Across the U.S.

NEW YORK, July 18, 2026 /PRNewswire/ — Laifen, ranked the world’s No.1 high-speed hair dryer brand, today announced the launch of its best-selling SE High-Speed Hair Dryer at select Costco warehouse locations, marking the brand’s largest U.S. retail expansion to date and bringing its award-winning haircare technology to Costco members across select U.S. markets.

The launch brings Laifen’s award-winning haircare technology to Costco, making it easier for consumers to experience the brand through one of the nation’s leading membership retailers. Laifen joins Costco’s growing portfolio of premium beauty and personal care brands. The initial rollout includes select Costco warehouse locations across the United States, with a strong presence across the Western U.S., including California, the Pacific Northwest and the Southwest.

Costco’s reputation for quality and its highly selective merchandising approach make this partnership especially meaningful. The Costco launch reflects Laifen’s continued expansion beyond direct-to-consumer channels as the brand accelerates its U.S. omnichannel retail strategy. “Costco represents an important milestone in our U.S. retail strategy,” said Romeo, General Manager of International Business of Laifen. “As more consumers seek salon-quality performance at an accessible price, we’re excited to make Laifen available through one of America’s most trusted retailers.”

Engineered to deliver professional-level performance in a sleek, lightweight design, the Laifen SE is powered by the brand’s proprietary high-speed brushless motor, delivering fast drying, reduced heat damage and smoother styling. An intelligent temperature control system continuously monitors airflow to help minimize frizz while protecting hair from excessive heat.

The Costco launch represents the next phase of Laifen’s U.S. retail expansion as the brand continues to grow beyond its direct-to-consumer and online channels. By expanding into one of the nation’s most trusted retailers, Laifen aims to broaden access to its category-disrupting haircare solutions while advancing its mission to bring more thoughtful design and everyday excellence into more homes.

The Laifen SE High-Speed Hair Dryer in White will be available at select Costco locations, while Costco.com shoppers will have access to additional color options including Purple and Pink, alongside the White model.

For more information on Laifen, please visit LaifenTech.com.

About Laifen: 

Founded in 2019, Laifen is a global personal care technology brand combining high-performance engineering with modern design across hair care, oral care, and grooming categories. Ranked the world’s No. 1 high-speed hair dryer brand by Euromonitor International, Laifen first gained recognition for its self-developed 110,000 RPM high-speed brushless motor, the proprietary technology behind its award-winning hair dryers.

Building on this innovation, Laifen has expanded its portfolio to include electric toothbrushes and shavers, delivering premium technology and elevated everyday experiences to consumers worldwide. Today, Laifen products and accessories are used by over 22 million households across more than 60 countries, supported by more than 600 patents and recognized with over 50 international design and innovation awards. Driven by continuous technological breakthroughs, Laifen is committed to making cutting-edge personal care technology more accessible to consumers around the world.

View original content to download multimedia:https://www.prnewswire.com/news-releases/laifen-expands-us-retail-footprint-with-costco-launch-of-best-selling-se-hair-dryer-302828573.html

SOURCE Laifen

Continue Reading

Technology

Pillsbury Notice of Data Breach

Published

on

By

NEW YORK, July 18, 2026 /PRNewswire/ — Pillsbury Winthrop Shaw Pittman LLP (“Pillsbury”) was among many law firms targeted by sophisticated social engineering attempts in an incident last year. While the firm quickly detected and blocked the activity, an unauthorized actor was able to access some of the firm’s documents during a short window of time. Pillsbury notified any impacted clients last year and undertook a detailed process to review the accessed documents for personal information. Pillsbury then began notifying individuals whose personal information was affected. That process is now complete, and today, Pillsbury is publishing substitute notice as a final step.

For more information, please visit the substitute notice on our website at https://www.pillsburylaw.com/en/breach-notice.html

View original content to download multimedia:https://www.prnewswire.com/news-releases/pillsbury-notice-of-data-breach-302828892.html

SOURCE Pillsbury Winthrop Shaw Pittman LLP

Continue Reading

Trending