Connect with us

Technology

Tenable Research Uncovers Thousands of Vulnerable Cyber Assets Amongst Southeast Asia’s Financial Sector

Published

2 years ago

on

Over 26,500 internet-facing assets susceptible to potential exploitation

SINGAPORE, Aug. 29, 2024 /PRNewswire/ — New research conducted by Tenable®, Inc., the exposure management company, has uncovered more than 26,500 potential internet-facing assets among Southeast Asia’s top banking, financial services and insurance (BFSI) companies by market capitalisation across Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam. 

On July 15, 2024, Tenable examined the external attack surface of over 90 BFSI organisations with the largest market capitalisations across the region. The findings revealed that the average organisation possesses nearly 300 internet-facing assets susceptible to potential exploitation, resulting in a total of more than 26,500 assets across the study group.

Singapore ranked the highest among the six countries assessed, with over 11,000 internet-facing assets identified across its top 16 BFSI companies. Over 6,000 of those assets are hosted in the United States.  Next on the list is Thailand with over 5000 assets. The distribution of internet-accessible assets underscores the need for cybersecurity strategies that adapt to the rapidly evolving digital landscape.

Country

Number of internet-facing assets amongst top 90 BFSI
companies by market capitalisation

1. Singapore

11,000

2. Thailand

5,000

3. Indonesia

4,600

4. Malaysia

4,200

5. Vietnam

3,600

6. Philippines

2,600

“The results of our study reveal that many financial institutions are struggling to close the priority security gaps that put them at risk. Effective exposure management is key to closing these gaps,” said Nigel Ng, Senior Vice President, Tenable APJ. “By identifying and securing vulnerable assets before they can be exploited, organisations can better protect themselves against the growing tide of cyberattacks.”

Cyber Hygiene Gaps 
The Tenable study revealed many potential vulnerabilities and exposed several cyber hygiene issues among the study group, including outdated software, weak encryption, and misconfigurations. These vulnerabilities provide cybercriminals with easily exploitable potential entry points, posing potential risk to the integrity and security of financial data.

Weak SSL/TLS encryption
A notable finding is that among the total assets, organisations had nearly 2,500 still supporting TLS 1.0—a 25-year old security protocol introduced in 1999 and disabled by Microsoft in September 2022. This highlights the significant challenge organisations with extensive internet footprints face in identifying and updating outdated technologies.

Misconfiguration increases external exposure
Another concerning discovery was that over 4,000 assets, originally intended for internal use, were inadvertently exposed and are now accessible externally. Failing to secure these internal assets poses a significant risk to organisations, as it creates an opportunity for malicious actors to target sensitive information and critical systems.

Lack of encryption
There were over 900 assets with unencrypted final URLs, which can present a security weakness. When URLs are unencrypted, the data transmitted between the user’s browser and the server is not protected by encryption, making it vulnerable to interception, eavesdropping, and manipulation by malicious actors. This lack of encryption can lead to the exposure of sensitive information, such as login credentials, personal data, or payment details, and can compromise the integrity of the communication.

API vulnerabilities amplify risk
The identification of over 2,000 API v3 out of the total number of assets among organisations’ digital infrastructure poses a substantial risk to their security and operational integrity.

APIs serve as crucial connectors between software applications, facilitating seamless data exchange. However, inadequate authentication, insufficient input validation, weak access controls, and vulnerabilities in dependencies within API v3 implementations create a vulnerable attack surface.

Malicious actors can exploit such weaknesses to gain unauthorised access, compromise data integrity, and launch devastating cyber attacks.

“The cybersecurity landscape is evolving faster than ever, and financial institutions must evolve with it, so they can know where they are exposed and take action to close critical risk” Ng added. “By prioritising exposure management, these organisations can better protect their digital assets, safeguard customer trust, and ensure the resilience of their operations in an increasingly hostile digital environment.”

About Tenable
Tenable® is the exposure management company, exposing and closing the cybersecurity gaps that erode business value, reputation and trust. The company’s AI-powered exposure management platform radically unifies security visibility, insight and action across the attack surface, equipping modern organizations to protect against attacks from IT infrastructure to cloud environments to critical infrastructure and everywhere in between. By protecting enterprises from security exposure, Tenable reduces business risk for more than 44,000 customers around the globe. Learn more at tenable.com.

Notes to Editors:

Tenable examined the top 12-16 BFSI companies discoverable based on market cap.In the context of this alert:An asset is a domain name, subdomain, or IP addresses and/or combination thereof of a device connected to the Internet or internal network. An asset may include, but not limited to web servers, name servers, IoT devices, network printers, etc. Example: foo.tld, bar.foo.tld, x.x.x.xs.The Attack Surface is from the network perspective of an adversary, the complete asset inventory of an organisation including all actively listening services (open ports) on each asset.

 

View original content:https://www.prnewswire.com/apac/news-releases/tenable-research-uncovers-thousands-of-vulnerable-cyber-assets-amongst-southeast-asias-financial-sector-302232805.html

SOURCE Tenable

Related Topics:
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

Greater San Diego Science and Engineering Fair Students Win Big at the 75th California Science and Engineering Fair

Published

3 hours ago

on

April 26, 2026

By

SAN DIEGO, April 26, 2026 /PRNewswire/ — The 75th California Science and Engineering Fair (CSEF) took place April 11–12 at California Lutheran University in Thousand Oaks, bringing together 900 of the best of 1st place winners from regional competitions covering 58 counties across the state, including the Greater San Diego Science and Engineering Fair (GSDSEF). GSDSEF students earned 40 awards at the event, including two of only six highly coveted spots to the prestigious Regeneron International Science and Engineering Fair (ISEF). Seven students earned 1st Place awards in the categories of Biochemistry and Molecular Biology, Chemistry, Cognitive Science, Microbiology, Physics and Astronomy, and Zoology. In addition, one student won the Saban Family Foundation Scholar Prize, while another won the South Coast AQMD Air Quality Award and A&WMA Environmental Leadership Award. CSEF is the oldest science fair west of the Mississippi River and the highest level competition in the state.

Top winners were:

Arya Bhatt, Grade 7, Oak Valley Middle School, South Coast AQMD Air Quality Award, A&WMA Environmental Leadership Award, “Context Aware Real Time Air Quality Prediction Using Machine Learning”.

Joie Green, Grade 8, Muirlands Middle School, 1st Place, “Soon I will be Invisible: How to Direct Energy with Topological Metamaterials”.

Maggie Hao, Grade 10, The Bishop’s School, 1st Place, “Harnessing Tardigrade Genes to Enhance Bacterial Biosensors for Heavy Metal Pollutant Detection”.

Uma Kattamuri, Grade 7, Oak Valley Middle School, 1st Place, “Elevated CO2 During Kalanchoe pinnata Growth Reveals Enhanced Antiproliferative and Synergistic Therapies”.

Sonika Dhenuva Konda, Grade 11, Del Norte High School, Saban Family Foundation Scholar Prize, “Adaptive Swarm Coordination for Wildfire Control via Q-Learning Tuned PSO with Quantum-Inspired Coupling”.

Emma Liu, Grade 11, The Bishop’s School, ISEF Finalist, 1st Place, “Defining 3D Phenotypic Cell States of Polymorphonuclear Neutrophils via Novel Computational Pipeline”.

Sharvi Mahajan, Grade 8, Bernardo Heights Middle School, 1st Place, “Evaluating Predictive EEG Theta/Beta Features in Adult ADHD via Machine Learning”.

Sydney O’Donnell, Grade 8, The Rhoades School, 1st Place, TFJIC, “Effects of Marigold Versus Chlorella Supplementation on Yolk Lutein Content”.

Ihan Sung, Grade 11, Eastlake High School, ISEF Finalist, 1st Place, “Renewable Ammonia Electrochemical Synthesis by Glow Discharge with an Iron Based Catalyst”.

Full results and project showcase available online.

About the GSDSEF

Since 1955, the Greater San Diego Science and Engineering Fair (GSDSEF) has provided an inspiring experience in science and engineering for tens of thousands of San Diego and Imperial County students, motivating them to pursue careers in science, technology, engineering, and mathematics. This regional competition challenges students to go beyond classroom studies to do independent research – to ask compelling questions, to design and implement innovative solutions, and to present and defend results to judges who are professionals in their fields. The GSDSEF brings together 800 of the best middle and high school students, 400+ judges who are professionals in their fields and over 60 professional societies and organizations, with $40k in prizes awarded.

The GSDSEF fosters creativity and innovation through inquiry, celebrates students’ STEM achievements, and showcases how young minds can make an impact in the present and future. Many of these student scientists are conducting world-class research and conducting groundbreaking experiments in fields ranging from Astronomy to Zoology, such as the discovery of cures for diseases, formulations of new vaccines, cancer research, applying AI to enhance medical diagnoses, using biomimicry for water conservation, novel drone technology, advances in micro robotics and autonomous driving technology. The GSDSEF is the highest-level STEM competition in the region and one of the oldest, most respected and competitive in the world. The GSDSEF is a 501(c)(3) organization. Learn more at gsdsef.org and follow us on LinkedIn and Instagram.

Copyright © 2026 Greater San Diego Science and Engineering Fair. All rights reserved.

Media Contact:
Sany Zakharia
sany.zakharia@gsdsef.org

View original content to download multimedia:https://www.prnewswire.com/news-releases/greater-san-diego-science-and-engineering-fair-students-win-big-at-the-75th-california-science-and-engineering-fair-302753744.html

SOURCE Greater San Diego Science and Engineering Fair

Continue Reading

Technology

Innowise Named to 2026 CRN Tech Elite 250 List By The Channel Company

Published

6 hours ago

on

April 26, 2026

By

WARSAW, Poland, April 26, 2026 /PRNewswire-PRWeb/ — Innowise has officially secured a position on CRN’s 2026 Tech Elite 250. This annual ranking identifies IT solution providers across the US and Canada that have achieved top-tier status within the partner programs of the industry’s leading technology vendors. The inclusion follows a period of verified growth in technical proficiency and a focus on high-impact engineering.

“Innowise concentrates on creating scalable, resilient architectures that produce measurable benefits for our clients. The honor of being recognized by CRN highlights the commitment of our experts to maintain high standards in highly competitive markets,” said Dmitry Nazarevich, CTO at Innowise.

About the Tech Elite 250

The Tech Elite 250 is a directory of companies recognized as having the highest level of partnership and certifications within the global IT ecosystem. In order to reach the final list, the provider must hold the most advanced technical credentials from vendors like AWS, Cisco, Dell, HPE, IBM, Intel, Nutanix, and Nvidia.

This directory serves as a verified ledger for enterprise clients who need to orchestrate complex hardware and software stacks without letting legacy environments rot. Holding these certifications is mandatory to stop the cash bleed caused by inefficient infrastructure and unoptimized cloud usage.

About Innowise

Founded in 2007, Innowise is a global software engineering and IT consulting center. The company is focused on developing high-value technologies, including artificial intelligence, data engineering, and cloud computing. Innowise crafts technological solutions for companies across 40+ domains in order to assist them in updating, creating, and modernizing their digital ecosystems.

Innowise specializes in using established technologies and modular approaches to enable organizations to expand or shift their operations while retaining complete control over all their physical and intangible assets.

Media Contact

Lizaveta Piaskova, Innowise, 48 48 787 027 706, lizaveta.piaskova@innowise.com, innowise.com

View original content to download multimedia:https://www.prweb.com/releases/innowise-named-to-2026-crn-tech-elite-250-list-by-the-channel-company-302751951.html

SOURCE Innowise

Continue Reading

Technology

Neusoft Showcases Full-Stack & Global Innovations at Auto China 2026

Published

9 hours ago

on

April 26, 2026

By

BEIJING, April 26, 2026 /PRNewswire/ — At Auto China 2026, Neusoft Corporation hosted a press conference on April 25th and announced three key strategic moves: the iteration of Neusoft OneCoreGo® Global In-Vehicle Intelligent Mobility Solution 7.0, the launch of Neusoft NAGIC.AI Cockpit Software Platform, and the strategic upgrade of its subsidiary, Neusoft Smart Go. By leveraging full-stack technology and a global ecosystem to drive innovation and empowerment, Neusoft is transforming vehicles into proactive, connected and collaborative mobile intelligent spaces.

OneCoreGo® Global In-Vehicle Intelligent Mobility Solution 7.0: An Evolved AI Companion for Global Intelligent Mobility

Intelligent mobility requires proactive perception, scenario integration, and global connectivity to meet personalized user needs and complex driving scenarios. Neusoft, whose products cover over 130 countries and regions worldwide, addresses these challenges with its OneCoreGo® Global In-Vehicle Intelligent Mobility Solution 7.0 through AI-driven innovation and global ecosystem collaboration. Powered by One Mate’s cross-agent collaboration and a sub-product matrix including One Map, One Sight, One Cloud, One Pay, One Store, One Link, and One Guard, the solution delivers full-link global mobility services spanning navigation, in-cabin AR, payment, app ecosystem services, connectivity and security. By breaking down functional silos, it streamlines multi-step operations into a single “depart” command, leveraging full-stack AI technology across perception, decision-making, interaction, and execution processes.

Guan Xin, Vice President of Neusoft and General Manager of Neusoft Automotive Innovative Solutions Division, said, “Adhering to the core principles of AI and globalization, OneCoreGo® 7.0 keeps innovating, evolving into a globally intelligent mobility companion that truly understands user needs.”

To enhance driving safety and mobility efficiency, OneCoreGo® 7.0 has also comprehensively upgraded its sub-products: One Map Global Navigation newly introduces 3D city effects, 3D lane-level maps, and traffic light guidance, offering dedicated solutions for two-wheelers and commercial vehicles as well. One Sight AR For Car improves navigation display effects, reducing instances of taking wrong routes. One Pay In-Vehicle Payment achieves over 90% payment coverage for parking services across core European cities. Combined with One Cloud’s global compliance cloud monitoring platform and One Guard’s full-stack vehicle networking security services, it creates a truly comprehensive OneCoreGo® Global In-Vehicle Intelligent Mobility Solution.

Neusoft NAGIC.AI Cockpit Software Platform: Dual-track Architecture for AI Integration in Every Vehicle

Amid the AI-driven transformation of the automotive industry, the market faces two challenges: limited computing power in legacy vehicles and high adaptation difficulties for next-gen models. Neusoft’s NAGIC.AI Cockpit Software Platform adopts a flexible “distributed + centralized” dual-track architecture approach. For existing vehicle models, it introduces the AI BOX solution, rapidly boosting computing power via external AI computing units, significantly reducing upgrade costs and timelines. For new vehicle models built on next-gen central computing platforms, Neusoft provides a full-stack AI cockpit software product suite, meeting automakers’ stringent requirements for system stability, reliability, and full-domain control.

Pang Hongyan, Vice President of Neusoft and General Manager of the Automotive Intelligent Software Division, said, “Our dual-track architecture enables every vehicle to embrace AI and enjoy an intelligent future. Both existing models and new-generation vehicles can find the most suitable path to intelligentization.”

Moreover, Neusoft’s NAGIC.AI Cockpit Software Platform features scenario-based, human-centric AI Agents seamlessly integrating driving safety, occupant care services, intelligent assisted driving and in-cabin entertainment. Neusoft also collaborates with global ecosystem partners to drive intelligent upgrades of in-cabin interaction products, fostering a more open and dynamic intelligent cockpit ecosystem.

Strategic Upgrade of Neusoft Smart Go: A World-leading Provider of Full-Domain Upper-Body Electronics Solutions for Intelligent Vehicles

Aligning with the trend of E/E architecture evolution from distributed control to “central computing + zonal control”, Neusoft Smart Go, a subsidiary of Neusoft in the field of intelligent vehicle connectivity, has completed a strategic upgrade, aiming to become a global leader in full-domain upper-body electronics solutions for intelligent vehicles.

This strategic upgrade positions Neusoft Smart Go to focus on full-domain scenarios in upper-body electronics, building a product matrix covering full-category in-vehicle electronics solutions, including central computing platforms, cockpit-driving-parking integration, intelligent cockpits, intelligent communications, intelligent audio systems, and zonal control units, and pioneering the integration of large model algorithms.

Jian Guodong, Senior Vice President of Neusoft and CEO of Neusoft Smart Go, said, “This strategic upgrade represents a significant leap from partial focus to comprehensive layout. Through our dual-track strategy of high-end cutting-edge solutions and mature standardized products, we can flexibly meet the mass production needs of vehicle models across different regions and price segments worldwide.” Neusoft Smart Go will provide mass-producible, adaptable hardware-software integrated solutions, empowering global automakers in achieving intelligent transformation.

Neusoft’s President, Mr.Gai Longjia stated, “In the future, Neusoft Smart Go will create stronger synergy with Neusoft Corporation by sharing internal technologies and capabilities while responding jointly to external demands. This specialized yet collaborative model will preserve business unit’s agility and expertise while enhancing Neusoft’s full-stack technological advantages.”

As a trusted partner in a smarter world, Neusoft is committed to collaborating with global automakers and ecosystem partners to build an open and inclusive intelligent automotive community together for the future of global mobility.

For more information about Neusoft, please visit www.neusoft.com.

 

View original content:https://www.prnewswire.com/apac/news-releases/neusoft-showcases-full-stack–global-innovations-at-auto-china-2026-302753701.html

SOURCE Neusoft Corporation

Continue Reading

Trending