View large More details
Blog, Endpoint Security Blog, LOGON Blog, Patch Management Blog

Accelerating Patch Management: The 48-Hour Rule and NIST Guidelines

Learn about the “48-Hour Rule” of patch management, showing the urgency to address vulnerabilities before exploitation occurs. Organizations must implement strategies like real-time visibility, automation, and testing to ensure rapid and safe patch deployment. It also references NIST guidelines for effective patch management and stresses the importance of updating firmware to mitigate risks. LOGON Software Asia provides solutions that help organizations manage vulnerabilities proactively, with automation being key to staying ahead of cyber threats.

Read More
View large More details
Application Security Blog, Blog, LOGON Blog, SaaS Procurement and Management Blog, Software License Management Blog

Navigating Hong Kong’s New Cybersecurity Law (CI Bill): What to Do Next

Learn about Hong Kong’s Protection of Critical Infrastructures (Computer Systems) Bill ( the “CI Bill”), effective January 1, 2026. It mandates critical infrastructure operators to strengthen cybersecurity measures, report incidents, and comply with various obligations. Organizations should assess their status as critical operators, allocate resources, conduct gap analyses, and enhance cyber resilience. LOGON Software Asia offers tailored solutions and support to help businesses navigate these new regulations effectively.

Read More
View large More details
Blog, Identity and Access Management Blog, LOGON Blog

“Banana Bait” – Click the Links, Fall for Scams: How Hong Kong is Battling Cyber Scams with Smart Identity and Access Management

In response to a surge in cyber scams, Hong Kong has launched an innovative public awareness campaign featuring the “despicable banana” to educate residents about online threats. The campaign, titled “Click the Links, Fall for Scams!”, highlights the critical need for vigilance and the implementation of effective Identity and Access Management (IAM) solutions. With over 44,000 scam cases reported in 2024 alone, organizations must equip themselves with robust IAM strategies to safeguard sensitive information and combat the evolving threat landscape. LOGON Software Asia offers comprehensive IAM solutions designed to empower organizations in managing identities, controlling access, and enhancing overall security.

Read More
View large More details
Blog, Endpoint Security Blog, LOGON Blog

ConvoC2: A Red Teamer’s Tool to Exploit Microsoft Teams for Remote Command Execution

On December 15, 2024, cybersecurity enthusiasts and professionals were introduced to ConvoC2, a stealthy Command-and-Control (C2) infrastructure tool tailored for Red Team operations. ConvoC2 reveals how cyber attackers can exploit trusted collaboration platforms like Microsoft Teams to execute system commands remotely on compromised systems. This innovative tool underscores the vulnerabilities within widely adopted collaboration tools, posing new security challenges for organizations.

Read More
View large More details
Blog, Identity and Access Management Blog, LOGON Blog, Phishing Attack, Ransomware, Zero Trust Security Blog

The New Fileless Remcos RAT Malware

Cybercriminals are now leveraging an Excel vulnerability (CVE-2017-0199) in a recent phishing campaign to deliver a fileless variant of Remcos RAT. This malware allows attackers to remotely control infected systems and steal sensitive data by deploying the RAT directly into memory, bypassing traditional detection methods.

Read More
View large More details
Data Security Blog, LOGON Blog, Ransomware, Security Compliance, Threat Intelligence.

Over 470,000 Personal Data at risk: Data Breach at Oxfam Local Hong Kong

Oxfam Hong Kong recently fell victim to a cyberattack that potentially compromised the personal data of over 470,000 individuals, including donors and participants of its popular Trailwalker event from 15 to 17 November. Cyberattacks can exploit system weaknesses, such as outdated security protocols, insufficient firewall protection, or employees’ inadvertent opening of phishing emails. Once inside, cybercriminals can gain access to a wealth of personal and financial data, leading to devastating consequences.

Read More
View large More details
Iron Software Blog, Webinar

Iron Software Webinar | Scale Secure Document Services with IronSecureDoc: A One-Time Investment Solution

Join us for the grand launch of Iron Software’s latest new product, IronSecureDoc. IronSecureDoc is designed to enhance your data protection without ongoing SaaS costs. This session will cover IronSecureDoc‘s key features and benefits, demonstrate its integration capabilities, and explain how this cost-effective approach can seamlessly integrate with your existing IT infrastructure. Don’t miss the opportunity to learn how IronSecureDoc can help safeguard your business information efficiently and economically.

Read More
← Older Posts
Newer Posts →