View large More details
Blog, EASM Blog, LOGON Blog

When Visibility Ends, Risk Begins: How A Bank Took Control of Its Digital Footprint with EASM

For most banking companies in the APAC region, digital transformation isn’t just a buzzword—it is their reality.

As a growing number of banks shift operations to the cloud, partner with innovative fintech providers, and enable a fully remote workforce, everything looks promising: scalable infrastructure, customer convenience, and operational agility. However, beneath this promising surface, security is struggling to keep up.

Read More
View large More details
Blog, Portswigger Blog

Q&A from The Future of AppSec Webinar | PortSwigger

Originally published by PortSwigger. Portswigger recently wrapped up their biggest-ever webinar, The Future of AppSec: PortSwigger’s Vision, with thousands of security professionals tuning in live; the questions came thick and fast. Q&A topics range from on-prem deployments of Burp Suite DAST to AI models and product roadmaps. Whether you’re curious about how Burp AI works behind the scenes, Burp Suite DAST support, or just wondering what’s next for Burp Suite, this Q&A is for you.

Read More
View large More details
Blog, Endpoint Security Blog, LOGON Blog, Patch Management Blog

Accelerating Patch Management: The 48-Hour Rule and NIST Guidelines

Learn about the “48-Hour Rule” of patch management, showing the urgency to address vulnerabilities before exploitation occurs. Organizations must implement strategies like real-time visibility, automation, and testing to ensure rapid and safe patch deployment. It also references NIST guidelines for effective patch management and stresses the importance of updating firmware to mitigate risks. LOGON Software Asia provides solutions that help organizations manage vulnerabilities proactively, with automation being key to staying ahead of cyber threats.

Read More
View large More details
Application Security Blog, Blog, LOGON Blog, SaaS Procurement and Management Blog, Software License Management Blog

Navigating Hong Kong’s New Cybersecurity Law (CI Bill): What to Do Next

Learn about Hong Kong’s Protection of Critical Infrastructures (Computer Systems) Bill ( the “CI Bill”), effective January 1, 2026. It mandates critical infrastructure operators to strengthen cybersecurity measures, report incidents, and comply with various obligations. Organizations should assess their status as critical operators, allocate resources, conduct gap analyses, and enhance cyber resilience. LOGON Software Asia offers tailored solutions and support to help businesses navigate these new regulations effectively.

Read More
View large More details
Blog, Identity and Access Management Blog, LOGON Blog

“Banana Bait” – Click the Links, Fall for Scams: How Hong Kong is Battling Cyber Scams with Smart Identity and Access Management

In response to a surge in cyber scams, Hong Kong has launched an innovative public awareness campaign featuring the “despicable banana” to educate residents about online threats. The campaign, titled “Click the Links, Fall for Scams!”, highlights the critical need for vigilance and the implementation of effective Identity and Access Management (IAM) solutions. With over 44,000 scam cases reported in 2024 alone, organizations must equip themselves with robust IAM strategies to safeguard sensitive information and combat the evolving threat landscape. LOGON Software Asia offers comprehensive IAM solutions designed to empower organizations in managing identities, controlling access, and enhancing overall security.

Read More
View large More details
Blog, Endpoint Security Blog, LOGON Blog

ConvoC2: A Red Teamer’s Tool to Exploit Microsoft Teams for Remote Command Execution

On December 15, 2024, cybersecurity enthusiasts and professionals were introduced to ConvoC2, a stealthy Command-and-Control (C2) infrastructure tool tailored for Red Team operations. ConvoC2 reveals how cyber attackers can exploit trusted collaboration platforms like Microsoft Teams to execute system commands remotely on compromised systems. This innovative tool underscores the vulnerabilities within widely adopted collaboration tools, posing new security challenges for organizations.

Read More
View large More details
Blog, Identity and Access Management Blog, LOGON Blog, Phishing Attack, Ransomware, Zero Trust Security Blog

The New Fileless Remcos RAT Malware

Cybercriminals are now leveraging an Excel vulnerability (CVE-2017-0199) in a recent phishing campaign to deliver a fileless variant of Remcos RAT. This malware allows attackers to remotely control infected systems and steal sensitive data by deploying the RAT directly into memory, bypassing traditional detection methods.

Read More
View large More details
Blog, Invicti Blog

All in one place: Discovery and security testing across your APIs and applications

API security and application security belong together—and with Invicti’s API Security offering, they come together on one platform that includes discovery, vulnerability testing, and more. Say goodbye to disjointed and inefficient tooling and hello to reduced risk, improved visibility, and lower costs. Learn how Invicti API Security works and why it makes all the difference.

Read More
View large More details
Blog, Portswigger Blog

Personalize your scanning experience with custom scan checks | PortSwigger

Originally published by PortSwigger. Introducing a powerful new feature in Burp Suite Enterprise Edition: BChecks. Initially launched in Burp Suite Professional, BChecks enables you to expand the range of vulnerabilities detected during your scans. By integrating BChecks into your automated scanning process, you can customize your vulnerability searches to suit your unique web application portfolio and swiftly address zero-day vulnerabilities.

Read More
← Older Posts
Newer Posts →