Application Security Blog, Artificial Intelligence, Blog, LOGON Blog
AI-Augmented Penetration Testing: Meeting the Scale Challenge
AI-augmented penetration testing helps security teams scale their efforts. Learn about multi-agent architectures, human-AI partnerships, and practical implementation.
Read More
Application Security Blog, Artificial Intelligence, Blog, IT Management Blog, LOGON Blog
The First Autonomous AI Cyber Attack is Here: Is Your Enterprise Ready?
The recent autonomous AI attack on Hugging Face is a warning shot for Asia. Learn how LOGON Software Asia’s visibility-first approach and AI-driven solutions can protect your organization.
Read More
Application Security Blog, Blog, LOGON Blog
Shift Left, Verify Right: The Blueprint for Modern Application Security Across Asia
Shift Left, Verify Right is the new standard for AppSec. Explore how this strategy protects Asian enterprises from development to production.
Read More
Blog, LOGON Blog
It’s Time to Stop Relying on HTTP/1.1 — Before It Breaks You
For more than two decades, HTTP/1.1 has been the workhorse of the web. It powered the first generation of e-commerce, social media, and cloud applications. It’s familiar, reliable, and until recently, it felt “good enough.”
But here’s the problem: “good enough” doesn’t cut it anymore.
Recent research makes it clear that HTTP/1.1 has a fundamental flaw — one that can’t be permanently patched. Attackers can exploit this weakness in modern web setups to sneak malicious requests past your defenses. This isn’t about a single bug you can fix with a hot patch; it’s about the way HTTP/1.1 itself was designed.
Blog, Identity and Access Management Blog, LOGON Blog
Inside the CoinDCX Breach: What Happened and How It Could Have Been Prevented
On July 19, 2025, CoinDCX—one of India’s largest cryptocurrency exchanges—confirmed a major security breach resulting in the loss of approximately $44 million (Rs. 378 Crore). While no customer funds were affected, the scale and sophistication of the attack raise critical questions about infrastructure-level security in the digital asset space. In this blog, we’ll break down what really happened, why it matters, and how the right security measures—like Privileged Access Management (PAM) and Multi-Factor Authentication (MFA)—can make all the difference.
Read More
Blog, EAM Blog, Identity and Access Management Blog, LOGON Blog, Phishing Attack
Phishing 2.0 Bypasses Email Filters – Here’s How We Keep You Protected
In a rapidly evolving cyber threat landscape, phishing attacks continue to grow more sophisticated, leveraging novel techniques to bypass even the most advanced security measures. A recent phishing campaign has set off alarm bells, not just for its cleverness but for its ability to bypass traditional email security systems — even fooling Gmail completely.
Read More
Application Security Blog, Blog, LOGON Blog
DAST VS Manual Testing in Application Security
Many corporate stakeholders still hold the outdated belief that having an in-house (or third-party) pen tester running manual tests once or twice a year is a “complete security solution.” Manual Testing is Point-in-Time, Pen testing is typically scheduled quarterly, biannually, or annually. Dynamic Application Security Testing tools scan your running applications, as attackers would. They work continuously, detecting vulnerabilities as your application evolves — DevOps speed needs DevSecOps tools. DAST does not replace manual testing. Manual pen testing can find business logic flaws or complex chained exploits. DAST handles the routine, scalable, OWASP Top 10 kind of threats continuously.
Read More
Blog, IT Management Blog, ITAM Blog, Lansweeper Blog, LOGON Blog
Review on Darknet Diaries Ep10: A Use Case for IT Asset Management in Government Cybersecurity
The recent episode of Darknet Diaries, a podcast on stories from the dark side of the internet, left a lasting impression regarding the Misadventures of a Nation State Actor (Episode 10). This episode tells a fictionalized but eerily realistic story of a nation-state actor attempting to infiltrate a foreign ministry’s network to steal highly classified data, displaying the cyber kill chain, from reconnaissance to weaponization, delivery, and beyond. What if that foreign ministry had ITAM Technology implemented?
Read More
Blog, EASM Blog, LOGON Blog
Maximize your Cybersecurity ROI: Strategies for Smart Risk Prioritization
As businesses rapidly adopt new technologies, move to the cloud, and rely more on third-party vendors, they unknowingly expand their digital footprint. With that growth comes greater exposure to cyber threats, especially from unknown or unmanaged external assets. This is where External Attack Surface Management (EASM) steps in. It helps you find and secure what you didn’t even know existed.
Think of EASM as a live blueprint of your organization’s online presence, illuminating exposed assets such as servers, cloud applications, and forgotten domains. By continuously uncovering and prioritizing hidden risks, EASM empowers you to take proactive measures before adversaries know where to strike.
But here’s the real question: How do you ensure that your cybersecurity efforts actually deliver business value? The answer lies in risk prioritization, which, when done right, can drive real Return On Investment (ROI).
Read More
Application Security Blog, Artificial Intelligence, Blog, LOGON Blog
Integrate AI into Application Security Testing: Best Practices for Continuous Security
For most banking companies in the APAC region, digital transformation isn’t just a buzzword—it is their reality.
As a growing number of banks shift operations to the cloud, partner with innovative fintech providers, and enable a fully remote workforce, everything looks promising: scalable infrastructure, customer convenience, and operational agility. However, beneath this promising surface, security is struggling to keep up.
Read More
Blog, EASM Blog, LOGON Blog
When Visibility Ends, Risk Begins: How A Bank Took Control of Its Digital Footprint with EASM
For most banking companies in the APAC region, digital transformation isn’t just a buzzword—it is their reality.
As a growing number of banks shift operations to the cloud, partner with innovative fintech providers, and enable a fully remote workforce, everything looks promising: scalable infrastructure, customer convenience, and operational agility. However, beneath this promising surface, security is struggling to keep up.
Read More
Blog, Endpoint Security Blog, LOGON Blog, Patch Management Blog
Accelerating Patch Management: The 48-Hour Rule and NIST Guidelines
Learn about the “48-Hour Rule” of patch management, showing the urgency to address vulnerabilities before exploitation occurs. Organizations must implement strategies like real-time visibility, automation, and testing to ensure rapid and safe patch deployment. It also references NIST guidelines for effective patch management and stresses the importance of updating firmware to mitigate risks. LOGON Software Asia provides solutions that help organizations manage vulnerabilities proactively, with automation being key to staying ahead of cyber threats.
Read More
Application Security Blog, Blog, LOGON Blog, SaaS Procurement and Management Blog, Software License Management Blog
Navigating Hong Kong’s New Cybersecurity Law (CI Bill): What to Do Next
Learn about Hong Kong’s Protection of Critical Infrastructures (Computer Systems) Bill ( the “CI Bill”), effective January 1, 2026. It mandates critical infrastructure operators to strengthen cybersecurity measures, report incidents, and comply with various obligations. Organizations should assess their status as critical operators, allocate resources, conduct gap analyses, and enhance cyber resilience. LOGON Software Asia offers tailored solutions and support to help businesses navigate these new regulations effectively.
Read More
Blog, Identity and Access Management Blog, LOGON Blog
“Banana Bait” – Click the Links, Fall for Scams: How Hong Kong is Battling Cyber Scams with Smart Identity and Access Management
In response to a surge in cyber scams, Hong Kong has launched an innovative public awareness campaign featuring the “despicable banana” to educate residents about online threats. The campaign, titled “Click the Links, Fall for Scams!”, highlights the critical need for vigilance and the implementation of effective Identity and Access Management (IAM) solutions. With over 44,000 scam cases reported in 2024 alone, organizations must equip themselves with robust IAM strategies to safeguard sensitive information and combat the evolving threat landscape. LOGON Software Asia offers comprehensive IAM solutions designed to empower organizations in managing identities, controlling access, and enhancing overall security.
Read More
Blog, Endpoint Security Blog, LOGON Blog
ConvoC2: A Red Teamer’s Tool to Exploit Microsoft Teams for Remote Command Execution
On December 15, 2024, cybersecurity enthusiasts and professionals were introduced to ConvoC2, a stealthy Command-and-Control (C2) infrastructure tool tailored for Red Team operations. ConvoC2 reveals how cyber attackers can exploit trusted collaboration platforms like Microsoft Teams to execute system commands remotely on compromised systems. This innovative tool underscores the vulnerabilities within widely adopted collaboration tools, posing new security challenges for organizations.
Read More
Blog, Identity and Access Management Blog, LOGON Blog, Phishing Attack, Ransomware, Zero Trust Security Blog
The New Fileless Remcos RAT Malware
Cybercriminals are now leveraging an Excel vulnerability (CVE-2017-0199) in a recent phishing campaign to deliver a fileless variant of Remcos RAT. This malware allows attackers to remotely control infected systems and steal sensitive data by deploying the RAT directly into memory, bypassing traditional detection methods.
Read More
Data Security Blog, LOGON Blog, Ransomware, Security Compliance, Threat Intelligence.
Over 470,000 Personal Data at risk: Data Breach at Oxfam Local Hong Kong
Oxfam Hong Kong recently fell victim to a cyberattack that potentially compromised the personal data of over 470,000 individuals, including donors and participants of its popular Trailwalker event from 15 to 17 November. Cyberattacks can exploit system weaknesses, such as outdated security protocols, insufficient firewall protection, or employees’ inadvertent opening of phishing emails. Once inside, cybercriminals can gain access to a wealth of personal and financial data, leading to devastating consequences.
Read More
LOGON Blog, Ransomware
Hong Kong Hospital Cyber Attack 2024: Lessons Learned and Steps Forward
We are here to investigate the recent cyber attack at one of Hong Kong’s Hospitals. The attack disrupted operations and threatened the integrity of sensitive medical data. Let’s examine the attack, the hospital, and the lessons we can glean from this unfortunate event.
Read More
Artificial Intelligence, LOGON Blog, Security Compliance, Third-Party Risk, Threat Intelligence., Zero Trust Security Blog
2023 Rewind: What to Expect for Cyber Security in 2024?
The Boardroom Cybersecurity Report 2023 projects that organizations will allocate $9.5 trillion for cybercrime in 2024, rising to $10.5 trillion in 2025, a significant increase from 2015. These projections cover various costs, including data damage, financial losses, intellectual property theft, personal data breaches, fraud, business disruption post-attacks, investigations, data restoration, reputational damage, legal expenses, and potential fines.
Read More
Cloud Security Blog, LOGON Blog, Security Compliance
Security in Cloud Environment
As the adoption of cloud services continues to surge, security teams in Asia find themselves navigating an intricate landscape. It is no surprise that security professionals often struggle to prioritize risks and remediation efforts effectively, leaving their enterprises vulnerable to cyberattacks.
Read MoreRead Next:
