LOGON Blog Archives | LOGON Software Asia https://logon-int.com/logon-blog/ Leader in Software Distribution in Asia Fri, 30 Oct 2026 13:00:31 +0000 en-US hourly 1 https://wordpress.org/?v=7.1.4 https://i0.wp.com/logon-int.com/wp-content/uploads/2020/06/LOGON-simple-logo.png?fit=32%2C32&ssl=1 LOGON Blog Archives | LOGON Software Asia https://logon-int.com/logon-blog/ 32 32 193258268 One Breach, Many Airlines: What the Amadeus Incident Means for Supply Chain Risk in Asia https://logon-int.com/blog/amadeus-cyberattack-airline-third-party-risk-asia/ Fri, 30 Oct 2026 12:57:45 +0000 https://logon-int.com/?p=63104 The Amadeus breach exposed passenger data at JAL, ANA, Korean Air, Asiana, and Cathay Pacific—through one provider's credentials. Learn how LOGON helps enterprises in Asia govern third-party access, detect credential abuse, and investigate historical exposure.

The post One Breach, Many Airlines: What the Amadeus Incident Means for Supply Chain Risk in Asia appeared first on LOGON Software Asia.

]]> 63104 The Patch Was the Easy Part: What PHP2Shell Really Asks of Your Security Team https://logon-int.com/blog/php2shell-cve-2026-109618-109619-enterprise-security-asia/ Tue, 27 Oct 2026 07:42:08 +0000 https://logon-int.com/?p=63059 PHP2Shell (CVE-2026-109618, CVE-2026-109619) was exploited before disclosure. Learn why patching alone isn't enough—and how LOGON helps enterprises in Asia find exposed systems, verify remediation, and hunt for prior compromise.

The post The Patch Was the Easy Part: What PHP2Shell Really Asks of Your Security Team appeared first on LOGON Software Asia.

]]> 63059 Your Employees Don’t Need to Click Anything: What the “AdFection” Zero-Click Spyware Campaign Means for Enterprise Security https://logon-int.com/blog/adfection-zero-click-spyware-targeted-ads-enterprise-security-asia/ Wed, 21 Oct 2026 09:04:03 +0000 https://logon-int.com/?p=63044 The AdFection campaign delivered zero-click spyware through ordinary online ads—no clicks required. Learn why traditional defenses fail and how LOGON helps enterprises in Asia detect, block, and prevent zero-click threats.

The post Your Employees Don’t Need to Click Anything: What the “AdFection” Zero-Click Spyware Campaign Means for Enterprise Security appeared first on LOGON Software Asia.

]]> 63044 Password Resets Aren’t Enough: What the Updated Five Eyes Active Directory Guidance Means for Identity Security https://logon-int.com/blog/five-eye-active-directory-guidance-identity-security-asia/ Mon, 21 Sep 2026 04:11:26 +0000 https://logon-int.com/?p=62852 The Five Eyes updated their Active Directory security guidance. Learn what shadow credentials and DCSync mean for your identity strategy—and how IAM closes the gaps.

The post Password Resets Aren’t Enough: What the Updated Five Eyes Active Directory Guidance Means for Identity Security appeared first on LOGON Software Asia.

]]> 62852 When Passkeys Become the Bait: A New Wave of Voice Phishing Targeting Microsoft 365 https://logon-int.com/blog/passkey-phishing-microsoft-365-identity-security/ Tue, 15 Sep 2026 05:44:05 +0000 https://logon-int.com/?p=62807 Attackers aren't breaking passkeys—they're bypassing them. A new wave of voice phishing is hijacking Microsoft 365 accounts across Asia by impersonating IT support and exploiting identity workflows. Here's how it works, and how LOGON helps enterprises secure the full identity lifecycle.

The post When Passkeys Become the Bait: A New Wave of Voice Phishing Targeting Microsoft 365 appeared first on LOGON Software Asia.

]]> 62807 AI-Augmented Penetration Testing: Meeting the Scale Challenge https://logon-int.com/blog/ai-penetration-testing-security-scaling/ Thu, 06 Aug 2026 08:51:25 +0000 https://logon-int.com/?p=62317 AI-augmented penetration testing helps security teams scale their efforts. Learn about multi-agent architectures, human-AI partnerships, and practical implementation.

The post AI-Augmented Penetration Testing: Meeting the Scale Challenge appeared first on LOGON Software Asia.

]]> 62317 The First Autonomous AI Cyber Attack is Here: Is Your Enterprise Ready? https://logon-int.com/blog/autonomous-ai-cyber-attack-asia/ Wed, 05 Aug 2026 09:39:18 +0000 https://logon-int.com/?p=62299 The recent autonomous AI attack on Hugging Face is a warning shot for Asia. Learn how LOGON Software Asia’s visibility-first approach and AI-driven solutions can protect your organization.

The post The First Autonomous AI Cyber Attack is Here: Is Your Enterprise Ready? appeared first on LOGON Software Asia.

]]> 62299 Shift Left, Verify Right: The Blueprint for Modern Application Security Across Asia https://logon-int.com/blog/shift-left-verify-right-appsec-asia/ Tue, 04 Aug 2026 04:00:17 +0000 https://logon-int.com/?p=62226 Shift Left, Verify Right is the new standard for AppSec. Explore how this strategy protects Asian enterprises from development to production.

The post Shift Left, Verify Right: The Blueprint for Modern Application Security Across Asia appeared first on LOGON Software Asia.

]]> 62226 It’s Time to Stop Relying on HTTP/1.1 — Before It Breaks You https://logon-int.com/blog/stop-rely-on-http1-1/ Mon, 29 Sep 2025 12:14:28 +0000 https://logon-int.com/?p=61052 For more than two decades, HTTP/1.1 has been the workhorse of the web. It powered the first generation of e-commerce, social media, and cloud applications. It’s familiar, reliable, and until recently, it felt “good enough.”
But here’s the problem: “good enough” doesn’t cut it anymore.
Recent research makes it clear that HTTP/1.1 has a fundamental flaw — one that can’t be permanently patched. Attackers can exploit this weakness in modern web setups to sneak malicious requests past your defenses. This isn’t about a single bug you can fix with a hot patch; it’s about the way HTTP/1.1 itself was designed.

The post It’s Time to Stop Relying on HTTP/1.1 — Before It Breaks You appeared first on LOGON Software Asia.

]]> 61052 Inside the CoinDCX Breach: What Happened and How It Could Have Been Prevented https://logon-int.com/blog/coindcx-breach-india-2025/ Thu, 24 Jul 2025 05:30:40 +0000 https://logon-int.com/?p=60809 On July 19, 2025, CoinDCX—one of India’s largest cryptocurrency exchanges—confirmed a major security breach resulting in the loss of approximately $44 million (Rs. 378 Crore). While no customer funds were affected, the scale and sophistication of the attack raise critical questions about infrastructure-level security in the digital asset space. In this blog, we’ll break down what really happened, why it matters, and how the right security measures—like Privileged Access Management (PAM) and Multi-Factor Authentication (MFA)—can make all the difference.

The post Inside the CoinDCX Breach: What Happened and How It Could Have Been Prevented appeared first on LOGON Software Asia.

]]> 60809 Phishing 2.0 Bypasses Email Filters – Here’s How We Keep You Protected https://logon-int.com/blog/phishing-bypass-email-filiters-2025/ Wed, 23 Jul 2025 05:09:47 +0000 https://logon-int.com/?p=60797 In a rapidly evolving cyber threat landscape, phishing attacks continue to grow more sophisticated, leveraging novel techniques to bypass even the most advanced security measures. A recent phishing campaign has set off alarm bells, not just for its cleverness but for its ability to bypass traditional email security systems — even fooling Gmail completely.

The post Phishing 2.0 Bypasses Email Filters – Here’s How We Keep You Protected appeared first on LOGON Software Asia.

]]> 60797 DAST VS Manual Testing in Application Security https://logon-int.com/blog/dast-vs-manual-testing-appsec/ Thu, 17 Jul 2025 09:15:11 +0000 https://logon-int.com/?p=60792 Many corporate stakeholders still hold the outdated belief that having an in-house (or third-party) pen tester running manual tests once or twice a year is a “complete security solution.” Manual Testing is Point-in-Time, Pen testing is typically scheduled quarterly, biannually, or annually. Dynamic Application Security Testing tools scan your running applications, as attackers would. They work continuously, detecting vulnerabilities as your application evolves — DevOps speed needs DevSecOps tools. DAST does not replace manual testing. Manual pen testing can find business logic flaws or complex chained exploits. DAST handles the routine, scalable, OWASP Top 10 kind of threats continuously.

The post DAST VS Manual Testing in Application Security appeared first on LOGON Software Asia.

]]> 60792 Review on Darknet Diaries Ep10: A Use Case for IT Asset Management in Government Cybersecurity https://logon-int.com/blog/darknet-diaries-ep-10-itam-government/ Tue, 10 Jun 2025 02:59:37 +0000 https://logon-int.com/?p=60475 The recent episode of Darknet Diaries, a podcast on stories from the dark side of the internet, left a lasting impression regarding the Misadventures of a Nation State Actor (Episode 10). This episode tells a fictionalized but eerily realistic story of a nation-state actor attempting to infiltrate a foreign ministry’s network to steal highly classified data, displaying the cyber kill chain, from reconnaissance to weaponization, delivery, and beyond. What if that foreign ministry had ITAM Technology implemented?

The post Review on Darknet Diaries Ep10: A Use Case for IT Asset Management in Government Cybersecurity appeared first on LOGON Software Asia.

]]> 60475 Maximize your Cybersecurity ROI: Strategies for Smart Risk Prioritization https://logon-int.com/blog/cybersecurity-roi-smart-risk-prioritization/ Tue, 27 May 2025 06:14:08 +0000 https://logon-int.com/?p=60232 As businesses rapidly adopt new technologies, move to the cloud, and rely more on third-party vendors, they unknowingly expand their digital footprint. With that growth comes greater exposure to cyber threats, especially from unknown or unmanaged external assets. This is where External Attack Surface Management (EASM) steps in. It helps you find and secure what you didn’t even know existed.

Think of EASM as a live blueprint of your organization’s online presence, illuminating exposed assets such as servers, cloud applications, and forgotten domains. By continuously uncovering and prioritizing hidden risks, EASM empowers you to take proactive measures before adversaries know where to strike.

But here’s the real question: How do you ensure that your cybersecurity efforts actually deliver business value? The answer lies in risk prioritization, which, when done right, can drive real Return On Investment (ROI).

The post Maximize your Cybersecurity ROI: Strategies for Smart Risk Prioritization appeared first on LOGON Software Asia.

]]> 60232 Integrate AI into Application Security Testing: Best Practices for Continuous Security https://logon-int.com/blog/ai-ast-2025/ Wed, 21 May 2025 04:18:14 +0000 https://logon-int.com/?p=60151 For most banking companies in the APAC region, digital transformation isn’t just a buzzword—it is their reality.

As a growing number of banks shift operations to the cloud, partner with innovative fintech providers, and enable a fully remote workforce, everything looks promising: scalable infrastructure, customer convenience, and operational agility. However, beneath this promising surface, security is struggling to keep up.

The post Integrate AI into Application Security Testing: Best Practices for Continuous Security appeared first on LOGON Software Asia.

]]> 60151 When Visibility Ends, Risk Begins: How A Bank Took Control of Its Digital Footprint with EASM https://logon-int.com/blog/bank-digital-footprint-easm/ Tue, 29 Apr 2025 03:06:07 +0000 https://logon-int.com/?p=59948 For most banking companies in the APAC region, digital transformation isn’t just a buzzword—it is their reality.

As a growing number of banks shift operations to the cloud, partner with innovative fintech providers, and enable a fully remote workforce, everything looks promising: scalable infrastructure, customer convenience, and operational agility. However, beneath this promising surface, security is struggling to keep up.

The post When Visibility Ends, Risk Begins: How A Bank Took Control of Its Digital Footprint with EASM appeared first on LOGON Software Asia.

]]> 59948 Accelerating Patch Management: The 48-Hour Rule and NIST Guidelines https://logon-int.com/blog/patch-management-nist-guideline/ Fri, 11 Apr 2025 08:28:39 +0000 https://logon-int.com/?p=59856 Learn about the "48-Hour Rule" of patch management, showing the urgency to address vulnerabilities before exploitation occurs. Organizations must implement strategies like real-time visibility, automation, and testing to ensure rapid and safe patch deployment. It also references NIST guidelines for effective patch management and stresses the importance of updating firmware to mitigate risks. LOGON Software Asia provides solutions that help organizations manage vulnerabilities proactively, with automation being key to staying ahead of cyber threats.

The post Accelerating Patch Management: The 48-Hour Rule and NIST Guidelines appeared first on LOGON Software Asia.

]]> 59856 Navigating Hong Kong’s New Cybersecurity Law (CI Bill): What to Do Next https://logon-int.com/blog/hk-ci-bill-2026/ Thu, 10 Apr 2025 08:47:22 +0000 https://logon-int.com/?p=59825 Learn about Hong Kong's Protection of Critical Infrastructures (Computer Systems) Bill ( the "CI Bill"), effective January 1, 2026. It mandates critical infrastructure operators to strengthen cybersecurity measures, report incidents, and comply with various obligations. Organizations should assess their status as critical operators, allocate resources, conduct gap analyses, and enhance cyber resilience. LOGON Software Asia offers tailored solutions and support to help businesses navigate these new regulations effectively.

The post Navigating Hong Kong’s New Cybersecurity Law (CI Bill): What to Do Next appeared first on LOGON Software Asia.

]]> 59825 “Banana Bait” – Click the Links, Fall for Scams: How Hong Kong is Battling Cyber Scams with Smart Identity and Access Management https://logon-int.com/blog/hkma-despicable-banana-iam/ Wed, 26 Mar 2025 06:38:38 +0000 https://logon-int.com/?p=59719 In response to a surge in cyber scams, Hong Kong has launched an innovative public awareness campaign featuring the "despicable banana" to educate residents about online threats. The campaign, titled "Click the Links, Fall for Scams!", highlights the critical need for vigilance and the implementation of effective Identity and Access Management (IAM) solutions. With over 44,000 scam cases reported in 2024 alone, organizations must equip themselves with robust IAM strategies to safeguard sensitive information and combat the evolving threat landscape. LOGON Software Asia offers comprehensive IAM solutions designed to empower organizations in managing identities, controlling access, and enhancing overall security.

The post “Banana Bait” – Click the Links, Fall for Scams: How Hong Kong is Battling Cyber Scams with Smart Identity and Access Management appeared first on LOGON Software Asia.

]]> 59719 ConvoC2: A Red Teamer’s Tool to Exploit Microsoft Teams for Remote Command Execution https://logon-int.com/blog/convoc2/ Mon, 16 Dec 2024 07:38:44 +0000 https://logon-int.com/?p=59191 On December 15, 2024, cybersecurity enthusiasts and professionals were introduced to ConvoC2, a stealthy Command-and-Control (C2) infrastructure tool tailored for Red Team operations. ConvoC2 reveals how cyber attackers can exploit trusted collaboration platforms like Microsoft Teams to execute system commands remotely on compromised systems. This innovative tool underscores the vulnerabilities within widely adopted collaboration tools, posing new security challenges for organizations.

The post ConvoC2: A Red Teamer’s Tool to Exploit Microsoft Teams for Remote Command Execution appeared first on LOGON Software Asia.

]]> 59191