LOGON Blog Archives | LOGON Software Asia https://logon-int.com/logon-blog/ Leader in Software Distribution in Asia Wed, 23 Sep 2026 02:19:08 +0000 en-US hourly 1 https://wordpress.org/?v=7.1.3 https://i0.wp.com/logon-int.com/wp-content/uploads/2020/06/LOGON-simple-logo.png?fit=32%2C32&ssl=1 LOGON Blog Archives | LOGON Software Asia https://logon-int.com/logon-blog/ 32 32 193258268 Password Resets Aren’t Enough: What the Updated Five Eyes Active Directory Guidance Means for Identity Security https://logon-int.com/blog/five-eye-active-directory-guidance-identity-security-asia/ Mon, 21 Sep 2026 04:11:26 +0000 https://logon-int.com/?p=62852 The Five Eyes updated their Active Directory security guidance. Learn what shadow credentials and DCSync mean for your identity strategy—and how IAM closes the gaps.

The post Password Resets Aren’t Enough: What the Updated Five Eyes Active Directory Guidance Means for Identity Security appeared first on LOGON Software Asia.

]]> 62852 When Passkeys Become the Bait: A New Wave of Voice Phishing Targeting Microsoft 365 https://logon-int.com/blog/passkey-phishing-microsoft-365-identity-security/ Tue, 15 Sep 2026 05:44:05 +0000 https://logon-int.com/?p=62807 Attackers aren't breaking passkeys—they're bypassing them. A new wave of voice phishing is hijacking Microsoft 365 accounts across Asia by impersonating IT support and exploiting identity workflows. Here's how it works, and how LOGON helps enterprises secure the full identity lifecycle.

The post When Passkeys Become the Bait: A New Wave of Voice Phishing Targeting Microsoft 365 appeared first on LOGON Software Asia.

]]> 62807 AI-Augmented Penetration Testing: Meeting the Scale Challenge https://logon-int.com/blog/ai-penetration-testing-security-scaling/ Thu, 06 Aug 2026 08:51:25 +0000 https://logon-int.com/?p=62317 AI-augmented penetration testing helps security teams scale their efforts. Learn about multi-agent architectures, human-AI partnerships, and practical implementation.

The post AI-Augmented Penetration Testing: Meeting the Scale Challenge appeared first on LOGON Software Asia.

]]> 62317 The First Autonomous AI Cyber Attack is Here: Is Your Enterprise Ready? https://logon-int.com/blog/autonomous-ai-cyber-attack-asia/ Wed, 05 Aug 2026 09:39:18 +0000 https://logon-int.com/?p=62299 The recent autonomous AI attack on Hugging Face is a warning shot for Asia. Learn how LOGON Software Asia’s visibility-first approach and AI-driven solutions can protect your organization.

The post The First Autonomous AI Cyber Attack is Here: Is Your Enterprise Ready? appeared first on LOGON Software Asia.

]]> 62299 Shift Left, Verify Right: The Blueprint for Modern Application Security Across Asia https://logon-int.com/blog/shift-left-verify-right-appsec-asia/ Tue, 04 Aug 2026 04:00:17 +0000 https://logon-int.com/?p=62226 Shift Left, Verify Right is the new standard for AppSec. Explore how this strategy protects Asian enterprises from development to production.

The post Shift Left, Verify Right: The Blueprint for Modern Application Security Across Asia appeared first on LOGON Software Asia.

]]> 62226 It’s Time to Stop Relying on HTTP/1.1 — Before It Breaks You https://logon-int.com/blog/stop-rely-on-http1-1/ Mon, 29 Sep 2025 12:14:28 +0000 https://logon-int.com/?p=61052 For more than two decades, HTTP/1.1 has been the workhorse of the web. It powered the first generation of e-commerce, social media, and cloud applications. It’s familiar, reliable, and until recently, it felt “good enough.”
But here’s the problem: “good enough” doesn’t cut it anymore.
Recent research makes it clear that HTTP/1.1 has a fundamental flaw — one that can’t be permanently patched. Attackers can exploit this weakness in modern web setups to sneak malicious requests past your defenses. This isn’t about a single bug you can fix with a hot patch; it’s about the way HTTP/1.1 itself was designed.

The post It’s Time to Stop Relying on HTTP/1.1 — Before It Breaks You appeared first on LOGON Software Asia.

]]> 61052 Inside the CoinDCX Breach: What Happened and How It Could Have Been Prevented https://logon-int.com/blog/coindcx-breach-india-2025/ Thu, 24 Jul 2025 05:30:40 +0000 https://logon-int.com/?p=60809 On July 19, 2025, CoinDCX—one of India’s largest cryptocurrency exchanges—confirmed a major security breach resulting in the loss of approximately $44 million (Rs. 378 Crore). While no customer funds were affected, the scale and sophistication of the attack raise critical questions about infrastructure-level security in the digital asset space. In this blog, we’ll break down what really happened, why it matters, and how the right security measures—like Privileged Access Management (PAM) and Multi-Factor Authentication (MFA)—can make all the difference.

The post Inside the CoinDCX Breach: What Happened and How It Could Have Been Prevented appeared first on LOGON Software Asia.

]]> 60809 Phishing 2.0 Bypasses Email Filters – Here’s How We Keep You Protected https://logon-int.com/blog/phishing-bypass-email-filiters-2025/ Wed, 23 Jul 2025 05:09:47 +0000 https://logon-int.com/?p=60797 In a rapidly evolving cyber threat landscape, phishing attacks continue to grow more sophisticated, leveraging novel techniques to bypass even the most advanced security measures. A recent phishing campaign has set off alarm bells, not just for its cleverness but for its ability to bypass traditional email security systems — even fooling Gmail completely.

The post Phishing 2.0 Bypasses Email Filters – Here’s How We Keep You Protected appeared first on LOGON Software Asia.

]]> 60797 DAST VS Manual Testing in Application Security https://logon-int.com/blog/dast-vs-manual-testing-appsec/ Thu, 17 Jul 2025 09:15:11 +0000 https://logon-int.com/?p=60792 Many corporate stakeholders still hold the outdated belief that having an in-house (or third-party) pen tester running manual tests once or twice a year is a “complete security solution.” Manual Testing is Point-in-Time, Pen testing is typically scheduled quarterly, biannually, or annually. Dynamic Application Security Testing tools scan your running applications, as attackers would. They work continuously, detecting vulnerabilities as your application evolves — DevOps speed needs DevSecOps tools. DAST does not replace manual testing. Manual pen testing can find business logic flaws or complex chained exploits. DAST handles the routine, scalable, OWASP Top 10 kind of threats continuously.

The post DAST VS Manual Testing in Application Security appeared first on LOGON Software Asia.

]]> 60792 Review on Darknet Diaries Ep10: A Use Case for IT Asset Management in Government Cybersecurity https://logon-int.com/blog/darknet-diaries-ep-10-itam-government/ Tue, 10 Jun 2025 02:59:37 +0000 https://logon-int.com/?p=60475 The recent episode of Darknet Diaries, a podcast on stories from the dark side of the internet, left a lasting impression regarding the Misadventures of a Nation State Actor (Episode 10). This episode tells a fictionalized but eerily realistic story of a nation-state actor attempting to infiltrate a foreign ministry’s network to steal highly classified data, displaying the cyber kill chain, from reconnaissance to weaponization, delivery, and beyond. What if that foreign ministry had ITAM Technology implemented?

The post Review on Darknet Diaries Ep10: A Use Case for IT Asset Management in Government Cybersecurity appeared first on LOGON Software Asia.

]]> 60475 Maximize your Cybersecurity ROI: Strategies for Smart Risk Prioritization https://logon-int.com/blog/cybersecurity-roi-smart-risk-prioritization/ Tue, 27 May 2025 06:14:08 +0000 https://logon-int.com/?p=60232 As businesses rapidly adopt new technologies, move to the cloud, and rely more on third-party vendors, they unknowingly expand their digital footprint. With that growth comes greater exposure to cyber threats, especially from unknown or unmanaged external assets. This is where External Attack Surface Management (EASM) steps in. It helps you find and secure what you didn’t even know existed.

Think of EASM as a live blueprint of your organization’s online presence, illuminating exposed assets such as servers, cloud applications, and forgotten domains. By continuously uncovering and prioritizing hidden risks, EASM empowers you to take proactive measures before adversaries know where to strike.

But here’s the real question: How do you ensure that your cybersecurity efforts actually deliver business value? The answer lies in risk prioritization, which, when done right, can drive real Return On Investment (ROI).

The post Maximize your Cybersecurity ROI: Strategies for Smart Risk Prioritization appeared first on LOGON Software Asia.

]]> 60232 Integrate AI into Application Security Testing: Best Practices for Continuous Security https://logon-int.com/blog/ai-ast-2025/ Wed, 21 May 2025 04:18:14 +0000 https://logon-int.com/?p=60151 For most banking companies in the APAC region, digital transformation isn’t just a buzzword—it is their reality.

As a growing number of banks shift operations to the cloud, partner with innovative fintech providers, and enable a fully remote workforce, everything looks promising: scalable infrastructure, customer convenience, and operational agility. However, beneath this promising surface, security is struggling to keep up.

The post Integrate AI into Application Security Testing: Best Practices for Continuous Security appeared first on LOGON Software Asia.

]]> 60151 When Visibility Ends, Risk Begins: How A Bank Took Control of Its Digital Footprint with EASM https://logon-int.com/blog/bank-digital-footprint-easm/ Tue, 29 Apr 2025 03:06:07 +0000 https://logon-int.com/?p=59948 For most banking companies in the APAC region, digital transformation isn’t just a buzzword—it is their reality.

As a growing number of banks shift operations to the cloud, partner with innovative fintech providers, and enable a fully remote workforce, everything looks promising: scalable infrastructure, customer convenience, and operational agility. However, beneath this promising surface, security is struggling to keep up.

The post When Visibility Ends, Risk Begins: How A Bank Took Control of Its Digital Footprint with EASM appeared first on LOGON Software Asia.

]]> 59948 Accelerating Patch Management: The 48-Hour Rule and NIST Guidelines https://logon-int.com/blog/patch-management-nist-guideline/ Fri, 11 Apr 2025 08:28:39 +0000 https://logon-int.com/?p=59856 Learn about the "48-Hour Rule" of patch management, showing the urgency to address vulnerabilities before exploitation occurs. Organizations must implement strategies like real-time visibility, automation, and testing to ensure rapid and safe patch deployment. It also references NIST guidelines for effective patch management and stresses the importance of updating firmware to mitigate risks. LOGON Software Asia provides solutions that help organizations manage vulnerabilities proactively, with automation being key to staying ahead of cyber threats.

The post Accelerating Patch Management: The 48-Hour Rule and NIST Guidelines appeared first on LOGON Software Asia.

]]> 59856 Navigating Hong Kong’s New Cybersecurity Law (CI Bill): What to Do Next https://logon-int.com/blog/hk-ci-bill-2026/ Thu, 10 Apr 2025 08:47:22 +0000 https://logon-int.com/?p=59825 Learn about Hong Kong's Protection of Critical Infrastructures (Computer Systems) Bill ( the "CI Bill"), effective January 1, 2026. It mandates critical infrastructure operators to strengthen cybersecurity measures, report incidents, and comply with various obligations. Organizations should assess their status as critical operators, allocate resources, conduct gap analyses, and enhance cyber resilience. LOGON Software Asia offers tailored solutions and support to help businesses navigate these new regulations effectively.

The post Navigating Hong Kong’s New Cybersecurity Law (CI Bill): What to Do Next appeared first on LOGON Software Asia.

]]> 59825 “Banana Bait” – Click the Links, Fall for Scams: How Hong Kong is Battling Cyber Scams with Smart Identity and Access Management https://logon-int.com/blog/hkma-despicable-banana-iam/ Wed, 26 Mar 2025 06:38:38 +0000 https://logon-int.com/?p=59719 In response to a surge in cyber scams, Hong Kong has launched an innovative public awareness campaign featuring the "despicable banana" to educate residents about online threats. The campaign, titled "Click the Links, Fall for Scams!", highlights the critical need for vigilance and the implementation of effective Identity and Access Management (IAM) solutions. With over 44,000 scam cases reported in 2024 alone, organizations must equip themselves with robust IAM strategies to safeguard sensitive information and combat the evolving threat landscape. LOGON Software Asia offers comprehensive IAM solutions designed to empower organizations in managing identities, controlling access, and enhancing overall security.

The post “Banana Bait” – Click the Links, Fall for Scams: How Hong Kong is Battling Cyber Scams with Smart Identity and Access Management appeared first on LOGON Software Asia.

]]> 59719 ConvoC2: A Red Teamer’s Tool to Exploit Microsoft Teams for Remote Command Execution https://logon-int.com/blog/convoc2/ Mon, 16 Dec 2024 07:38:44 +0000 https://logon-int.com/?p=59191 On December 15, 2024, cybersecurity enthusiasts and professionals were introduced to ConvoC2, a stealthy Command-and-Control (C2) infrastructure tool tailored for Red Team operations. ConvoC2 reveals how cyber attackers can exploit trusted collaboration platforms like Microsoft Teams to execute system commands remotely on compromised systems. This innovative tool underscores the vulnerabilities within widely adopted collaboration tools, posing new security challenges for organizations.

The post ConvoC2: A Red Teamer’s Tool to Exploit Microsoft Teams for Remote Command Execution appeared first on LOGON Software Asia.

]]> 59191 The New Fileless Remcos RAT Malware https://logon-int.com/blog/fileless-remcos-rat-malware/ Thu, 14 Nov 2024 07:57:19 +0000 https://logon-int.com/?p=59020 Cybercriminals are now leveraging an Excel vulnerability (CVE-2017-0199) in a recent phishing campaign to deliver a fileless variant of Remcos RAT. This malware allows attackers to remotely control infected systems and steal sensitive data by deploying the RAT directly into memory, bypassing traditional detection methods.

The post The New Fileless Remcos RAT Malware appeared first on LOGON Software Asia.

]]> 59020 Over 470,000 Personal Data at risk: Data Breach at Oxfam Local Hong Kong https://logon-int.com/logon-blog/oxfam-hong-kong-data-breach-2024/ Thu, 15 Aug 2024 12:45:56 +0000 https://logon-int.com/?p=58559 Oxfam Hong Kong recently fell victim to a cyberattack that potentially compromised the personal data of over 470,000 individuals, including donors and participants of its popular Trailwalker event from 15 to 17 November. Cyberattacks can exploit system weaknesses, such as outdated security protocols, insufficient firewall protection, or employees’ inadvertent opening of phishing emails. Once inside, cybercriminals can gain access to a wealth of personal and financial data, leading to devastating consequences.

The post Over 470,000 Personal Data at risk: Data Breach at Oxfam Local Hong Kong appeared first on LOGON Software Asia.

]]> 58559 Hong Kong Hospital Cyber Attack 2024: Lessons Learned and Steps Forward https://logon-int.com/logon-blog/hong-kong-hospital-cyber-attack-2024-lessons-learned-and-steps-forward/ Tue, 07 May 2024 08:39:55 +0000 https://logon-int.com/?p=57912 We are here to investigate the recent cyber attack at one of Hong Kong’s Hospitals. The attack disrupted operations and threatened the integrity of sensitive medical data. Let’s examine the attack, the hospital, and the lessons we can glean from this unfortunate event.

The post Hong Kong Hospital Cyber Attack 2024: Lessons Learned and Steps Forward appeared first on LOGON Software Asia.

]]> 57912