Ms. Amaireny Lantigua Tejeda is lauded for her contributions to Global Financial Impact as a financial professional and insurance specialist

Wolfgang M. Chadab is honored for over four decades of success in international finance

Michael O. Rattigan is honored for his leadership as the Vice President of Relationship Management at 55ip

Hailing from a background in economics, Elpis Kassimidou, MSc, served at the National Bank of Greece for more than 30 years

 New research conducted by Tenable®, Inc., the exposure management company, has uncovered more than 26,500 potential internet-facing assets among Southeast Asia’s top banking, financial services and insurance (BFSI) companies by market capitalisation across Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam.

On July 15, 2024, Tenable examined the external attack surface of over 90 BFSI organisations with the largest market capitalisations across the region. The findings revealed that the average organisation possesses nearly 300 internet-facing assets susceptible to potential exploitation, resulting in a total of more than 26,500 assets across the study group.

Singapore ranked the highest among the six countries assessed, with over 11,000 internet-facing assets identified across its top 16 BFSI companies. Over 6,000 of those assets are hosted in the United States. Next on the list is Thailand with over 5000 assets. The distribution of internet-accessible assets underscores the need for cybersecurity strategies that adapt to the rapidly evolving digital landscape.

“The results of our study reveal that many financial institutions are struggling to close the priority security gaps that put them at risk. Effective exposure management is key to closing these gaps,” said Nigel Ng, Senior Vice President, Tenable APJ. “By identifying and securing vulnerable assets before they can be exploited, organisations can better protect themselves against the growing tide of cyberattacks.” 

Cyber Hygiene Gaps 
The Tenable study revealed many potential vulnerabilities and exposed several cyber hygiene issues among the study group, including outdated software, weak encryption, and misconfigurations. These vulnerabilities provide cybercriminals with easily exploitable potential entry points, posing potential risk to the integrity and security of financial data. 

Weak SSL/TLS encryption 

A notable finding is that among the total assets, organisations had nearly 2,500 still supporting TLS 1.0—a 25-year old security protocol introduced in 1999 and disabled by Microsoft in September 2022. This highlights the significant challenge organisations with extensive internet footprints face in identifying and updating outdated technologies.

Misconfiguration increases external exposure

Another concerning discovery was that over 4,000 assets, originally intended for internal use, were inadvertently exposed and are now accessible externally. Failing to secure these internal assets poses a significant risk to organisations, as it creates an opportunity for malicious actors to target sensitive information and critical systems.

Lack of encryption 

There were over 900 assets with unencrypted final URLs, which can present a security weakness. When URLs are unencrypted, the data transmitted between the user's browser and the server is not protected by encryption, making it vulnerable to interception, eavesdropping, and manipulation by malicious actors. This lack of encryption can lead to the exposure of sensitive information, such as login credentials, personal data, or payment details, and can compromise the integrity of the communication.

API vulnerabilities amplify risk

The identification of over 2,000 API v3 out of the total number of assets among organisations' digital infrastructure poses a substantial risk to their security and operational integrity.

APIs serve as crucial connectors between software applications, facilitating seamless data exchange. However, inadequate authentication, insufficient input validation, weak access controls, and vulnerabilities in dependencies within API v3 implementations create a vulnerable attack surface.

Malicious actors can exploit such weaknesses to gain unauthorised access, compromise data integrity, and launch devastating cyber attacks.

“The cybersecurity landscape is evolving faster than ever, and financial institutions must evolve with it, so they can know where they are exposed and take action to close critical risk” Ng added. “By prioritising exposure management, these organisations can better protect their digital assets, safeguard customer trust, and ensure the resilience of their operations in an increasingly hostile digital environment.”

About Tenable
Tenable® is the exposure management company, exposing and closing the cybersecurity gaps that erode business value, reputation and trust. The company’s AI-powered exposure management platform radically unifies security visibility, insight and action across the attack surface, equipping modern organizations to protect against attacks from IT infrastructure to cloud environments to critical infrastructure and everywhere in between. By protecting enterprises from security exposure, Tenable reduces business risk for more than 44,000 customers around the globe. Learn more at tenable.com. 

Notes to Editors:

1. Tenable examined the top 12-16 BFSI companies discoverable based on market cap. 
2. In the context of this alert:

• An asset is a domain name, subdomain, or IP addresses and/or combination thereof of a device connected to the Internet or internal network. An asset may include, but not limited to web servers, name servers, IoT devices, network printers, etc. Example: foo.tld, bar.foo.tld, x.x.x.xs.
• The Attack Surface is from the network perspective of an adversary, the complete asset inventory of an organisation including all actively listening services (open ports) on each asset.

POSTPONED: Zimbabwe Futures 2025: Financial Sector Expansion and Policy Priorities 15 November 2017 — 9:00AM TO 11:30AM Anonymous (not verified) 6 November 2017 Harare, Zimbabwe 

This roundtable will draw on current best practice and senior level expertise to identify policy options for financial stability and sector growth. A depoliticized analysis of the development agenda will highlight requisite conditions and prospective policies for a business-driven roadmap to the economic recovery of Zimbabwe, with a specific focus on the financial sector.

Participants will discuss macro-economic policy and stability, retail banking products and services, fintech, mobilizing domestic finance for national infrastructure and balancing consumer price index and inflation.

This event is being held in partnership with the Zimbabwe Business Club.

PLEASE NOTE, THIS EVENT HAS BEEN POSTPONED UNTIL FURTHER NOTICE.

Hong Kong’s responsible AI framework comes amid increasing international competition and tensions affecting access to AI technology

Promoting responsible business conduct in the financial sector is vital to building a sustainable global economy. Although the Guidelines’ due diligence recommendations can help financial institutions, the inherent complexities in the sector create challenges. This paper highlights key considerations for institutional investors in carrying out due diligence that will help to identify and respond to environmental and social risks.

Luxembourg weathered the global economic crisis well, but must take additional steps to foster the diversification of the economy while ensuring the continuing health of its financial sector, according to the latest OECD Economic Survey of Luxembourg.

Advanced preliminary release for Q4 2019 quarterly data on total credit to the non-financial sectors; comprising private non-financial sector and general government for 44 economies and regional aggregates have been updated. Data are available for the following borrowing subsectors: general government, private non-financial sector (series on credit from domestic banks as lending sector are also available), non-financial corporations and households. Data are presented in three versions: in billions of local currency and US dollars, and as a percentage of GDP.

Advanced preliminary release for Q4 2019 quarterly data on debt service ratios (DSRs) for the private non-financial sector (PNFS) for 32 countries have been updated. DSRs for PNFS breakdown sectors, ie for households and for non-financial corporations are also available for 17 countries.

European Systemic Risk Board Occasional Papers by Greg Ros

Prime Minister Narendra Modi held a crucial meeting with home minister Amit Shah and finance minister Nirmala Sitharaman to firm up strategies for the financial sector in the aftermath of the Covid-19 outbreak.

As the three European Supervisory Authorities (ESAs) publish a new joint opinion on money laundering and terrorist financing (ML/TF) risks affecting the EU financial sector, Zia Ullah and Ruth Paley take a look at the key risks, noting ...

DNB (the Dutch Central Bank) Banks: Micro prudential, less significant institutions (LSIs) - Banks can use their capital and liquidity buffer. Therefore, banks will be allowed to temporarily operate below the level of capital as defined by t...

Promoting responsible business conduct in the financial sector is vital to building a sustainable global economy. Although the Guidelines’ due diligence recommendations can help financial institutions, the inherent complexities in the sector create challenges. This paper highlights key considerations for institutional investors in carrying out due diligence that will help to identify and respond to environmental and social risks.

Climate change is a major political and economic challenge. This paper sketches out its relevance for the financial sector. Necessary low-carbon investments imply a significant yet manageable financing gap. Beyond capital mobilisation that has attracted most attention until now, the main challenge is ensuring a transition-consistent capital reallocation.

Luxembourg weathered the global economic crisis well, but must take additional steps to foster the diversification of the economy while ensuring the continuing health of its financial sector, according to the latest OECD Economic Survey of Luxembourg.

Finance is a key ingredient of modern economies, but too much finance may hamper economic growth and worsen income inequality, according to new research from the OECD.

Excessive credit growth, poor risk assessment and lax lending standards in the run up to the 2008 global crisis led to unsustainable debt build-up in banks and related corporates.

Promoting responsible business conduct in the financial sector is vital to building a sustainable global economy. Although the Guidelines’ due diligence recommendations can help financial institutions, the inherent complexities in the sector create challenges. This paper highlights key considerations for institutional investors in carrying out due diligence that will help to identify and respond to environmental and social risks.

Bank of America has downgraded the ratings for four of India’s largest banks — the State bank of India (SBI), Bank of Baroda, IndusInd Bank and ICICI Bank. The emerging cycle of non-performing assets will be the ‘biggest nightmare of 2020’ according to Paytm founder Vijay Shekhar Sharma.Bank of America’s downgrade follows in the footsteps of UBS and CLSA, who also slashed their expectations from banks.According to Sharma, the rise of bad loans is likely to spillover beyond banks to the fintech sector where a large number of startups have been giving out small unsecured loans.Indian banks had barely cleaned up the massive pile of unpaid loans from the country’s corporates, the coronavirus pandemic is barrelling into an economic crisis that may bring a fresh wave of non-performing assets (NPA)

The Dow Jones Industrial Average fell 218.45 points, or 0.91%, to 23,664.64, the SP 500 lost 20.02 points, or 0.70%, to 2,848.42 and the Nasdaq Composite added 45.27 points, or 0.51%, to 8,854.39.

Financial Sector in India

Australia. Parliament. Senate. Economics Legislation Committee, author, issuing body

Online Resource