Bianca Wong, a seasoned executive with over 22 years of experience across human resources and business strategy roles, has been appointed as the new Regional Vice President for Southeast Asia at FedEx.

Donald Trump's victory may bring some relief for the leaders of three authoritarian Southeast Asian nations caught in the influence struggle between the U.S. and China -- Myanmar, Laos and Cambodia.

Singapore-based fintech ROSHI has released an extensive report analyzing the cost of living in Singapore, including local trends and regional comparisons within Southeast Asia.

 New research conducted by Tenable®, Inc., the exposure management company, has uncovered more than 26,500 potential internet-facing assets among Southeast Asia’s top banking, financial services and insurance (BFSI) companies by market capitalisation across Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam.

On July 15, 2024, Tenable examined the external attack surface of over 90 BFSI organisations with the largest market capitalisations across the region. The findings revealed that the average organisation possesses nearly 300 internet-facing assets susceptible to potential exploitation, resulting in a total of more than 26,500 assets across the study group.

Singapore ranked the highest among the six countries assessed, with over 11,000 internet-facing assets identified across its top 16 BFSI companies. Over 6,000 of those assets are hosted in the United States. Next on the list is Thailand with over 5000 assets. The distribution of internet-accessible assets underscores the need for cybersecurity strategies that adapt to the rapidly evolving digital landscape.

“The results of our study reveal that many financial institutions are struggling to close the priority security gaps that put them at risk. Effective exposure management is key to closing these gaps,” said Nigel Ng, Senior Vice President, Tenable APJ. “By identifying and securing vulnerable assets before they can be exploited, organisations can better protect themselves against the growing tide of cyberattacks.” 

Cyber Hygiene Gaps 
The Tenable study revealed many potential vulnerabilities and exposed several cyber hygiene issues among the study group, including outdated software, weak encryption, and misconfigurations. These vulnerabilities provide cybercriminals with easily exploitable potential entry points, posing potential risk to the integrity and security of financial data. 

Weak SSL/TLS encryption 

A notable finding is that among the total assets, organisations had nearly 2,500 still supporting TLS 1.0—a 25-year old security protocol introduced in 1999 and disabled by Microsoft in September 2022. This highlights the significant challenge organisations with extensive internet footprints face in identifying and updating outdated technologies.

Misconfiguration increases external exposure

Another concerning discovery was that over 4,000 assets, originally intended for internal use, were inadvertently exposed and are now accessible externally. Failing to secure these internal assets poses a significant risk to organisations, as it creates an opportunity for malicious actors to target sensitive information and critical systems.

Lack of encryption 

There were over 900 assets with unencrypted final URLs, which can present a security weakness. When URLs are unencrypted, the data transmitted between the user's browser and the server is not protected by encryption, making it vulnerable to interception, eavesdropping, and manipulation by malicious actors. This lack of encryption can lead to the exposure of sensitive information, such as login credentials, personal data, or payment details, and can compromise the integrity of the communication.

API vulnerabilities amplify risk

The identification of over 2,000 API v3 out of the total number of assets among organisations' digital infrastructure poses a substantial risk to their security and operational integrity.

APIs serve as crucial connectors between software applications, facilitating seamless data exchange. However, inadequate authentication, insufficient input validation, weak access controls, and vulnerabilities in dependencies within API v3 implementations create a vulnerable attack surface.

Malicious actors can exploit such weaknesses to gain unauthorised access, compromise data integrity, and launch devastating cyber attacks.

“The cybersecurity landscape is evolving faster than ever, and financial institutions must evolve with it, so they can know where they are exposed and take action to close critical risk” Ng added. “By prioritising exposure management, these organisations can better protect their digital assets, safeguard customer trust, and ensure the resilience of their operations in an increasingly hostile digital environment.”

About Tenable
Tenable® is the exposure management company, exposing and closing the cybersecurity gaps that erode business value, reputation and trust. The company’s AI-powered exposure management platform radically unifies security visibility, insight and action across the attack surface, equipping modern organizations to protect against attacks from IT infrastructure to cloud environments to critical infrastructure and everywhere in between. By protecting enterprises from security exposure, Tenable reduces business risk for more than 44,000 customers around the globe. Learn more at tenable.com. 

Notes to Editors:

1. Tenable examined the top 12-16 BFSI companies discoverable based on market cap. 
2. In the context of this alert:

• An asset is a domain name, subdomain, or IP addresses and/or combination thereof of a device connected to the Internet or internal network. An asset may include, but not limited to web servers, name servers, IoT devices, network printers, etc. Example: foo.tld, bar.foo.tld, x.x.x.xs.
• The Attack Surface is from the network perspective of an adversary, the complete asset inventory of an organisation including all actively listening services (open ports) on each asset.

The Eastern & Oriental Express is back on the rails in Southeast Asia after a long hiatus.

The Australian Government has today launched Invested: Australia's Southeast Asia Economic Strategy to 2040 to deepen Australia's economic engagement with our region and ensure our shared future prosperity.

Summer Institute 2024: Modern Southeast Asia Application

What should the transitional economies of Southeast Asia do, if anything, to address their multiple currency situations?

This report considers how finance and planning ministries can respond strategically to climate risk, highlighting best practices from Southeast Asia and identifying crosscutting priorities.

This report outlines the cascading environmental, social, and economic impacts of aquatic biodiversity loss in Southeast Asia and recommends ways to develop scalable projects that tackle river pollution and support sustainable development.

Stanford, California : Stanford University Press, 2008.

[Singapore] : ISEAS - Institute of Southeast Asian Studies, [[2013]-

Understated and Sometimes Contentious: A Perspective on the US-Australia Alliance in Southeast Asia Understated and Sometimes Contentious: A Perspective on the US-Australia Alliance in Southeast Asia

​​Vietnamese Perspective on the Significance of the US-Australia Alliance in Southeast Asian Security​ ​​Vietnamese Perspective on the Significance of the US-Australia Alliance in Southeast Asian Security​

​​Malaysian perspectives of the US-Australia alliance in Southeast Asia​ ​​Malaysian perspectives of the US-Australia alliance in Southeast Asia​

Dorchester, Mass. : National Association for the Education and Advancement of Cambodian, Laotian, and Vietnamese Americans

New evidence has pushed back the timing.

EV Arm Switch Mobility set for EBITDA break-even this fiscal

MapmyIndia will invest $4 million for a 40% stake into the PT Terra Link Technologies while the rest will be owned by Hyundai Autoever

Fave, formerly Kfit, is understood to be looking at a corpus of $50 million in its Series C round.

The post Fave seeks funding to expand ops into more Southeast Asian countries appeared first on DealStreetAsia.

Archipelago's second fund will deploy 40-50% of its corpus in the Philippines.

The post PE firm Archipelago Capital eyes $250m for second Southeast Asia fund appeared first on DealStreetAsia.

Startups in health care and deliveries have managed to raise millions to accelerate their expansion.

The post Southeast Asia’s healthcare startups attract wary investors appeared first on DealStreetAsia.

Despite the recent pressure of Covid-19, key SEA co-living operators said they would continue to expand this year.

The post Southeast Asian operators bullish on co-living growth prospects but see it as long-term play appeared first on DealStreetAsia.

The crisis has also unearthed new opportunities for investors eyeing distressed hospitality and retail assets.

The post Southeast Asia’s realty market braces for short-term instability appeared first on DealStreetAsia.

Many startups are scrambling to cut costs - slicing payrolls and the wages of those still on the job. 

The post Southeast Asian startups tighten purse-strings as coronavirus hits revenue appeared first on DealStreetAsia.

The number of deals touched 146 in the first quarter this year, compared to 127 in the same period last year.

The post Southeast Asia’s startups raised $2.9b in Jan-March, up 3% from Q1 last year appeared first on DealStreetAsia.

The Southeast Asian region has the potential to attract significant amounts of international investment in the coming years. To help ASEAN countries address the challenges that arise from an increased openness to investment, this report analyses the region's investment climate and suggests ways to bring about a greater convergence of both policies and outcomes for the countries involved.

This conference showcased ASEAN’s regional investment integration achievements and efforts. Practitioners highlighted policy reforms at the national and regional levels and considered practical measures to enhance integration. Ways to successfully attract investment that will strengthen ASEAN supply chains were identified.

This joint OECD-UNIDO report identifies investment and related policies to enhance linkages between small and medium-sized enterprises (SMEs) in Southeast Asia and multinational enterprises (MNEs) and their impacts on SME outcomes in Southeast Asia.

This report builds on national reviews of seven countries in Southeast Asia. It looks at common challenges across the region and at the interplay between regional initiatives and national reforms.

This note identifies key findings and policy messages on how small and medium- sized enterprises (SMEs) in Southeast Asia can enhance integration in global value chains (GVCs). The list of policy messages in this note is not intended to be exhaustive but rather to provide a set of concrete and actionable measures.

As one of the most dynamic regions in the world with an increasingly diversified economy, an expanding middle class, and a young and literate population, Southeast Asia is well positioned to embrace the ongoing global digital transformation. Digitalisation can spur the much needed innovation and productivity growth across many activities, transform public services, and improve well-being for all citizens.

26-27 November 2018, Vientiane, Lao People's Democratic Republic. The conference will provide a forum to discuss best practices on developing financial education and consumer protection in supporting financial inclusion in Lao P.D.R and other Southeast Asian countries.

Southeast Asia’s over-reliance on natural resources like oil, gas, minerals and wood for economic growth is unsustainable over the long term and is causing environmental damage that will hurt future prosperity if left unchecked, according to a new OECD report.

Southeast Asia’s over-reliance on natural resources like oil, gas, minerals and wood for economic growth is unsustainable over the long term and is causing environmental damage that will hurt future prosperity if left unchecked, according to a new OECD report.

The OECD and the Ministry of Finance of Indonesia (Fiscal Policy Agency) held an expert seminar on 4-5 November, 2015 in Bogor, Indonesia. The event brought together representatives from the ASEAN line ministries, research organisations and other key international organisations to share their knowledge and expertise on the topic. This event was supported by the OECD Knowledge Sharing Alliance.

Skills and educational development for inclusive and sustainable growth are becoming significant drivers in OECD countries.

7th annual expert meeting of the initiative on Employment and Skills Strategies in Southeast Asia (ESSSA) and GIZ/ RECOTVET Policy Dialogue - 7-8 October, 2015 - Sokha Angkor Resort, Siem Reap, Cambodia

Skills and educational development for inclusive and sustainable growth are becoming significant drivers in OECD countries.