NEWS
Strengthening ICT supply chain resilience is everyone’s business
December 13, 2021 2:22 p.m.
By Genie Sugene Gan, Head of Government Affairs, Asia-Pacific, Kaspersky
NotPetya, WannaCry, ShadowPad, and Sunburst may or may not be household names, but these malware, and many more, have unleashed significant harm on the world.
Recently, one such instance of malware was used to attack an IT services company based in Dublin, which supplies security software to scores of large cybersecurity contractors. Working through the company, hackers infected hundreds of its clients worldwide with ransomware, and demanded USD 50,000–5 million from each business in exchange for the decryption key.
Earlier this year, another attack hit an American IT software company, and subsequently infiltrated nine U.S. federal agencies, including the Office of the President, and the Treasury and Commerce Departments.
What these attacks have in common is their modus operandi: hackers targeted software vendors or IT companies to gain backdoor access to their clients’ systems, infecting hundreds and thousands of systems in one go.
This is perhaps how “supply chain” got its name – each part of the process stream is inevitably linked to another. When one part gets affected, a domino effect soon follows.
The Problem
ICT supply chain cyberattacks are on the rise – the European Union for Cybersecurity estimates a four-fold growth in attacks in 2021 compared to 2020. The risk is compounded as vulnerabilities can be introduced at any phase of the ICT life cycle: from design – through development, production, distribution, acquisition and deployment – to maintenance.
The impact of these breaches is also set to grow, given the increasing interconnection of IT systems across organizations, sectors and countries. In a 2019 survey by Gartner, 60% of organizations reported working with more than 1000 third parties.
Upon successful infiltration, cybercriminals enjoy free rein to conduct cyber espionage, steal data and intellectual property, or extort money through ransomware attacks, which have been on the rise. From 2019 to 2020, the number of Kaspersky users encountering targeted ransomware – malware used to extort money from high-profile targets such as corporations, government agencies, and municipal organizations – increased by 767%.
While the impact on governments and enterprises may feature more prominently, the wider public is not spared. An attack on a grocery chain could force the temporary closure of scores of supermarkets, or a virus may be unleashed on millions of PC users through a software update (as, for example, occurred in the ShadowHammer3+1 attack, which Kaspersky detected and promptly mitigated in 2019). Taking it further, the compromise of systems providing healthcare or public utilities may disrupt the provision of these essential services. And these are the very day-to-day things that affect individuals like you and me.
Early Responses
Recognizing the risks and impact of supply chain cyberattacks, more countries are taking action. Since 2020, national cybersecurity strategies were either released or updated across Asia-Pacific, including in Singapore, Malaysia, Australia and Japan. Other countries, like Vietnam, India and Indonesia, are soon expected to release their own national strategies or implementation details too.
But when it comes to ICT supply chain resilience, the solution is more complex in view of the multitude and range of stakeholders involved. Some governments have intervened, with a focus on protecting the ICT supply chains of Critical Information Infrastructure (CII):
- In 2018, the U.S. Department of Homeland Security established the ICT Supply Chain Risk Management Task Force, a public-private partnership to develop consensus on risk management strategies to enhance global ICT supply chain security. The Task Force has released guidelines on the sharing of supply chain risk information, and risk considerations for managed service provider customers.
- The Australian Cyber Security Centre also published guides this year for businesses to identify cybersecurity risks associated with supply chains, and to manage these risks.
- The Cybersecurity Agency of Singapore announced that it will shortly launch a CII Supply Chain Programme for stakeholders to adhere to international best practices and standards for supply chain risk management.
The Way Ahead
The global nature of ICT supply chains necessitates a stronger, coordinated response at every level.
Globally, countries and International Organizations (e.g., INTERPOL, the UN, ASEAN, Europol) have taken steps to tighten cooperation and share best practices:
- Multilateral platforms – Today, the United Nations Group of Governmental Experts and Open-ended Working Group are platforms that can be used by countries to develop consensus around cyber processes and norms. Conferences such as the UN Internet Governance Forum provide further opportunities to discuss at the working level: in 2020, Kaspersky together with our partners organized a workshop to discuss the need and ways to develop assurance and transparency in global ICT supply chains.
- Bilateral partnerships – Countries around the region, including Vietnam, India, Japan, Singapore, China and South Korea, have committed to MOUs on various aspects of cybersecurity – an important step in making progress domestically and globally.
While each of these platforms plays an important role in building consensus, exchanging knowledge and best practices, and harmonizing standards, moving forward, it is imperative to have more targeted conversations on global ICT supply chain resilience, given the wide-ranging types of actors and impact involved globally.
Nationally, governments must continue to drive nationwide efforts to establish a baseline level of cybersecurity across sectors through laws, regulations, guidelines, training requirements and awareness building. The examples above provide a sense of some of the measures undertaken by governments.
Given the integrated nature of ICT supply chain resilience, there is a particular need to develop core principles (e.g., security-by-design), technical standards and legislative/regulatory frameworks to ensure a consistent level of cybersecurity and accountability across stakeholders. Self-assessment tools can also be published in addition to facilitate implementation.
Individually, everyone is responsible for ensuring our collective cybersecurity. Naturally, businesses that develop products and maintain systems must lead the way.
At Kaspersky, we believe that transparency in the components within and connections across software supply chains is the best way to ensure the integrity and trustworthiness of our digital infrastructure. Our commitment to this principle is evidenced by our Global Transparency Initiative, where, among other things, we:
- Welcome third parties to review our source code. More recently, we made it easier for our partners and the public to understand what is inside our products by providing a software bill of materials – a list of all the components, information about them, and the relationships between them.
- Practice responsible vulnerability disclosure, and have on many occasions, alerted IT companies regarding vulnerabilities in their systems, averting several potentially significant cyberattacks.
Cybersecurity is everyone’s business because our collective cybersecurity is only as strong as that of the weakest link among us. To remain ahead of the game, a holistic approach involving all stakeholders is required. We must look beyond playing catch-up and reacting to cyberthreats. It is imperative to take a long-term approach in designing the cybersecurity ecosystem, which includes building a strong talent pipeline to meet the needs of CERTs, forensic analysis teams, and IT departments, and designing CII that is secure-by-design.
The ideas above are by no means an exhaustive list, but hopefully, they provide an idea of where to begin – together – in view of the long way that lies ahead of us.
NEWS
SCG promotes green homes with sustainable products
12:36 p.m. April 24, 2024
Siam Cement Group (SCG), a pioneer in the construction material industry and the number one brand in Thailand, showcased during the 2024 Construction Exhibit (CONEX) some of its ground-breaking product innovation, sustainability, and durability, bringing a new perspective to convention attendants and industry peers.
As a prominent player in the construction industry and a home solutions provider, SCG has demonstrated its adaptability to recent market trends, considering consumer demands, longevity, and environmental preservation, making the brand inclusive and holistic.
SCG ensures that its products follow the necessary standards, like the Green Choice Award, which is given to products and services certified to be less environmentally harmful.
“In SCG, we are currently pushing for eco-friendly products. This is something that we really want to emphasize and we are really passionate about improving,” said SCGM President Bancha Chaiprom who also highlighted how the Philippine market is a strong venue because of their affluence to climate concerns and because of their constant exposure to its adverse effects, like intense heat or extreme rainfall.
Showcase green innovations and design trends
In recent years, SCG has placed a strong emphasis on innovation, sustainability, and durability in its product development efforts. Additionally, SCG is the first in Thailand to self-certify the environmental friendliness of its products and services using an eco-label ‘SCG Green Choice’, giving buyers an assurance that these products are truly friendly to the environment and safe to their well-being by providing clear information, product knowledge, and attributes of the labelled products.
Now, at Conex, we are thrilled to showcase some of our ground-breaking products that exemplify these principles. SCG Conex is an annual event that serves as a premier platform for unveiling the latest advancements in construction materials, technologies, and design trends.
As SCG positions itself as a home solutions provider, homeowners can find eco-label products for decorative products with SmartWood and the newest C-Channel product, roofing with SCG concrete roof and Shinkolite, ceiling and walls with SCG SmartBoard, AAC with SmartBlock and insulation with SCG Stay Cool. Each product is carefully produced to meet green standards by omitting harmful ingredients or designed to promote sustainability within homes.
The SmartWood is a unique product from SCG that combines green, durable, and innovative aspects, and satisfies all ceiling, wall, and floor applications. It’s asbestos-free to maintain a healthy space and lessen environmental pollution while promoting durability to serve as an alternative for natural resources like wood.
Moreover, SCG also designed the SmartBoard ULTRA, a revolutionary fiber cement board that combines the best of both worlds: strength and flexibility. This product solves the common fiber cement issue, like edge cracking. It can also withstand extreme conditions, moisture, and impact.
Another green insulation solution from SCG to keep homes cool is the SCG Staycool, which is designed for ceilings, and reduces heat using HydroProtec technology to repel water and moisture to help prolong insulation performance. The natural insulation within their spaces will also enable homeowners to cut energy consumption and costs.
One product that also stands out is the SCG C-Channel Plus. This innovative solution mimics the functionality of steel beams but with numerous advantages. Constructed from fiber cement, the C-Channel Plus is lightweight, weighing five to six times less than real steel. This characteristic not only facilitates easier handling but also potentially lowers installation costs, making it a compelling choice for various construction projects.
Another notable product is Shinkolite, a renowned brand of transparent acrylic roofing sheets manufactured by SCG Chemicals, a subsidiary of the Siam Cement Group in Thailand. Shinkolite has emerged as a preferred option for contemporary construction endeavors, thanks to its exceptional blend of aesthetics, functionality, and longevity. Its transparent nature allows for ample natural light, enhancing the ambience of indoor spaces while maintaining durability and weather resistance. Shinkolite stands as a testament to SCG’s commitment to delivering high-quality solutions that meet the evolving needs of modern construction projects.
Besides the C-Channel Plus and Shinkolite, consumers can also find a lightweight and innovative building material called SCG SmartBlock. The primary advantage of SCG SmartBlock lies in its cellular structure. It consists of lightweight, air-filled bubbles that significantly reduce weight compared to standard concrete. Despite its lightness, SCG SmartBlock boasts impressive strength and durability. Moreover, the air bubbles trapped within the material create excellent insulation, keeping homes cooler in summer and warmer during the cold season, all while contributing to energy savings, allowing for a greener, more comfortable home.
Furthermore, SCG also offers the SCG Facade, which isn’t a single product but an umbrella term for SCG’s range of facade solutions made available by their subsidiaries, SCG D’COR and DECAAR by SCG. These solutions combine aesthetics with functionality to enhance the exterior of a building.
Coinciding with the company’s bid for easy-installation products, they have a technical team that consumers can consult with from the design phase and before installation to get the best results possible.
“We also recently launched the Smart Academy to teach contractors how to properly install our products, is available nationwide through dealers and online,” said President Bancha.
The products’ durability reduces the need for frequent replacements or repairs, minimizing the environmental impact associated with construction activities over a building’s lifespan. President Bancha also emphasizes how SCG uses recycled plastic materials in its products to reduce environmental waste.
As Thailand’s number one home solutions provider, SCG continues to produce innovative, eco-friendly, and durable products to cater to their market’s preferences and stay updated with the latest trends in construction.
NEWS
Toyota Motor Vietnam selects Synology as Data Management Partner
6:53 p.m. March 31, 2024
Toyota Motor Vietnam, one of Vietnam’s largest automobile manufacturers, has partnered with Synology to strengthen its data management infrastructure for its growing data storage and resiliency demands.
“Synology’s storage solution has increased our business resilience,” said Bui Ta Hoan, IT Division Head at Toyota Motor Vietnam. “Synology is reliable, secure, and provides future-proofing scalability for growing data needs.”
Toyota Motor Vietnam deployed Synology data management systems to securely store hundreds of terabytes of data that are generated from assembling over 10,000 vehicles per year. Together with Synology’s high availability and remote data protection features, Toyota Motor Vietnam’s IT infrastructure is more resilient than ever against disruptions.
“Synology solutions are widely adopted in the manufacturing industry for a few simple reasons,” said Jola Le, Synology Vietnam Sales Manager. “Its robustness and ease of use save our customers considerable time. We’re proud to be able to transform and help modernize Toyota Motor Vietnam’s data management and protection needs.”
To learn more about the deployment, please visit: Synology customer story – Toyota Motor Vietnam
NEWS
Kaspersky shares cybersecurity tips for a peaceful getaway during the Holy Week
5:18 p.m. March 28, 2024
As the holiday season approaches, the urge to unwind and kick back is natural. And it’s all too common for people to let their guard down completely when connecting to the Internet too– but shouldn’t.
Recently, the Philippine National Police (PNP) Anti-Cybercrime Group shared their findings on identity theft cases in the country. Between November 2023 and February 2024, they uncovered 178 cases of “hijack profile” incidents. Half of these cases, eighty-nine (89) happened just in February. These cases mirror an upward trend seen throughout 2023, where the PNP recorded almost 3,000 cyber identity theft incidents.
Identity theft occurs when a fraudster obtains personal details from a victim, enabling them to commit identity fraud or fraudulently obtain goods/services. This stolen data can be used to open new bank accounts, take over existing ones, or impersonate the victim for criminal activities.
“In 2023, we monitored 26,164,699 web threats attacks in the Philippines, which made the country 4th with the highest web threats attacks globally, and when we looked at it closely, we found out that Filipinos were facing one (1) attack per second. These numbers are a reminder of the importance of remaining vigilant at all times,” said Yeo Siang Tiong, General Manager for Southeast Asia at Kaspersky.
Web threats are browser-based attacks used by cybercriminals to spread malware. This includes common dangers like phishing and viruses, along with offline data theft.
To help Filipinos enjoy a peaceful holy week vacation, below are some of Kaspersky’s recommendations to follow:
General travel tips:
- Be skeptical of tantalizing offers
- Check to make sure your connection is secure before entering any personal information on a website
- Always check the address bar to make sure you are actually on the website you are supposed to be on
- Buy tickets and book hotel rooms either from the company directly or through a well-known ticketing or hotel site
- Do not participate in questionable giveaways
- Use strong passwords and two-factor authentication wherever possible
- Checking the address bar is always a good idea, but it may be insufficient; some malefactors know how to fake addresses. So always use a security solution like Kaspersky Premium that scans malicious links.
Avail up to 20% discounts on Kaspersky’s consumer solutions like Kaspersky Premium, Plus and Standard for the whole month of March at https://www.kasperskyph.com/.
On protecting your personal data against identity theft:
- Keep things to a minimum: Use social media sparingly. Don’t use your real name, never post any personal information and don’t share any personal data via social messaging services.
- Keep your computer up to date: Many hackers now use malware to steal your information. Keeping your computer up to date with security patches and antivirus software helps protect against existing vulnerabilities and detect new attacks.
- Browse safely: To limit the chance of a malware infection, don’t open unknown email attachments or browse suspicious websites.
- Be self-aware: Take the time to check your credit card statements for any strange charges, and contact your credit card bank provider the minute you notice that something’s awry.
SCG promotes green homes with sustainable products
Limited-Edition Tanduay Heritage Rum Celebrates Brand’s Tradition of Excellence
Toyota Motor Vietnam selects Synology as Data Management Partner
Ateneo gives PBA guest team fits in 102-93 loss
First in Manila! All immersive experiences lead to SM with its 3D Whale Shark billboard, Space Tunnel, Golden Gateway, dazzling light shows
Up to Date – Pop and viral news, memes, photos, videos, music
