NEWS
Strengthening ICT supply chain resilience is everyone’s business
December 13, 2021 2:22 p.m.
By Genie Sugene Gan, Head of Government Affairs, Asia-Pacific, Kaspersky
NotPetya, WannaCry, ShadowPad, and Sunburst may or may not be household names, but these malware, and many more, have unleashed significant harm on the world.
Recently, one such instance of malware was used to attack an IT services company based in Dublin, which supplies security software to scores of large cybersecurity contractors. Working through the company, hackers infected hundreds of its clients worldwide with ransomware, and demanded USD 50,000–5 million from each business in exchange for the decryption key.
Earlier this year, another attack hit an American IT software company, and subsequently infiltrated nine U.S. federal agencies, including the Office of the President, and the Treasury and Commerce Departments.
What these attacks have in common is their modus operandi: hackers targeted software vendors or IT companies to gain backdoor access to their clients’ systems, infecting hundreds and thousands of systems in one go.
This is perhaps how “supply chain” got its name – each part of the process stream is inevitably linked to another. When one part gets affected, a domino effect soon follows.
The Problem
ICT supply chain cyberattacks are on the rise – the European Union for Cybersecurity estimates a four-fold growth in attacks in 2021 compared to 2020. The risk is compounded as vulnerabilities can be introduced at any phase of the ICT life cycle: from design – through development, production, distribution, acquisition and deployment – to maintenance.
The impact of these breaches is also set to grow, given the increasing interconnection of IT systems across organizations, sectors and countries. In a 2019 survey by Gartner, 60% of organizations reported working with more than 1000 third parties.
Upon successful infiltration, cybercriminals enjoy free rein to conduct cyber espionage, steal data and intellectual property, or extort money through ransomware attacks, which have been on the rise. From 2019 to 2020, the number of Kaspersky users encountering targeted ransomware – malware used to extort money from high-profile targets such as corporations, government agencies, and municipal organizations – increased by 767%.
While the impact on governments and enterprises may feature more prominently, the wider public is not spared. An attack on a grocery chain could force the temporary closure of scores of supermarkets, or a virus may be unleashed on millions of PC users through a software update (as, for example, occurred in the ShadowHammer3+1 attack, which Kaspersky detected and promptly mitigated in 2019). Taking it further, the compromise of systems providing healthcare or public utilities may disrupt the provision of these essential services. And these are the very day-to-day things that affect individuals like you and me.
Early Responses
Recognizing the risks and impact of supply chain cyberattacks, more countries are taking action. Since 2020, national cybersecurity strategies were either released or updated across Asia-Pacific, including in Singapore, Malaysia, Australia and Japan. Other countries, like Vietnam, India and Indonesia, are soon expected to release their own national strategies or implementation details too.
But when it comes to ICT supply chain resilience, the solution is more complex in view of the multitude and range of stakeholders involved. Some governments have intervened, with a focus on protecting the ICT supply chains of Critical Information Infrastructure (CII):
- In 2018, the U.S. Department of Homeland Security established the ICT Supply Chain Risk Management Task Force, a public-private partnership to develop consensus on risk management strategies to enhance global ICT supply chain security. The Task Force has released guidelines on the sharing of supply chain risk information, and risk considerations for managed service provider customers.
- The Australian Cyber Security Centre also published guides this year for businesses to identify cybersecurity risks associated with supply chains, and to manage these risks.
- The Cybersecurity Agency of Singapore announced that it will shortly launch a CII Supply Chain Programme for stakeholders to adhere to international best practices and standards for supply chain risk management.
The Way Ahead
The global nature of ICT supply chains necessitates a stronger, coordinated response at every level.
Globally, countries and International Organizations (e.g., INTERPOL, the UN, ASEAN, Europol) have taken steps to tighten cooperation and share best practices:
- Multilateral platforms – Today, the United Nations Group of Governmental Experts and Open-ended Working Group are platforms that can be used by countries to develop consensus around cyber processes and norms. Conferences such as the UN Internet Governance Forum provide further opportunities to discuss at the working level: in 2020, Kaspersky together with our partners organized a workshop to discuss the need and ways to develop assurance and transparency in global ICT supply chains.
- Bilateral partnerships – Countries around the region, including Vietnam, India, Japan, Singapore, China and South Korea, have committed to MOUs on various aspects of cybersecurity – an important step in making progress domestically and globally.
While each of these platforms plays an important role in building consensus, exchanging knowledge and best practices, and harmonizing standards, moving forward, it is imperative to have more targeted conversations on global ICT supply chain resilience, given the wide-ranging types of actors and impact involved globally.
Nationally, governments must continue to drive nationwide efforts to establish a baseline level of cybersecurity across sectors through laws, regulations, guidelines, training requirements and awareness building. The examples above provide a sense of some of the measures undertaken by governments.
Given the integrated nature of ICT supply chain resilience, there is a particular need to develop core principles (e.g., security-by-design), technical standards and legislative/regulatory frameworks to ensure a consistent level of cybersecurity and accountability across stakeholders. Self-assessment tools can also be published in addition to facilitate implementation.
Individually, everyone is responsible for ensuring our collective cybersecurity. Naturally, businesses that develop products and maintain systems must lead the way.
At Kaspersky, we believe that transparency in the components within and connections across software supply chains is the best way to ensure the integrity and trustworthiness of our digital infrastructure. Our commitment to this principle is evidenced by our Global Transparency Initiative, where, among other things, we:
- Welcome third parties to review our source code. More recently, we made it easier for our partners and the public to understand what is inside our products by providing a software bill of materials – a list of all the components, information about them, and the relationships between them.
- Practice responsible vulnerability disclosure, and have on many occasions, alerted IT companies regarding vulnerabilities in their systems, averting several potentially significant cyberattacks.
Cybersecurity is everyone’s business because our collective cybersecurity is only as strong as that of the weakest link among us. To remain ahead of the game, a holistic approach involving all stakeholders is required. We must look beyond playing catch-up and reacting to cyberthreats. It is imperative to take a long-term approach in designing the cybersecurity ecosystem, which includes building a strong talent pipeline to meet the needs of CERTs, forensic analysis teams, and IT departments, and designing CII that is secure-by-design.
The ideas above are by no means an exhaustive list, but hopefully, they provide an idea of where to begin – together – in view of the long way that lies ahead of us.
NEWS
DEFTAC celebrates 3 decades of excellence, honors global champs
10:27 a.m. May 21, 2025
DEFTAC, Southeast Asia’s pioneering Brazilian jiu-jitsu and mixed martial arts elite group, celebrated its three decades of excellence in the sport at the Hillton by honoring Filipino world and Asian champions, as well the people behind the organization and its contributors.
The world champs include Brielle Bartolome, Thiago Bartolome, Claudia Lepiten, Cheska Lepiten, Tessa Joson, Ali Joson, Tomas Joson, Ethan Ramos, Uno Ordona, Julian Santos, Franco del Pilar, Aielle Aguilar, Basti Dela Cruz, Althea Brion, Princess Reuma, and Yani Lopez.
The Asian champions include Alex Lee, Fierre Afan, Andrea Ocampo, Charlie Ratcliff, Annie Parungao, Lucas Aguilar, Miguel Gutierrez, Lucas Holganza, Joaquin Marte, Ella Olaso, Yani Lopez, and Abby Balisme.
“From humble beginnings to world-class achievements, we have stood together —disciplining bodies, sharpening minds, and building the strongest bonds of brotherhood,” DEFTAC founder Alvin Aguilar said.
“Thirty years on, we are not just celebrating our past — we are igniting the future,” Aguilar added.
The organization also honored its founding members, dedicated coaches and outstanding chapters.
High on the list of founding members who were honored and presented each with symbolic rings representing their affiliation and achievements were Alvin Lee, Joel Yaptinchay, Pichon Garcia, among others.
Lee is a 2nd-degree Jiu-Jitsu Black Belt and Chapter Head of DEFTAC Victoria Sports in Quezon City, while Yaptinchay is also a 2nd-degree Jiu-Jitsu Black Belt and Chapter Head of DEFTAC La Union.
Garcia, on the other hand, is a 3rd-degree Jiu-Jitsu Black Belt and Chapter Head of DEFTAC Daang Hari in Las Piñas.
The other founding members who were honored were Joel Lepiten (1st-degree Jiu-Jitsu Black Belt), Jerome Lepiten (Jiu-Jitsu Black Belt, Founder of Little Foot Kids Jiu-Jitsu), Richard Lasprilla (2nd-degree Jiu-Jitsu Black Belt, Chapter Head of DEFTAC Verde Pasig) and Chief Alvin Aguilar (4th-degree Jiu-Jitsu Black Belt, Founder and Head Coach of DEFTAC).
Pichon Garcia and Joel Yaptinchay delivered heartfelt speeches reflecting on DEFTAC’s humble beginnings and growth over the past three decades.
The celebration at the Hillton hotel was highlighted by the induction into Hall of Fames of eight individuals recognized for their contributions to DEFTAC.
They are Annie Parungao (First Filipina MMA (IMMAF) World Champion) and Chris Hofmann (First URCC MMA 2-Division World Champion and AIMAG Belt Wrestling Bronze Medalist).
Other awardees are Richard Lasprilla (First URCC MMA Champion), Marcus Valda (Multiple SEA Games Gold Medalist in Wrestling, and DLSU Alumni Association Sports Achievement Awardee), Maybelline Masuda (First Filipino World Jiu-Jitsu Champion (IBJJF) and First homegrown Filipina Jiu-Jitsu Black Belt, and DLSU Alumni Association Sports Achievement Awardee), Fierre Afan (First Filipino Grappling World Champion (UWW) and First Filipino Grappling Asian Champion, UWW), Aisa Ratcliff (First Filipina Grappling Asian Champion, UWW), World Combat Games Bronze Medalist and Aielle Aguilar (First 5-year-old Filipino Jiu-Jitsu World Champion and 3-time Youngest Jiu-Jitsu World Champion).
Meanwhile, Richard Lasprilla and Maybelline Masuda shared inspiring messages highlighting their journeys and the impact of DEFTAC on their careers.
On the other hand, SPARK Awards (Recognizing Trailblazers) were given to individuals and groups that ignited change and inspired others within the DEFTAC community.
The awards were given to the following:
1. Ceriola Brothers (Justin, Anton, Gabriel & Enzo) – Pioneers of DEFTAC’s Kids Program
2. Aguilar Brothers (Liam, Lucas & Lucho) – Founding members of the country’s first Junior Grappling Team; DEFTAC HQ Coaches
3. Del Rosario Brothers (Gabriel & King) – Founding members of the country’s first Junior Grappling Team
4. Fierre Afan – Decorated champion in Jiu-Jitsu, Grappling, and Wrestling
5. Joaquin Marte – Spearheaded the revival of the DLSU Brazilian Jiu-Jitsu & Grappling Organization; Head Coach of DEFTAC Taekwondo Program
6. David Zaldariaga – Decorated champion from Iloilo; member of the country’s first Junior Grappling Team.
The Outstanding Chapters that were also recognized were DEFTAC chapters in Alabang, Antipolo, BF Homes, Cavite, Cebu, La Union, Makati, Deftac HQ, and Deftac Taguig.
The Most Valuable Coaches awards were given to mentors who have tirelessly trained and guided DEFTAC athletes, namely Mike Tabamo, Lester del Rosario, Joaquin Marte, Garrick Nayo, Alvin Lee, Bart Bartolome, Kyle Torente, Rommel Alejo, and Jimmy Angana.
Since its inception in 1995 and guided by Aguilar, DEFTAC has grown into Asia’s largest jiu-jitsu team, boasting over 52 gyms and 221 satellite training centers nationwide.
NEWS
GCash, Cebuana Lhuillier Bank enable access to savings for more Filipinos
7:33 p.m. May 19, 2025
Only 1 out of 3 Filipinos can save, with half of them opting to save their money at home, according to the Bangko Sentral ng Pilipinas. However, this traditional way of saving exposes their hard-earned money to risks of fire and theft, with BSP even noting its potential impact on currency circulation.
“Trusted financial institutions provide fundamental security for funds. On top of this, they also offer an opportunity for Filipinos to get the most out of their hard work: the availability of high-yield savings accounts that offer competitive interest rates,” said Winsley Royce Bangit, Group Head of New Businesses, GCash.
In a move to democratize access to high-yield savings accounts among Filipinos, GCash, through GSave, has partnered with microfinancial services provider Cebuana Lhuillier Bank to offer a savings account designed to provide higher interest rates, accessible through an e-wallet they already trust for everyday transactions.
“GCash and Cebuana are driven by the same mission of making financial services accessible to Filipinos nationwide, especially the underserved communities,” said Bangit. “Through this collaboration, we hope to empower Filipinos to cultivate their financial well-being by transforming saving from being a burden to being an actionable step.”
With over 3,500 branches nationwide, Cebuana is bringing its expertise in financial inclusion to the cashless ecosystem, enabled by finance super app GCash, with millions registered users in the country. Under the partnership, GCash users can now open an eC-Savings by Cebuana Lhuillier Bank account through GSave, a savings marketplace where users can grow and secure their funds within the GCash app. Account holders of eC-Savings by Cebuana Lhuillier Bank on GSave will get 3.5% p.a. interest, regardless of their deposit amount, enabling them to earn higher interest income compared with traditional savings accounts.
Perks for Savvy Savers: Cashback and Insurance
To help jumpstart their savings journey, users who open eC-Savings by Cebuana on GCash will get PHP 100 cashback on their initial deposit. Moreover, eC-Savings account holders will get up to PHP 33,000 in free accident coverage.
“While most hardworking Filipinos understand the value of having insurance, cost still prevents them from prioritizing it,” noted Bangit. “We introduced this benefit so they no longer have to face a trade-off between building their savings and having peace of mind during their daily hustle.”
Savings Made More Accessible
A key deterrent for Filipinos to save money in traditional banks is the perceived complexity of opening a bank account, typically requiring in-person visits and submission of supporting documents. The availability of Cebuana Lhuillier Bank on GSave eliminates this hurdle, as GCash users can open an account on GSave on the app, without having to submit additional IDs.
The BSP study also noted that among the mass market, the amount of savings they have tends to be small and often earmarked for immediate expenses, with most preferring to keep funds readily accessible at home. Given this need for accessible savings, GSave enables users to deposit as low as PHP 1 directly from their GCash wallet. Users no longer have to worry about their accounts being closed, as the eC-Savings account does not have a minimum maintaining balance.
“Filipinos’ hardworking spirit deserves to be matched by financial services that work just as hard as they do, actively supporting their financial goals. By building upon the trust of millions of Filipinos in GCash and Cebuana, we hope to empower their aspirations for a secure future by making saving truly accessible and rewarding for all,” concluded Bangit.
To open an eC-Savings by Cebuana account on GSave, you must be a Filipino Citizen, at least 18 years old, and a fully verified GCash user. Ready to grow your money? You may access GSave through the GCash dashboard or find it under “Grow.” No GCash yet? Download the GCash App on the Apple App Store, Google Play Store, or Huawei App Gallery. Kaya mo, i-GCash mo!
NEWS
Is a Filipino sardines’ brand possibly the secret to health and longevity?
9:52 p.m. May 19, 2025
The story started with an article published by esteemed Harvard University in 2023, extolling the benefits of “Eating down the seafood chain”, meaning sardines. What was their basis?
The story started with an article published by esteemed Harvard University in 2023, extolling the benefits of “Eating down the seafood chain”, meaning sardines. What was their basis?
To start, the health benefits are tremendous. In a world of increasing metabolic health concerns, the blend of protein and Omega 3 fats, with nil carbohydrates, makes sardines a perfect fit for metabolic health. In addition, sardines are one of the most nutrient-dense foods on the planet, with plentiful levels of vitamin B12, D, calcium, selenium, phosphorous, iron, iodine, and CoQ10.
Finally, by being a small fish down the food chain, sardines are safe with low risk of containing mercury, unlike the larger fish species.
No wonder Harvard Health dedicated a report on sardines and other small marine foods, in its mission to educate the public.
The report may be found here:
https://www.health.harvard.edu/blog/why-eat-lower-on-the-seafood-chain-202303222904
The US-based Medical Wellness Association (MWA), the world’s leading organization of health, wellness, and medical professionals with over 6,000 members, then decided to take a deeper look. Are any specific sardines better than others? Are all brands the same? They specifically focused on processing of the sardines. What happens after they are wild caught at sea?
One brand stood out. The brand is Mega Sardines, from the Philippines.
What creates the edge for Mega is its vertical integration and unique innovation. Mega doesn’t lease fishing fleets, which means poor control over the systems at sea to ensure the wild-caught sardines are kept fresh.
No, Mega owns its entire fleet, and drives rigorous discipline to ensure maximum freshness and hygiene.
What all this means is it ensures “Catch to can in under 12 hours”. This is unprecedented speed of processing which delivers the freshest catch of wild caught sardines for consumers. This is a significant insurance policy to ensure freshness and preservation of the nutrients. 12 hours versus in many cases, days.
Based upon a review of the nutrient profile of sardines, coupled with the unique means of Mega’s processing, the MWA has done something never done in their 30+ year history: They have bestowed upon Mega Sardines the classification of “Superfood”, the first seafood worldwide to be granted the “Superfood” designation.
Dr. Christopher Breuleux, president and founder of the MWA remarked, “Mega Sardines can play a vital role in helping consumers around the world battle metabolic and cardiovascular disease. It is truly a gift from nature for human health, and the processing is done with ultimate care and with an eye towards preserving freshness all the way to the dinner table. It is, indeed, a ‘Superfood’ everyone should increase their intake of.”
The Mega approach and innovation are rooted with Mega’s founder, William Tiu Lim.
Tiu Lim’s dream from the very beginning five decades ago was noble, to find ways to ensure cost-effective, nutritious meals for the poorer households in his native Philippines. The pride on his face is evident as he holds the certificate from the MWA, as a validation of his work over the past 50 years.
“Today, Mega Sardines is no longer a fishing company, but a global wellness company. We want to help improve the wellness of the world’s consumers. This is a legacy and a mission worth fighting for”, said Tiu Lim.
Next dinner, with an eye towards health, you might want to find yourself saying, “Honey, please pass the sardines”.
Xiaomi introduces Redmi A5: Powerful camera, performance upgrades wrapped in new design
DEFTAC celebrates 3 decades of excellence, honors global champs
Chevron champions program to help Filipino pros upskill in Cloud Computing
