Serious Cyber Attacks In Singapore Reflect Poor Cyber Security

Cyber company breaches are becoming very common yet cyber security is not as good as it should be. A recent report by a cyber security firm Carbon Black, showed that as many as 96 per cent of organisations in Singapore have had at least one breach in the past 12 months due to external cyber-attacks.

Carbon Black’s second edition of the Singapore Threat Report, released on this month, also showed that close to half of the companies affected by data breaches incurred financial losses, while around eight in 10 saw their reputation taking a hit.

The report was based on a survey of more than 250 chief information officers, chief technology officers and chief information security officers (CIOs, CTOs and CISOs) working across a range of sectors here. They are from the financial, healthcare, government, retail, manufacturing, food and beverage (F&B), utilities, professional services, and media and entertainment sectors.

  • Of the organisations surveyed, 96 per cent said that they had suffered one or more breaches in the past 12 months due to external cyber-attacks. This percentage has not changed since the previous survey results were released in January this year. 
  • Of those that had experienced a cyber-attack, 48 per cent said that there was “negative financial impact” while 83 per cent reported damage to their reputation.
  • Furthermore, 93 per cent of these organisations reported an increase in cyber-attacks in the past year, marginally more than 92 per cent of the respondents in the previous survey. Predominantly, these were government organisations and authorities, as well as F&B businesses.

In terms of the sophistication of the attacks, just over nine in 10 of respondents said that the threats they were experiencing had grown in complexity.

This was most prevalent in the financial services sector, with 93 per cent of the firms reporting that cyber-attacks have become more sophisticated.

Challenges and Concerns

A key challenge reported by businesses is that while they would like bigger teams to combat cyber-attacks, 67 per cent of them said that recruiting and training cyber security personnel has become more difficult in the last 12 months. Nearly half (44 per cent) of financial services companies reported that recruitment challenges have become a lot more severe, while almost two-thirds of government organisations and local authorities reported a little more difficulty in recruiting.

Carbon Black’s report added that 98 per cent of CIOs and CISOs surveyed are concerned about how digital transformation projects and the roll-out of the 5G network would affect cyber security. Some were concerned that these changes would see more effective and destructive methods of cyber-crime happening (55 per cent), while others (54 per cent) thought that it would give more opportunities for cyber criminals to attack their organisations.

The top three types of cyber-attacks encountered by organisations in the past 12 months were:

1. Ransomware (15 per cent). Ransomware, used commonly by hackers to steal data, remained the most frequently used technique. In the previous survey, 28 per cent of the attacks were from ransomware. Hackers generally cut off access to the IT system and steal data until a ransom is paid before the attacker will unlock access. 

Carbon Black said that ransomware has been reported as the primary cause of successful breaches in 29 per cent of Singapore organisations, compared with 26 per cent in its January report.

The companies most affected by ransomware attacks were those in travel and transport (75 per cent) as well as financial services (49 per cent).

2. Fileless attacks (13 per cent). This is a malicious attack that does not require the hacker to install a software in the user’s device. Instead, it makes use of applications that are already installed which are thought to be safe.
 
3. Malware (13 per cent). This form of attack requires the installation of malicious software, which can be done through physical USB drives, computer viruses, worms, Trojan horses or spyware.

Reasons for Cyber Attacks

Carbon Black’s security strategist, Mr Tristan Morris, said that geopolitical tensions and money are two reasons why Singapore businesses are witnessing an increase in cyber-attack volumes and sophistication. “Geopolitical tension continue to play out in cyber space with nation states like Russia, China, North Korea and Iran looking to exert their influence over the world,” Mr Morris said.

Cyber-crime syndicates and run-of-the-mill hackers are also getting their hands on advanced hacking tools in an effort to steal data and other intellectual property for sale on the dark web. When it comes to the levels of sophistication, he said that attackers are “evolving” alongside security technology in an effort to remain undetected.

Mr Tom Kellermann, Carbon Black’s cyber security officer, offered another reason, saying that a large number of banks from around the world are located in Singapore and, globally, the finance industry continues to be a main target for attacks.

Investment in Cyber Security

The report stated that 99 per cent of the respondents plan to increase the cyber-defence budget for their respective companies in the coming year. This is a slight increase of 2 per cent since the January survey. Just under half of the respondents (40 per cent) said that they will increase spending in this area by 21 to 30 per cent. Only 2 per cent of the respondents said that they plan to increase budgets by more than 50 per cent.

Threat Hunting as a Defence

Carbon Black said that threat hunting, a technique where cybersecurity professionals actively seek out threats, has proved to be an effective method for companies in Singapore to uncover malicious cyber-attack activity. During the survey, 95 per cent of the respondents said that it had strengthened their defences to some degree, with 40.5 per cent reporting a “significant protective effect”.

The report also noted that 91 per cent of the respondents found evidence of malicious activity by threat hunting, while 49 per cent said that they found “significant evidence”The top three sectors that saw evidence of malicious cyber-attack activity were travel and transport (75 per cent), F&B (73 per cent) and professional services (61 per cent).

Singapore Today

You Might Also Read: 

Cyber Security Does Not Follow From Cyber Awareness:

Singapore Upgrades Cybersecurity:

 

« Warning For Pilots To Counter Airborne Hacking
AI Security Tool Thinks Much Faster Than Humans »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Clearwater Security & Compliance

Clearwater Security & Compliance

Clearwater Compliance specialize in Privacy, Security, Compliance and Risk Management Solutions for Health Care, Law Firms and other businesses.

National Cyber Security Centre (NCSC) - Netherlands

National Cyber Security Centre (NCSC) - Netherlands

NCSC Netherlands coordinates enhancing the cyber resilience of the Netherlands in the digital domain.

RevenueStream

RevenueStream

RevenueStream uses an innovative algorithmic approach to intercept and prevent payment fraud before it even happens.

HCL Technologies

HCL Technologies

HCL offer an integrated portfolio of products, solutions and services built around Digital, IoT, Cloud, Automation, Cybersecurity, Analytics, Infrastructure Management and Engineering Services.

Synelixis Solutions

Synelixis Solutions

Synelixis Solutions is a high-tech company founded to provide complete telecommunications, networking, security, control and automation solutions.

Phosphorous Cybersecurity

Phosphorous Cybersecurity

Phosphorus has fully automated remediation of the two biggest IoT vulnerabilities, out of date firmware and default credentials.

Wiser Market

Wiser Market

Wiser Market is a leading company in global online brand protection services, intellectual property protection, anti-Counterfeit & trademark infringements.

Hazy

Hazy

Hazy specialises in financial services, helping some of the world’s top banks and insurance companies reduce compliance risk.

Symmetry Systems

Symmetry Systems

Symmetry Systems is a provider of data store and object-level security (DSOS) solutions that give organizations visibility into, and unified access control of, their most valuable data assets.

Hayes Connor Solicitors

Hayes Connor Solicitors

Hayes Connor Solicitors is a specialist data breach and cybercrime law firm. We act for clients on individual data breaches and also where a group has been compromised as part of a targeted attack.

OneStep Group

OneStep Group

OneStep Group are a leading Australian provider of information and communications technology (ICT) services, connecting businesses through technology solutions and support.

Thoropass

Thoropass

Thoropass (formerly Laika) helps you get and stay compliant with smart software and expert services.

InfoSecTrain

InfoSecTrain

InfoSecTrain are a leading training and consulting organization dedicated to providing top-tier IT security training and information security services to organizations and individuals across the globe

Cysmo Cyber Risk

Cysmo Cyber Risk

Cysmo is an innovative cyber risk assessment platform specifically designed for the needs of the German insurance industry.

SoConnect

SoConnect

SoConnect provides safe, secured, and taken care of IT, with infrastructure built around you and your business.

Complete Cyber

Complete Cyber

Complete Cyber provide professional cybersecurity services and products to help secure your infrastructure, systems and data.