Three ransomware operations — Qilin, Akira and DragonForce — were behind 40% of the 672 attacks logged worldwide in March, according to Check Point Research, highlighting how a criminal market that still looks fragmented on the surface is being pulled by a smaller group of high-output players. Check Point said Qilin accounted for 20% of published attacks, Akira 12% and DragonForce 8%, while 47 separate groups were […]
Agentic AI is moving from pilot projects into mainstream corporate workflows, forcing boards and security teams to treat these systems less like software features and more like outside operators with broad access to data, tools and decisions. What changes the risk profile is not only the model itself, but the autonomy layered around it: agents can plan tasks, call other applications, handle credentials and act across systems […]
A Microsoft-tracked cybercrime group is using adversary-in-the-middle techniques to hijack Microsoft 365 sessions, bypass multifactor authentication and reroute employee pay into attacker-controlled bank accounts, in what researchers describe as a geographically focused campaign against users in Canada. Microsoft said the actor, tracked as Storm-2755, combined search-result poisoning, fake sign-in pages and session replay to move from account takeover to payroll fraud, causing direct financial loss for at […]
Bitcoin Depot, one of the biggest operators in the crypto ATM business, has disclosed that hackers stole about 50.903 Bitcoin, valued at roughly $3.665 million, after gaining access to parts of its internal technology systems and taking control of credentials linked to its digital asset settlement accounts. The Atlanta-based company said the intrusion was discovered on March 23 and later judged material on April 6, before being […]
Artificial intelligence is lowering the cost of cyberattacks across the digital-asset industry and forcing crypto firms to rethink how they protect users, wallets and transaction systems, according to Ledger chief technology officer Charles Guillemet, whose warning lands as the sector grapples with a fresh cycle of major breaches and more sophisticated fraud. Guillemet said AI is making hacks “cheaper and faster”, amplifying a security problem that has […]
Attackers behind the compromise of the widely used Axios package have widened their campaign, turning from code repositories to the people who maintain them and exposing how a single deceptive approach can threaten vast stretches of the software supply chain. Security researchers and the Axios maintainer’s own post-mortem show the March 31 breach was not an isolated package hijack but part of a co-ordinated social-engineering operation aimed […]
Almost eight in 10 UK manufacturers suffered at least one serious cyber incident over the past 12 months, according to new ESET-commissioned research, adding fresh evidence that digital disruption is now a mainstream operational risk for one of Britain’s most exposed industrial sectors. The findings indicate that 78% of manufacturers were hit, while 53% said attacks led to lost revenue, underscoring how cyber breaches are moving from […]
Drift, one of Solana’s larger decentralised finance trading platforms, said it was facing an “active attack” on April 1 and moved to suspend deposits and withdrawals as hundreds of millions of dollars appeared to leave the protocol, deepening concern over operational security risks in crypto markets. The platform told users not to deposit funds and said it was working with security firms, bridges and exchanges to contain […]
Breaches involving employee information reported to the UK’s data regulator climbed again in 2025, reaching their highest level since the Information Commissioner’s Office began publishing comparable incident data in 2019, according to an analysis by law firm Nockolds that draws on ICO reporting. The rise adds to mounting concern among employers that staff records, payroll details and internal HR files are becoming harder to protect as […]
Google has moved a set of anti-ransomware tools for Drive from beta into full global release, adding a stronger layer of detection and bulk file restoration for organisations using Drive for desktop. The rollout, announced on 31 March, turns ransomware detection on by default for Workspace users, sends alerts to administrators when suspicious encryption activity is detected, and enables file restoration by default to help recover from […]
A ransomware group linked to Tehran has reappeared with upgraded capabilities, raising concern among cybersecurity researchers who say the threat actor is deploying more sophisticated techniques to evade detection and disrupt organisations across multiple sectors. Security analysts tracking the group known as Pay2Key report that its latest campaigns show marked improvements in execution methods, stealth mechanisms and anti-forensics tactics. The group, which gained attention during earlier waves […]
San Francisco played host to a decisive moment for the cybersecurity industry as winners of the 2026 Cybersecurity Excellence Awards were unveiled during the RSA Conference, highlighting a sharp pivot toward artificial intelligence-driven security as the sector’s defining battleground. Organised by Cybersecurity Insiders, the awards recognised companies, technologies and professionals demonstrating leadership across a broad range of categories. This year’s results underscored the growing urgency surrounding AI […]
Security researchers are raising concerns over a growing wave of browser extensions that covertly capture and transmit users’ interactions with artificial intelligence tools, exposing sensitive prompts and responses without clear consent. Cybersecurity firm Expel highlighted the threat in a detailed analysis published on 24 March, warning that certain extensions operating within Google Chrome can quietly monitor inputs typed into AI platforms and relay them to external servers. […]
Organisations faced a steep escalation in cyber threats targeting application programming interfaces, with average daily API attacks per enterprise climbing to 258 in 2025, marking a 113% increase from 121 the previous year, according to industry cybersecurity assessments tracking enterprise network activity. The data underscores a widening attack surface as businesses deepen reliance on APIs to connect cloud services, mobile applications and third-party platforms. Analysts say the […]
Remote working has emerged as a key vulnerability in the UAE’s digital landscape, prompting authorities to warn of a sharp rise in cyber attacks targeting individuals operating outside traditional office networks. The UAE Cyber Security Council has called on employees working from home to act as the “first line of defence”, stressing that human error and weak personal security practices are increasingly being exploited by cybercriminals. Officials […]
Cheap IP-KVM devices widely used in enterprise environments have been found to contain critical security vulnerabilities that could allow attackers to seize low-level control of entire networks, according to findings from multiple cybersecurity researchers. The flaws, identified across several budget remote management products, enable attackers to bypass standard security protections and gain direct access to connected systems at the BIOS level. Once compromised, a single IP-KVM device […]
Small and medium-sized enterprises (SMEs), which form the backbone of most economies, are particularly vulnerable. The WEF’s 2024 Global Cybersecurity Outlook[2]highlights that limited access to cyber services, tools and skilled talent continues to hinder smaller organisations from achieving even baseline resilience, an increasingly urgent concern in today’s highly interconnected digital ecosystem. As a result, SMEs are often more exposed to common risks such as accidental data leaks and unpatched vulnerabilities in the software and open‑source components used to build modern digital applications.
To help address these challenges, three homegrown companies from Singapore, AgileMark, Scantist and StrongKeep are pioneering technologies that make cybersecurity more accessible and effective for businesses, including SMEs without dedicated security teams. Their solutions focus on strengthening data loss protection and mitigating risks from human behaviours like screen photography and unsafe network use, uncovering hidden vulnerabilities in software systems, and simplifying the adoption of essential security measures through easy-to-deploy platforms.
These companies are supported by the S$20 million CyberSG Talent, Innovation and Growth Collaboration Centre (TIG Centre), a joint initiative between the National University of Singapore (NUS) and the Cyber Security Agency of Singapore (CSA). The TIG Centre works closely with cybersecurity companies and start-ups to co-develop solutions that help organisations stay ahead of emerging threats while enabling the safe and confident adoption of new technologies.
“Many businesses today, especially SMEs, face escalating cyber risks but often lack the resources to protect themselves effectively. In Singapore, online scams and ransomware attacks continue to be key concerns. At the same time, advances in AI are transforming both cyber threats and cybersecurity and rapidly expanding the attack surface of enterprises. Through the CyberSG Talent, Innovation and Growth Collaboration Centre, we support innovators developing practical solutions to address these challenges, and bring Singapore’s most promising cybersecurity start-ups to the global stage at the RSAC 2026 Conference,” said Mr Willis Lim, Executive Director, TIG Centre.
AgileMark: Preventing data leaks caused by everyday human actions
Many data exposure incidents stem not from sophisticated cyberattacks, but from routine behaviours such as photographing screens, copying sensitive documents or working in unsecured environments.
AgileMark mitigates this risk by introducing visible, dynamic watermarks on corporate screens. These act as behavioural cues to deter unauthorised capture, reinforce employee awareness of data sensitivity, and enable traceability if leaks occur. Designed with a human-first approach, it addresses the reality many SMEs face: limited time, resources and expertise to manage complex tools. By focusing on user behaviour rather than adding new systems, it reduces risk without increasing operational burden. Today, AgileMark protects over 300,000 devices globally, reducing investigation time from weeks to hours and enabling faster response to potential data breaches.
Scantist: Finding security flaws in software before hackers do
As organisations accelerate software development, greater reliance on open-source components and third-party dependencies has increased exposure to supply chain risks and hard-to-detect vulnerabilities.
Scantist provides an AI-powered application security platform that helps organisations manage open-source, software supply chain and AI-related risks across the development lifecycle, from code to deployment. Complementing its defensive capabilities, Scantist also offers an autonomous, agentic penetration testing solution that simulates attacker behaviour, enabling more frequent testing and reducing assessment timelines from days to hours. For SMEs in particular, Scantist makes advanced security testing and risk management more accessible without requiring large in-house security teams, helping businesses strengthen resilience and keep pace with evolving threats in a cost-effective, scalable manner.
StrongKeep: Making cybersecurity simpler and more affordable for SMEs
Many SMEs face barriers to adopting cybersecurity tools due to cost, complexity and the need for specialised expertise.
StrongKeep addresses this challenge with an all-in-one cybersecurity platform tailored for SMEs. The platform integrates essential protections such as device security, website filtering, phishing awareness training and password management into a single, easy-to-use system. Organisations can deploy the platform and begin protecting their systems in under 60 minutes, even without dedicated cybersecurity staff. With subscriptions starting from S$39 per month, the solution enables SMEs to achieve comprehensive protection and compliance up to 10 times faster than traditional approaches.
Showcasing Singapore’s cybersecurity solutions at the RSAC Conference 2026
AgileMark, Scantist and StrongKeep are among eight TIG Centre-supported companies that will showcase their solutions at Singapore’s national pavilion at the RSAC 2026 Conference, held from 23 to 26 March 2026 at the Moscone Center in San Francisco, United States.
Organised by the TIG Centre and SGTech, the leading trade association for Singapore’s tech industry, the Singapore Pavilion underscores Singapore’s role as a cybersecurity innovation hub and a strategic gateway to Asia’s rapidly expanding digital economy.
Hashtag: #cybersecurity #singaporecybersme #CybersgTIG #nusenterprise #NUS
https://www.rsa.cybersg.sg/
https://www.linkedin.com/company/cybersg-tig-collaboration-centre/
The issuer is solely responsible for the content of this announcement.
The National University of Singapore (NUS) is Singapore’s flagship university, which offers a global approach to education, research and entrepreneurship, with a focus on Asian perspectives and expertise. We have 16 colleges, faculties and schools across three campuses in Singapore, with more than 40,000 students from 100 countries enriching our vibrant and diverse campus community. We have also established more than 20 NUS Overseas Colleges entrepreneurial hubs around the world.
Our multidisciplinary and real-world approach to education, research and entrepreneurship enables us to work closely with industry, governments and academia to address crucial and complex issues relevant to Asia and the world. Researchers in our faculties, research centres of excellence, corporate labs and more than 30 university-level research institutes focus on themes that include energy; environmental and urban sustainability; treatment and prevention of diseases; active ageing; advanced materials; risk management and resilience of financial systems; Asian studies; and Smart Nation capabilities such as artificial intelligence, data science, operations research and cybersecurity.
For more information on NUS, please visit nus.edu.sg.
At NUS Enterprise, the entrepreneurial heart of the National University of Singapore (NUS), we advance the University as a global magnet for talent and an engine for impactful innovation. We seed ideas, spark innovation, and scale ventures through our distinctive 360° framework, integrating education, ecosystem support, and world-class venture building and investment.
This creates a self-reinforcing cycle powering both educational and entrepreneurial outcomes across industries and communities. Since 2001, NUS Enterprise has nurtured 10 unicorns, over 3,000 start-ups, and 4,300 students. Our ambition: to improve the lives of 1 billion people by 2035.
For more information on NUS Enterprise, please visit enterprise.nus.edu.sg.
The CyberSG Talent, Innovation and Growth Collaboration Centre, established by the Cyber Security Agency of Singapore (CSA) in partnership with the National University of Singapore (NUS), will play a key role in achieving a comprehensive approach to ecosystem development which consolidates and enhances CSA’s existing talent and innovation initiatives. The Centre will enable synergies between cybersecurity talent, innovation and growth industry, by serving as a national node to integrate and create relevant programmes for industry and talent development. It will help build a vibrant cybersecurity ecosystem by bring together industry, academia, individual and government stakeholders to leverage the opportunities posed by digitalisation.
Hackers leveraged a critical vulnerability in the open-source AI workflow platform Langflow within hours of its disclosure, underscoring a sharp acceleration in cyberattack timelines and raising fresh concerns over the security of rapidly adopted artificial intelligence tools. Security researchers reported that attackers moved to exploit the flaw roughly 20 hours after public details emerged, highlighting how threat actors are monitoring disclosures in real time and deploying automated […]
Arabian Post Staff -Dubai Qatar’s Ministry of Commerce and Industry has issued a directive requiring all commercial establishments and factories to integrate electronically with its central systems, marking a significant shift towards real-time regulatory oversight across the country’s private sector. The circular obliges businesses, regardless of size or sector, to digitally connect their internal platforms with ministry databases to record and transmit information on inventory, sales transactions […]
A sharp escalation in mobile banking malware attacks targeting more than 1,200 financial brands across 90 countries is altering the global fraud landscape, with security experts warning that user devices have become the primary entry point for cybercriminals. Industry researchers tracking digital fraud patterns say the scale and sophistication of mobile-focused threats have expanded markedly, reflecting a shift away from traditional server-side breaches towards attacks that exploit […]
Cybersecurity strategies built around prevention are facing renewed scrutiny as organisations grapple with a wave of disruptive attacks targeting cloud infrastructure, exposing weaknesses in how resilience is designed and implemented. Security analysts and industry leaders say the shift to cloud computing has outpaced the evolution of defensive frameworks, leaving many enterprises vulnerable not because they lack protection tools, but because they underestimate the importance of operational continuity […]
A security weakness in Ubuntu Desktop 24.04 and later versions has raised fresh concerns over the resilience of widely used Linux environments, after researchers confirmed that local attackers can exploit the flaw to gain full administrative control. The vulnerability, described as a local privilege escalation issue, allows a user with limited access to elevate permissions and execute commands as the root user, effectively compromising the entire system. […]
Navia Benefit Solutions has disclosed a large-scale data breach affecting nearly 2.7 million individuals, raising concerns over the security of sensitive employee benefits data held by third-party administrators across the United States. The company, which manages health savings accounts and other workplace benefit programmes for more than 10,000 employers, said unauthorised actors gained access to parts of its systems, exposing a broad range of personal and health-related […]
Gaps between on-premise and cloud identity systems are creating a growing security blind spot, as organisations adopting hybrid Active Directory environments struggle to maintain consistent user credentials across platforms. Security analysts warn that “identity drift” — a condition where user attributes, permissions or credentials fall out of sync between systems — is emerging as a critical vulnerability in enterprise infrastructure. Hybrid identity setups, commonly built around Microsoft’s […]
