A critical weakness in Open VSX’s new pre-publication scanning system allowed malicious extensions to pass security checks and become publicly available, raising fresh concerns over the safety of a software marketplace relied on by Cursor, Windsurf and other tools built on the VS Code extension ecosystem. The flaw, dubbed “Open Sesame” by Koi Security, has been patched, with Open VSX maintainers fixing it in version 0.32.0 after […]
Hundreds of organisations using Microsoft 365 are facing a fast-growing phishing threat that sidesteps conventional multi-factor authentication controls by abusing a legitimate Microsoft sign-in process rather than breaking it. Security researchers tracking the activity say more than 340 organisations across the United States, Canada, Australia, New Zealand and Germany have been affected, with attacks accelerating through March after the first known cases were detected on February 19. […]
Threat actors are refining a deceptive cyberattack method that manipulates built-in system utilities on both Microsoft Windows and Apple macOS to deploy malicious software, marking a shift in how malware bypasses browser-based security safeguards. Security researchers have identified a coordinated campaign centred on a technique known as ClickFix, which prompts users to execute seemingly harmless commands through the Windows Run dialogue or macOS Terminal. By moving the […]
Cisco has issued urgent security updates to address a critical vulnerability in its Secure Firewall Management Center software that could allow attackers to execute arbitrary code on affected systems without authentication, raising concerns across enterprise and government networks that rely on the platform for threat monitoring and control. The vulnerability, identified as CVE-2026-20131, carries a maximum severity score of 10.0 under the Common Vulnerability Scoring System, indicating […]
Malicious Google advertisements linked to tax-related searches are being used to distribute a sophisticated attack chain that disables endpoint security tools before granting attackers remote control of compromised systems, according to cybersecurity researchers. The campaign, identified by Huntress, combines social engineering with a “bring your own vulnerable driver” technique to bypass detection systems and establish persistent access. Investigators found that sponsored search results tied to queries such […]
Organisations faced a steep escalation in cyber threats targeting application programming interfaces, with average daily API attacks per enterprise climbing to 258 in 2025, marking a 113% increase from 121 the previous year, according to industry cybersecurity assessments tracking enterprise network activity. The data underscores a widening attack surface as businesses deepen reliance on APIs to connect cloud services, mobile applications and third-party platforms. Analysts say the […]
Cheap IP-KVM devices widely used in enterprise environments have been found to contain critical security vulnerabilities that could allow attackers to seize low-level control of entire networks, according to findings from multiple cybersecurity researchers. The flaws, identified across several budget remote management products, enable attackers to bypass standard security protections and gain direct access to connected systems at the BIOS level. Once compromised, a single IP-KVM device […]
Small and medium-sized enterprises (SMEs), which form the backbone of most economies, are particularly vulnerable. The WEF’s 2024 Global Cybersecurity Outlook[2]highlights that limited access to cyber services, tools and skilled talent continues to hinder smaller organisations from achieving even baseline resilience, an increasingly urgent concern in today’s highly interconnected digital ecosystem. As a result, SMEs are often more exposed to common risks such as accidental data leaks and unpatched vulnerabilities in the software and open‑source components used to build modern digital applications.
To help address these challenges, three homegrown companies from Singapore, AgileMark, Scantist and StrongKeep are pioneering technologies that make cybersecurity more accessible and effective for businesses, including SMEs without dedicated security teams. Their solutions focus on strengthening data loss protection and mitigating risks from human behaviours like screen photography and unsafe network use, uncovering hidden vulnerabilities in software systems, and simplifying the adoption of essential security measures through easy-to-deploy platforms.
These companies are supported by the S$20 million CyberSG Talent, Innovation and Growth Collaboration Centre (TIG Centre), a joint initiative between the National University of Singapore (NUS) and the Cyber Security Agency of Singapore (CSA). The TIG Centre works closely with cybersecurity companies and start-ups to co-develop solutions that help organisations stay ahead of emerging threats while enabling the safe and confident adoption of new technologies.
“Many businesses today, especially SMEs, face escalating cyber risks but often lack the resources to protect themselves effectively. In Singapore, online scams and ransomware attacks continue to be key concerns. At the same time, advances in AI are transforming both cyber threats and cybersecurity and rapidly expanding the attack surface of enterprises. Through the CyberSG Talent, Innovation and Growth Collaboration Centre, we support innovators developing practical solutions to address these challenges, and bring Singapore’s most promising cybersecurity start-ups to the global stage at the RSAC 2026 Conference,” said Mr Willis Lim, Executive Director, TIG Centre.
AgileMark: Preventing data leaks caused by everyday human actions
Many data exposure incidents stem not from sophisticated cyberattacks, but from routine behaviours such as photographing screens, copying sensitive documents or working in unsecured environments.
AgileMark mitigates this risk by introducing visible, dynamic watermarks on corporate screens. These act as behavioural cues to deter unauthorised capture, reinforce employee awareness of data sensitivity, and enable traceability if leaks occur. Designed with a human-first approach, it addresses the reality many SMEs face: limited time, resources and expertise to manage complex tools. By focusing on user behaviour rather than adding new systems, it reduces risk without increasing operational burden. Today, AgileMark protects over 300,000 devices globally, reducing investigation time from weeks to hours and enabling faster response to potential data breaches.
Scantist: Finding security flaws in software before hackers do
As organisations accelerate software development, greater reliance on open-source components and third-party dependencies has increased exposure to supply chain risks and hard-to-detect vulnerabilities.
Scantist provides an AI-powered application security platform that helps organisations manage open-source, software supply chain and AI-related risks across the development lifecycle, from code to deployment. Complementing its defensive capabilities, Scantist also offers an autonomous, agentic penetration testing solution that simulates attacker behaviour, enabling more frequent testing and reducing assessment timelines from days to hours. For SMEs in particular, Scantist makes advanced security testing and risk management more accessible without requiring large in-house security teams, helping businesses strengthen resilience and keep pace with evolving threats in a cost-effective, scalable manner.
StrongKeep: Making cybersecurity simpler and more affordable for SMEs
Many SMEs face barriers to adopting cybersecurity tools due to cost, complexity and the need for specialised expertise.
StrongKeep addresses this challenge with an all-in-one cybersecurity platform tailored for SMEs. The platform integrates essential protections such as device security, website filtering, phishing awareness training and password management into a single, easy-to-use system. Organisations can deploy the platform and begin protecting their systems in under 60 minutes, even without dedicated cybersecurity staff. With subscriptions starting from S$39 per month, the solution enables SMEs to achieve comprehensive protection and compliance up to 10 times faster than traditional approaches.
Showcasing Singapore’s cybersecurity solutions at the RSAC Conference 2026
AgileMark, Scantist and StrongKeep are among eight TIG Centre-supported companies that will showcase their solutions at Singapore’s national pavilion at the RSAC 2026 Conference, held from 23 to 26 March 2026 at the Moscone Center in San Francisco, United States.
Organised by the TIG Centre and SGTech, the leading trade association for Singapore’s tech industry, the Singapore Pavilion underscores Singapore’s role as a cybersecurity innovation hub and a strategic gateway to Asia’s rapidly expanding digital economy.
Hashtag: #cybersecurity #singaporecybersme #CybersgTIG #nusenterprise #NUS
https://www.rsa.cybersg.sg/
https://www.linkedin.com/company/cybersg-tig-collaboration-centre/
The issuer is solely responsible for the content of this announcement.
The National University of Singapore (NUS) is Singapore’s flagship university, which offers a global approach to education, research and entrepreneurship, with a focus on Asian perspectives and expertise. We have 16 colleges, faculties and schools across three campuses in Singapore, with more than 40,000 students from 100 countries enriching our vibrant and diverse campus community. We have also established more than 20 NUS Overseas Colleges entrepreneurial hubs around the world.
Our multidisciplinary and real-world approach to education, research and entrepreneurship enables us to work closely with industry, governments and academia to address crucial and complex issues relevant to Asia and the world. Researchers in our faculties, research centres of excellence, corporate labs and more than 30 university-level research institutes focus on themes that include energy; environmental and urban sustainability; treatment and prevention of diseases; active ageing; advanced materials; risk management and resilience of financial systems; Asian studies; and Smart Nation capabilities such as artificial intelligence, data science, operations research and cybersecurity.
For more information on NUS, please visit nus.edu.sg.
At NUS Enterprise, the entrepreneurial heart of the National University of Singapore (NUS), we advance the University as a global magnet for talent and an engine for impactful innovation. We seed ideas, spark innovation, and scale ventures through our distinctive 360° framework, integrating education, ecosystem support, and world-class venture building and investment.
This creates a self-reinforcing cycle powering both educational and entrepreneurial outcomes across industries and communities. Since 2001, NUS Enterprise has nurtured 10 unicorns, over 3,000 start-ups, and 4,300 students. Our ambition: to improve the lives of 1 billion people by 2035.
For more information on NUS Enterprise, please visit enterprise.nus.edu.sg.
The CyberSG Talent, Innovation and Growth Collaboration Centre, established by the Cyber Security Agency of Singapore (CSA) in partnership with the National University of Singapore (NUS), will play a key role in achieving a comprehensive approach to ecosystem development which consolidates and enhances CSA’s existing talent and innovation initiatives. The Centre will enable synergies between cybersecurity talent, innovation and growth industry, by serving as a national node to integrate and create relevant programmes for industry and talent development. It will help build a vibrant cybersecurity ecosystem by bring together industry, academia, individual and government stakeholders to leverage the opportunities posed by digitalisation.
Hackers leveraged a critical vulnerability in the open-source AI workflow platform Langflow within hours of its disclosure, underscoring a sharp acceleration in cyberattack timelines and raising fresh concerns over the security of rapidly adopted artificial intelligence tools. Security researchers reported that attackers moved to exploit the flaw roughly 20 hours after public details emerged, highlighting how threat actors are monitoring disclosures in real time and deploying automated […]
Cybersecurity strategies built around prevention are facing renewed scrutiny as organisations grapple with a wave of disruptive attacks targeting cloud infrastructure, exposing weaknesses in how resilience is designed and implemented. Security analysts and industry leaders say the shift to cloud computing has outpaced the evolution of defensive frameworks, leaving many enterprises vulnerable not because they lack protection tools, but because they underestimate the importance of operational continuity […]
Security weaknesses in Jenkins and a widely used plugin have raised fresh concerns over the resilience of software development pipelines, with researchers warning that attackers could exploit the flaws to gain deep access to enterprise systems. The vulnerabilities, disclosed through an official advisory from the Jenkins project, affect the core automation server as well as the LoadNinja plugin, a tool used for performance testing. Security analysts indicate […]
A security weakness in Ubuntu Desktop 24.04 and later versions has raised fresh concerns over the resilience of widely used Linux environments, after researchers confirmed that local attackers can exploit the flaw to gain full administrative control. The vulnerability, described as a local privilege escalation issue, allows a user with limited access to elevate permissions and execute commands as the root user, effectively compromising the entire system. […]
Market volatility triggered by escalating tensions involving Iran is pushing traders towards artificial intelligence-driven tools, as investors struggle to interpret fast-moving geopolitical signals and their impact on global assets. Portfolio managers and independent traders alike are increasingly relying on machine-learning models to process the surge of data tied to the conflict, from energy flows and shipping disruptions to diplomatic signals and military developments. The shift reflects both […]
A zero-day vulnerability in widely deployed Cisco firewall systems has been exploited for months by a ransomware group, with security teams warning that the breach highlights deep gaps in enterprise network defences and patch management practices. Analysis by Amazon Web Services’ security leadership indicates that attackers began abusing the flaw as early as January, gaining unauthorised access to targeted environments before the vulnerability became publicly known. The […]
Security researchers have identified a technique that could allow attackers to execute malicious code within AI-assisted development environments by manipulating installation links, raising fresh concerns about the integrity of modern coding workflows. The method, termed “CursorJack”, exploits how some AI development tools handle external package installation and repository linking. By redirecting or tampering with these links, attackers can introduce harmful code into a developer’s environment without immediate […]
Cybersecurity analysts have uncovered a method that enables attackers to bypass behavioural protections in Palo Alto Networks’ Cortex XDR platform, raising fresh concerns over the resilience of endpoint detection systems widely used by enterprises. The findings centre on the platform’s Behavioural Indicators of Compromise, or BIOC rules, which are designed to identify suspicious activity beyond traditional signature-based detection. Researchers demonstrated that these rules, distributed in encrypted form […]
Security researchers have uncovered a vulnerability in Amazon Web Services Bedrock’s code interpreter environment, raising concerns over the robustness of isolation safeguards in generative AI systems and prompting renewed scrutiny of cloud-based development tools used by enterprises. The flaw, identified in Bedrock’s sandboxed execution layer, centres on weaknesses in DNS handling that could allow data exfiltration from supposedly isolated environments. Analysts say the issue highlights structural challenges […]
A coordinated international law enforcement operation has dismantled SocksEscort, a large malicious proxy service that enabled cybercriminals to hide their identities while carrying out fraud, ransomware attacks and other online crimes. The operation, codenamed Operation Lightning, targeted infrastructure spread across multiple countries and led to the seizure of dozens of domains and servers used to run the network. Authorities said the proxy service relied on malware that […]
By T.N. Ashok NEW YORK: Let’s be blunt about what’s actually happening in the current no holds barred war between Iran and US-Israel combine. The United States and Israel have been bombing Iran for thirteen straight days. Cruise missiles, precision strikes, relentless sorties. The kind of firepower that flattened cities in Iraq within weeks and […]
The article After 13 Days Of Iran War, Trump And Netanyahu Are Learning Bitter Lesson appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).
Cybersecurity researchers have uncovered a series of critical vulnerabilities affecting Google’s Looker data analytics platform that could have enabled attackers to execute malicious code, move between cloud environments and extract sensitive corporate data. The flaws highlight growing security concerns surrounding widely used cloud-based analytics tools that sit at the centre of many organisations’ data infrastructure. Security specialists from the cybersecurity firm Tenable identified two major vulnerabilities—collectively […]
Software that rewrites and improves its own code is emerging as one of the most consequential developments in artificial intelligence, pushing the boundaries of how digital systems are designed, maintained and regulated. Engineers and researchers say the rise of autonomous coding agents capable of modifying their own behaviour could alter the economics of software development while raising profound questions about oversight and accountability. Advances in large language […]
Security vulnerabilities discovered in the open-source Pingora framework have triggered renewed scrutiny of infrastructure software used to route vast volumes of internet traffic, after researchers warned the flaws could allow attackers to manipulate web requests and poison caches in certain deployments. Cloudflare disclosed multiple weaknesses affecting standalone Pingora installations exposed directly to the internet, warning that attackers could exploit them to conduct HTTP request smuggling and cache […]
Processing an ordinary-looking photograph could silently trigger malicious code on macOS systems due to a newly disclosed vulnerability in widely used metadata software, raising fresh concerns about the security of open-source components embedded in everyday digital workflows. Cybersecurity researchers have identified a flaw in ExifTool, a popular open-source tool used globally to extract, read and edit metadata in images, videos and other digital files. The vulnerability, tracked […]
A critical security weakness affecting several surveillance and video management products manufactured by Hikvision has triggered alarm among cybersecurity agencies after authorities confirmed that attackers are exploiting the vulnerability to gain elevated access to targeted systems. Federal cybersecurity officials added the flaw to the Known Exploited Vulnerabilities catalogue maintained by the Cybersecurity and Infrastructure Security Agency, a list used by government and private-sector defenders to prioritise urgent […]
