fbpx
Frame-14

Privacy Ninja

        • DATA PROTECTION

        • CYBERSECURITY

        • Penetration Testing

          Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

Chinese Threat Actors Hacked NYC MTA Using Pulse Secure Zero-day

Chinese Threat Actors Hacked NYC MTA Using Pulse Secure Zero-day

Chinese-backed threat actors breached New York City’s Metropolitan Transportation Authority (MTA) network in April using a Pulse Secure zero-day. Still, they failed to cause any data loss or gain access to systems controlling the transportation fleet.

According to Rafail Portnoy, MTA’s Chief Technology Officer, while the attackers hacked into several MTA computer systems, they couldn’t gain access to employee or customer information.

“The MTA quickly and aggressively responded to this attack, bringing on Mandiant, a leading cyber security firm, whose forensic audit found no evidence operational systems were impacted, no employee or customer information breached, no data loss and no changes to our vital systems,” Portnoy said in a statement.

The third attack targeting MTA in recent years

MTA mitigated the vulnerability on April 21, one day after Pulse Secure issued an advisory, and CISA published an alert on the Pulse Secure zero-day exploited in the attack.

Additionally, existing security systems also hindered the attackers’ attempts to move through the network.

Also Read: The Difference Between GDPR and PDPA Under 10 Key Issues

“Importantly, the MTA’s existing multi-layered security systems worked as designed, preventing spread of the attack and we continue to strengthen these comprehensive systems and remain vigilant as cyber-attacks are a growing global threat,” Portnoy added.

The breach was the result of the third attack on the transportation authority’s network in recent years, as MTA officials told the NY Times.

MTA is the largest North American transportation network serving more than 15.3 million people across a 5,000-square-mile travel area around New York City.

The transit authority operates multiple transportation agencies, including the MTA New York City Transit, MTA Bus, Long Island Rail Road, Metro-North Railroad, and MTA Bridges and Tunnels.

Dozens of US and European organizations also hacked 

Cybersecurity firm FireEye revealed on April 20 that at least two Chinese-backed threat actors (tracked as UNC2630 and UNC2717) were actively exploiting a zero-day vulnerability to deploy 16 different malware families.

“Espionage activity by UNC2630 and UNC2717 supports key Chinese government priorities,” FireEye said in a report published last month.

“Many compromised organizations operate in verticals and industries aligned with Beijing’s strategic objectives outlined in China’s recent 14th Five Year Plan.”

The malware is custom-tailored for compromising Pulse Secure VPN appliances and used to maintain long-term access to networks, collect credentials, and steal proprietary data.

The zero-day was exploited together with other Pulse Secure bugs to hack the networks of dozens of US and European organizations across several verticals, including defense, government, high tech, transportation, and financial sectors.

A day later, the US Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive ordering federal agencies to mitigate the security flaw within two days by disabling the Pulse Secure Collaboration and Windows File Share Browser features.

Also Read: PDPA Compliance Singapore: 10 Areas To Work On

Pulse Secure issued security updates to address the zero-day bug on May 3 and also released the Pulse Connect Secure Integrity Tool that helps organizations check if hackers modified files on their Pulse Secure appliances.

CISA also updated mitigation measures shared in its alert and urges organizations to check the guidance published by Ivanti, Pulse Secure’s parent company.

0 Comments

KEEP IN TOUCH

Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection

REPORTING DATA BREACH TO PDPC?

We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.
×

Hello!

Click one of our contacts below to chat on WhatsApp

× Chat with us