Saturday , June 21 2025

Asia-Pacific NGOs Lack Basic Cyber Controls, Finds Survey

Rising worries about the digital security of nongovernmental organizations in the Asia-Pacific region haven’t translated into robust adoption of basic measures, shows data from a survey of more than 1,500 regional NGOs.

Infoxchange, an Australian IT consultant for social issue organizations, said only about 4 in 10 NGOs have enabled multifactor authentication and that only 2 in 10 provide cybersecurity training to staff. Of the 1,589 NGOs across the region that participated in an Infoxchange survey, 1 in 6 disclosed experiencing a cybersecurity incident during the past year. One-third of Indonesian organizations reported experiencing an incident.

Russia detects first SuperCard malware attacks via NFC

Russian cybersecurity experts discovered the first local data theft attacks using a modified version of legitimate near field communication (NFC)...
Read More
Russia detects first SuperCard malware attacks via NFC

Income Property Investments exposes 170,000+ Individuals record

Cybersecurity researcher Jeremiah Fowler discovered an unsecured database with 170,360 records belonging to a real estate company. It contained personal...
Read More
Income Property Investments exposes 170,000+ Individuals record

ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs

GreyNoise found attempts to exploit CVE-2023-28771, a vulnerability in Zyxel's IKE affecting UDP port 500. The attack centers around CVE-2023-28771,...
Read More
ALERT (CVE: 2023-28771)  Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs

CISA Flags Active Exploits in Apple iOS and TP-Link Routers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently included two high-risk vulnerabilities in its Known Exploited Vulnerabilities (KEV)...
Read More
CISA Flags Active Exploits in Apple iOS and TP-Link Routers

10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online

SafetyDetectives’ Cybersecurity Team discovered a public post on a clear web forum in which a threat actor claimed to have...
Read More
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online

Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems

WestJet, Canada's second-largest airline, is looking into a cyberattack that has affected some internal systems during its response to the...
Read More
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems

Paraguay 7.4 Million Citizen Records Leaked on Dark Web

Resecurity found 7.4 million records of Paraguayan citizens' personal information leaked on the dark web today. Last week, cybercriminals attempted...
Read More
Paraguay 7.4 Million Citizen Records Leaked on Dark Web

High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation

HashiCorp has revealed a critical vulnerability in its Nomad tool that may let attackers gain higher privileges by misusing the...
Read More
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation

SoftBank: Over 137,000 personal info leaked

SoftBank has disclosed that personal information of more than 137,000 mobile subscribers—covering names, addresses, and phone numbers—might have been leaked...
Read More
SoftBank: Over 137,000 personal info leaked

Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code

Serious security vulnerabilities in Trend Micro Apex One could allow attackers to inject malicious code and elevate their privileges within...
Read More
Alert  Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code

NGOs can attract hackers for motives that include espionage, ideological opposition and plain theft of donor information. Cybersecurity firm Recorded Future in August said it had spotted a multiyear campaign by a Chinese state-sponsored group it dubbed RedAlpha targeting humanitarian organizations, think tanks and government agencies. The hackers displayed a particular interest in organizations located in Taiwan.

The World Economic Forum in a January 2022 report concluded that NGOs are easy targets for ransomware extortionists since they often lack funding for robust cyber defense. “The lack of funding makes it challenging for many organizations to recruit talented practitioners and implement much needed cybersecurity road maps.”

NGOs may also view cybersecurity as an overhead expense that should be kept down as much as possible given the imperative to spend donors’ money on fulfilling the mission.

Infoxchange’s survey shows Asia-Pacific NGOs taken together spend 3.4% of their operational expenditures on IT, and the foremost IT priorities for most of these organizations are website improvements, along with boosting social media and digital marketing and improving the digital capabilities of staff.

Just 35% of NGO decision-makers in the Asia-Pacific region treat the improvement of data protection and information security practices as a top priority, the survey found. Infoxchange CEO David Spriggs said these figures highlight “the urgent need to prioritize cybersecurity practices and invest in the necessary training and infrastructure to protect sensitive data.”

Check Also

Patch Tuesday

Microsoft patch Tuesday fix exploited zero-day and 65 vuls patched

Microsoft’s June Patch Tuesday update has arrived, addressing 66 vulnerabilities across its product line. One …

Leave a Reply

Your email address will not be published. Required fields are marked *