InfoSecBulletin Cybersecurity for mankind
Rising worries about the digital security of nongovernmental organizations in the Asia-Pacific region haven’t translated into robust adoption of basic measures, shows data from a survey of more than 1,500 regional NGOs.
Infoxchange, an Australian IT consultant for social issue organizations, said only about 4 in 10 NGOs have enabled multifactor authentication and that only 2 in 10 provide cybersecurity training to staff. Of the 1,589 NGOs across the region that participated in an Infoxchange survey, 1 in 6 disclosed experiencing a cybersecurity incident during the past year. One-third of Indonesian organizations reported experiencing an incident.
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
NGOs can attract hackers for motives that include espionage, ideological opposition and plain theft of donor information. Cybersecurity firm Recorded Future in August said it had spotted a multiyear campaign by a Chinese state-sponsored group it dubbed RedAlpha targeting humanitarian organizations, think tanks and government agencies. The hackers displayed a particular interest in organizations located in Taiwan.
The World Economic Forum in a January 2022 report concluded that NGOs are easy targets for ransomware extortionists since they often lack funding for robust cyber defense. “The lack of funding makes it challenging for many organizations to recruit talented practitioners and implement much needed cybersecurity road maps.”
NGOs may also view cybersecurity as an overhead expense that should be kept down as much as possible given the imperative to spend donors’ money on fulfilling the mission.
Infoxchange’s survey shows Asia-Pacific NGOs taken together spend 3.4% of their operational expenditures on IT, and the foremost IT priorities for most of these organizations are website improvements, along with boosting social media and digital marketing and improving the digital capabilities of staff.
Just 35% of NGO decision-makers in the Asia-Pacific region treat the improvement of data protection and information security practices as a top priority, the survey found. Infoxchange CEO David Spriggs said these figures highlight “the urgent need to prioritize cybersecurity practices and invest in the necessary training and infrastructure to protect sensitive data.”
