InfoSecBulletin Cybersecurity for mankind
Rising worries about the digital security of nongovernmental organizations in the Asia-Pacific region haven’t translated into robust adoption of basic measures, shows data from a survey of more than 1,500 regional NGOs.
Infoxchange, an Australian IT consultant for social issue organizations, said only about 4 in 10 NGOs have enabled multifactor authentication and that only 2 in 10 provide cybersecurity training to staff. Of the 1,589 NGOs across the region that participated in an Infoxchange survey, 1 in 6 disclosed experiencing a cybersecurity incident during the past year. One-third of Indonesian organizations reported experiencing an incident.
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited
NGOs can attract hackers for motives that include espionage, ideological opposition and plain theft of donor information. Cybersecurity firm Recorded Future in August said it had spotted a multiyear campaign by a Chinese state-sponsored group it dubbed RedAlpha targeting humanitarian organizations, think tanks and government agencies. The hackers displayed a particular interest in organizations located in Taiwan.
The World Economic Forum in a January 2022 report concluded that NGOs are easy targets for ransomware extortionists since they often lack funding for robust cyber defense. “The lack of funding makes it challenging for many organizations to recruit talented practitioners and implement much needed cybersecurity road maps.”
NGOs may also view cybersecurity as an overhead expense that should be kept down as much as possible given the imperative to spend donors’ money on fulfilling the mission.
Infoxchange’s survey shows Asia-Pacific NGOs taken together spend 3.4% of their operational expenditures on IT, and the foremost IT priorities for most of these organizations are website improvements, along with boosting social media and digital marketing and improving the digital capabilities of staff.
Just 35% of NGO decision-makers in the Asia-Pacific region treat the improvement of data protection and information security practices as a top priority, the survey found. Infoxchange CEO David Spriggs said these figures highlight “the urgent need to prioritize cybersecurity practices and invest in the necessary training and infrastructure to protect sensitive data.”
