Recent cyber incidents a result of opportunistic attacks exploiting common vulnerabilities: PDPC
Preliminary indications from the recent spate of cyber incidents are that these data breaches were a result of opportunistic attacks exploiting a range of common vulnerabilities in IT systems, the Personal Data Protection Commission (PDPC) said in a statement on Friday (Nov 13).PDPC stressed that although more significant data breaches have been reported in the past week, there were no clear connections between incidents and some incidents being related to global data breaches.The commission pointed out that while the connectedness of systems today has supported business efficiency and innovation, there are inherent risks that organisations should be aware of. These, it said, include third-party supply chain risks and Application Programming Interface (API) exploitation."When threat actors find a vulnerability at any part of these connected systems, they find it easier to move laterally through the different systems," PDPC explained in its statement."They may also find it easier to gain remote access to the systems, as well as impact other third parties in the organisation’s supply chain."