CyberSense

This issue of CyberSense looks at several risks of using generative AI systems, such as accidental data leaks and risks of using it to code; misuse of AI for malicious purposes, and what tech firms have done to mitigate data privacy concerns.

Season’s greetings! While this is the season for goodwill, it would seem that cybercriminals also have good reason to be jolly. In 2023, cybercriminals continued to feast on vulnerabilities which led to zero-day exploits (attacks exploiting a previously unknown vulnerability before any available remediation) and N-day attacks (a compromise achieved through exploiting a vulnerability, despite a patch being available). This issue of CyberSense reflects on the growing challenge of zero-day exploits and N-day attacks, and what we can do to manage the threat.

With the sharp rise in malware scams affecting Android users in Singapore this year, mobile malware has gained plenty of traction for their role in facilitating malicious cyber activity. This issue of CyberSense examines in greater detail the various types of mobile malware, and what we can do to guard against these threats.

In June 2023, a high-profile breach of the MOVEit secure file transfer system reportedly compromised the data of close to 1,000 companies worldwide. This edition of CyberSense examines the activities, capabilities and tactics of the notorious Cl0p ransomware gang, which has claimed responsibility for the breach.

In the world of cybercrime, staying ahead of the game is essential. Cybercriminals are constantly evolving their tactics and looking for new vulnerabilities and victims to exploit, and ransomware groups are no exception. One group that has risen to the top is LockBit, establishing themselves as the cybercrime kingpin that other ransomware groups have to keep pace with.

Cloud technology and services continue to be increasingly adopted by organisations and individuals, with public cloud spending forecasted to grow by 20% to US$591.8 billion in 2023, according to market estimates by Gartner.

Artificial Intelligence research firm OpenAI‘s revolutionary chatbot ChatGPT has made waves since its launch on 30 November 2022. Unlike most chatbots, which are generally limited to answering simple queries and inflicting varying degrees of frustration on their users, ChatGPT can provide comprehensive information on virtually every topic known (before 2022), as well as write, analyse, and help improve text and code.

Since 2005, data breaches have been on the rise, with millions of records exposed in each breach. While data breaches are not new, the proliferation of electronic data has made us more susceptible to such breaches. Data such as credit card information, passwords, personal contact details may be compromised whenever a data breach occurs.

As 2022 comes to a close, this issue of CyberSense provides a summary of the key cybersecurity threats and trends observed over the past 12 months, and a taste of what to expect in 2023.