Recent cyber incidents a result of opportunistic attacks exploiting common vulnerabilities: PDPC
The Personal Data Protection Commission stated that recent data breaches resulted from opportunistic attacks. These attackers exploited common vulnerabilities found in IT systems. The commission noted that while more breaches occurred in the last week, there are no clear links between them. Some incidents may relate to global data breaches. The PDPC warned that system connectivity brings inherent risks to organizations despite improving business efficiency.
Preliminary indications from the recent spate of cyber incidents are that these data breaches were a result of opportunistic attacks exploiting a range of common vulnerabilities in IT systems, the Personal Data Protection Commission (PDPC) said in a statement on Friday (Nov 13).PDPC stressed that although more significant data breaches have been reported in the past week, there were no clear connections between incidents and some incidents being related to global data breaches.The commission pointed out that while the connectedness of systems today has supported business efficiency and innovation, there are inherent risks that organisations should be aware of. These, it said, include third-party supply chain risks and Application Programming Interface (API) exploitation."When threat actors find a vulnerability at any part of these connected systems, they find it easier to move laterally through the different systems," PDPC explained in its statement."They may also find it easier to gain remote access to the systems, as well as impact other third parties in the organisation’s supply chain."