Insider Threats: Lessons from MAD UNICORN on Safeguarding Business Integrity
In the Thai Netflix’s series MAD UNICORN (สงครามส่งด่วน), audiences are drawn into the high-stakes world of logistics startups, where ambition, betrayal, and corporate espionage collide. At the heart of the story is Santi, a visionary entrepreneur whose journey is derailed not by external competitors, but by trusted insiders. This narrative offers a compelling lens through […]
Cybercriminals Are Using Fake AI Tools to Spread Malware
The massive excitement around Artificial Intelligence (AI) tools has become a goldmine for cybercriminals. They’re heavily using this buzz to trick people into downloading dangerous ransomware and malware. This isn’t just a tactic for highly advanced hackers anymore; even smaller, lesser-known groups are now effectively using this strategy. These malicious actors, including ransomware gangs like […]
Surviving the First Wave: Cybersecurity Lessons from First Quarter
The first quarter of 2025 confirmed that the cyber threat landscape continues to evolve rapidly, with attackers becoming more sophisticated and targeted. This period was marked by a sharp rise in AI-driven phishing, the persistence of ransomware, and increasing risks associated with cloud services and SaaS applications. Here’s a comprehensive summary of what we saw […]
Over 16,000 Fortinet Devices Compromised with Symlink Backdoor
Security researchers have discovered that over 16,500 Fortinet FortiGate firewall devices have been compromised by attackers using a symlink-based backdoor. This attack allows persistent and stealthy remote access to affected systems. The discovery was made by Lexfo Security, and the infections are believed to have started as early as 2022. Despite patches being released by […]
Cybercriminals Are Evolving — And They’re Using AI Against You.
At PKF, we recognize that the cybersecurity landscape demands strategic vigilance, technical agility, and board-level attention. Microsoft’s latest Digital Defense Report outlines urgent trends that reaffirm what we’ve seen across industries: cyber risk is no longer a technical issue—it’s a business-critical concern. Here are the key highlights and what they mean for our clients and […]
SuperBlack Ransomware Exploits Fortinet Vulnerabilities for Unauthorized Access
A new ransomware group known as ‘Mora_001’ has been identified exploiting two authentication bypass vulnerabilities in Fortinet firewall appliances to deploy a custom ransomware strain named ‘SuperBlack’. Exploited Vulnerabilities: CVE-2025-24472: Initially fixed in January 2025, this vulnerability enables remote attackers to gain super-admin privileges by making maliciously crafted CSF proxy requests. Although Fortinet initially stated […]
Juice Jacking: When Public Charging Becomes a Security Risk
Introduction We’ve all been there—phone battery at 5%, important calls to make, and the relief of spotting a public USB charging station at the airport or bus terminal. These charging stations have become lifelines in our digital world, popping up everywhere from shopping malls to hotel lobbies. While they offer a convenient solution to our […]
Critical RCE bug in Microsoft Outlook now exploited in attacks
CISA Urges U.S. Federal Agencies to Secure Systems Against Critical Microsoft Outlook Vulnerability The Cybersecurity and Infrastructure Security Agency (CISA) issued a warning to U.S. federal agencies, urging them to secure their systems against ongoing attacks exploiting a critical remote code execution (RCE) vulnerability in Microsoft Outlook. This vulnerability, identified by Check Point researcher Haifei […]
Understanding the Dark Web: Implications for Financial Assurance
The Dark Web and Financial Institutions The Dark Web, a hidden subset of the internet, presents unique risks and challenges for financial institutions. As a space where anonymity thrives, it has become a hub for illegal activities, including the trade of stolen financial data. Understanding and addressing these risks is essential for the financial assurance […]
Microsoft Thailand Collaborates with NCSC to Strengthen Cybersecurity in Thailand
Bangkok, Thailand – May 28, 2024 – Microsoft Thailand today announced a collaboration with the National Cyber Security Agency (NCSC) to join the Government Security Program (GSP) to exchange cybersecurity information, knowledge, and insights in a transparent manner, aiming to strengthen cybersecurity in Thailand. The Government Security Program (GSP) is a global initiative where Microsoft […]
