DBS Data Breach 2025: Ransomware Attack Exposes 11,000 Customers
The DBS Data Breach 2025 involved a ransomware attack on a third-party vendor, exposing 11,000 customer records from DBS Bank and Bank of China Singapore.
SOC status:Duty analyst on shift
Insights
Research, detection engineering notes and plain-English explanations for the questions UK boards, IT managers and security leads actually ask. One substantial piece a week; a short threat brief in between.
Get the fortnightly briefing
The DBS Data Breach 2025 involved a ransomware attack on a third-party vendor, exposing 11,000 customer records from DBS Bank and Bank of China Singapore.
An insights article highlighting the rise of unconventional ransomware groups targeting open-source email platforms like Zimbra, including a technical bulletin with actionable guidance for UK organisations.
An insights article exploring the rise of low-volume data leak actors and offering a practical detection and response guide for non-encryption-based extortion threats targeting UK organisations.
Kaefer Breach - the Everest Ransomware Group claim responsibility for potentially taking over their freshdesk instance.
A detection-focused advisory for research institutions and local governments concerned with low-noise threat actors such as ProjectRelic, including a technical bulletin on persistence, credential theft, and passive data exfiltration in academic and civic networks.
An insights post exploring the stealthy methods of state-aligned threat actors, including Silent Ransom (Silk Typhoon), and how defenders can detect slow exfiltration and cloud-based command and control in enterprise environments.
Continuous Threat Exposure Management. Cyber threats today evolve at breakneck speed, outpacing traditional defences.
PCI DSS 4.0 – What’s New and Why It’s Significant. For retailers, PCI DSS v4.0 is more than a compliance update
open-source tools for SOC commonly used by our Cyber Defence Team. Open Source tools commonly used in aSOC.
DragonForce is a cyber threat group that has rapidly evolved from hacktivist beginnings into a prolific ransomware operation.
SOC365 is a cutting-edge (SIEM) service platform that forms the backbone of the company’s SOC-as-a-service offering
What is a SOC (Security Operations Centre)? Discover how a SOC works, the difference between in-house and SOC-as-a-Service models.
229 articles · page 14 of 20