Cloud security gaps threaten regional businesses
The report uncovers alarming security gaps in cloud environments, from misconfigured storage exposing sensitive data to embedded secrets in workloads, that could lead to data breaches, financial losses and regulatory repercussions, the company says.
The findings are particularly relevant for organisations operating in regulated sectors or managing cross-border data flows.
In Singapore, where data protection and cybersecurity are tightly governed under frameworks such as the Cybersecurity Act, Personal Data Protection Act (PDPA) and Monetary Authority of Singapore (MAS) technology risk management guidelines, poor visibility into cloud assets and misconfigurations can have serious compliance repercussions.
Similarly, Indonesia's Personal Data Protection Law, the PDPA in Thailand and Malaysia, and the Philippines' Data Privacy Act all impose stringent requirements on data protection, cross-border transfers and cloud security.
"Together, these regulations highlight the urgent need for organisations across Southeast Asia to prioritise strong cloud governance and security to meet evolving compliance and cybersecurity demands," said the report.
The research reveals a significant and widespread risk, finding that 9% of all analysed cloud storage resources contain restricted or confidential information. In environments housing vast volumes of data, this seemingly small percentage translates to millions of sensitive records potentially exposed.
Even more alarming, nearly one in 10 publicly accessible storage locations holds sensitive data, driven by common misconfigurations, weak access controls and limited visibility. This can expose organisations across industries to serious security and compliance threats in line with local or regional data residency expectations.
The risks do not end there. Tenable's findings show that 54% of organisations with AWS ECS (Amazon Web Services Electronic Clearing Services) task definitions have a secret embedded within them, exposing businesses to the threat of full cloud environment takeovers or exploitation activities like unauthorised crypto mining.
Even within AWS EC2 instances, 3.5% contain credentials embedded in user data, giving attackers a clear pathway to escalate privileges and compromise environments.
"Secrets are the keys to the kingdom, yet many organisations are unknowingly leaving them unguarded across their cloud infrastructures," said Ari Eitan, director of cloud security research at Tenable.
"In today's threat landscape, complacency is costly. Organisations must treat secrets with the highest level of security hygiene to prevent attackers from gaining footholds that can spiral into full-blown breaches."
With Singapore continuing to scale up cloud adoption, supported by national initiatives like the Infocomm Media Development Authority's Cloud Outage Incident Response framework and regional efforts to enable secure digital economies, the report highlights the urgent need for a proactive, risk-driven security strategy.
"The cloud offers incredible agility, but without strong controls and continuous monitoring, it also opens the door to significant exposures," Mr Eitan said. "Understanding where your sensitive data and credentials are and who can access them must now be a board-level priority."
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Bangkok Post
20 hours ago
- Bangkok Post
Shabu restaurants forced into price war
The Thai Restaurant Association sees the price war among major shabu brands as reflecting challenges of the sluggish Thai economy, as consumers are increasingly seeking value-for-money dining choices. This price competition is also affecting small and medium-sized restaurant operators. Last weekend, Thai media reported on the launch of Bonus Suki, a new sukiyaki brand operated by Koomkoom Co Ltd, a subsidiary of MK Restaurant Group. The first outlet is scheduled to open in Saraburi province tomorrow, offering a suki buffet at just 219 baht per person, excluding VAT. "If the Thai economy was in a better condition, we wouldn't see this kind of price war in the restaurant industry. But with the current sluggish economy, restaurant operators must compete on price," said Thaniwan Kulmongkol, president of the Thai Restaurant Association. In 2024, the SET-listed MK Restaurant Group recorded revenue of 15 billion baht and a profit of more than 1.4 billion baht. Meanwhile, BNN Restaurant Group posted revenue of 7.07 billion baht and a 1.16-billion-baht profit last year, according to the Ministry of Commerce's Department of Business Development. Average spending per head at MK Restaurant is currently 600–700 baht, while at Suki Teenoi it stands at about 300 baht per head, Mrs Thaniwan said. She said the rapid growth of Suki Teenoi has been driven by several factors. One key reason is its extended operating hours -- from 11am until 5am the next day -- matching the lifestyles of younger generations who tend to stay out late. These longer operating hours enable the restaurant operator to reduce the rental cost per square metre. She added that given the current economic conditions and the rise of new competitors, MK Restaurant has launched this new budget-friendly brand to compete on price and retain its customer base. In response, Suki Teenoi has launched a campaign across 10 branches, offering 50% off for customers dining between midnight and 5am, reducing the price to around 120 baht per person. "Even though the restaurants may not generate much profit from this limited promotion, they gain significant media exposure and public awareness without spending on advertising," Mrs Thaniwan said. She said intense competition from large restaurant chains is putting pressure on small and medium-sized operators, who lack economies of scale in terms of product supply. To stand out, she said smaller operators should highlight the uniqueness of their dishes and the stories behind each dish to attract customers who are seeking a dining experience.
Bangkok Post
6 days ago
- Bangkok Post
AI giant Nvidia first company to reach $4 trillion in value
NEW YORK - Nvidia became the first company to touch $4 trillion in market value on Wednesday, a new milestone in Wall Street's bet that artificial intelligence will transform the economy. Shortly after the stock market opened, Nvidia vaulted as high as $164.42, giving it a valuation above $4 trillion. The stock subsequently edged lower, ending just under the record threshold. 'The market has an incredible certainty that AI is the future,' said Steve Sosnick of Interactive Brokers. 'Nvidia is certainly the company most positioned to benefit from that gold rush.' Nvidia, led by electrical engineer Jensen Huang, now has a market value greater than the GDP of France, Britain or India, a testament to investor confidence that AI will spur a new era of robotics and automation. The California chip company's latest surge is helping drive a recovery in the broader stock market, as Nvidia itself outperforms major indices. Part of this is due to relief that President Donald Trump has walked back his most draconian tariffs, which pummelled global markets in early April. Even as Trump announced new tariff actions in recent days, US stocks have stayed at lofty levels, with the tech-centred Nasdaq ending at a fresh record on Wednesday. 'You've seen the markets walk us back from a worst-case scenario in terms of tariffs,' said Angelo Zino, technology analyst at CFRA Research. While Nvidia still faces US export controls to China as well as broader tariff uncertainty, the company's deal to build AI infrastructure in Saudi Arabia during a Trump state visit in May showed a potential upside in the US president's trade policy. 'We've seen the administration using Nvidia chips as a bargaining chip,' Zino said. New advances Nvidia's surge to $4 trillion marks a new benchmark in a fairly consistent rise over the last two years as AI enthusiasm has built. In 2025 so far, the company's shares have risen more than 21%, whereas the Nasdaq has gained 6.7%. Taiwan-born Huang has wowed investors with a series of advances, including its core product: graphics processing units (GPUs), key to many of the generative AI programs behind autonomous driving, robotics and other cutting-edge domains. The company has also unveiled its Blackwell next-generation technology allowing more super processing capacity. One of its advances is 'real-time digital twins,' significantly speeding production development time in manufacturing, aerospace and myriad other sectors. However, Nvidia's winning streak was challenged early in 2025 when China-based DeepSeek shook up the world of generative AI with a low-cost, high-performance model that challenged the hegemony of OpenAI and other big-spending behemoths. Nvidia has lost some $600 billion in market valuation in a single session during this period. Huang has welcomed DeepSeek's presence, while arguing against US export constraints. AI race In the most recent quarter, Nvidia reported earnings of nearly $19 billion despite a $4.5 billion hit from US export controls limiting sales of cutting-edge technology to China. The first-quarter earnings period also revealed that momentum for AI remained strong. Many of the biggest tech companies — Microsoft, Google, Amazon and Meta — are jostling to come out on top in the multi-billion-dollar AI race. A recent UBS survey of technology executives showed Nvidia widening its lead over rivals. Zino said Nvidia's latest surge reflected a fuller understanding of DeepSeek, which has ultimately stimulated investment in complex reasoning models but not threatened Nvidia's business. Nvidia is at the forefront of 'AI agents,' the current focus in generative AI in which machines are able to reason and infer more than in the past, he said. 'Overall the demand landscape has improved for 2026 for these more complex reasoning models,' Zino said. But the speedy growth of AI will also be a source of disruption. Executives at Ford, JPMorgan Chase and Amazon are among those who have begun to say the 'quiet part out loud,' according to a Wall Street Journal report recounting recent public acknowledgment of white-collar job loss due to AI.
Bangkok Post
6 days ago
- Bangkok Post
Inno Precast moves away from housing
Inno Precast, a manufacturer and distributor of precast concrete, is shifting its focus to non-residential projects and end users, as the stagnant housing market is expected to take at least two years to recover. Songsak Piyawannarat, the company's deputy chief executive, said the housing sector, which has remained sluggish since last year, is unlikely to rebound within the next 18 months, with signs of improvement expected from 2027 onwards. "During this period of weak market activity, residential developers reduce their inventory cycle from five years to three. This will impact our business, so we need to adapt by seeking alternative projects," he said. "Once inventory reaches a certain low level, developers will begin replenishing it, which may take place over the next few years." This year, the company plans to pursue more non-residential development projects such as factories, particularly in the Eastern Economic Corridor, which have been growing since last year. It also aims to expand the scope of its work for factory clients by taking on additional orders, such as walls, in addition to the columns it previously supplied. Other opportunities include infrastructure projects, such as retaining walls for small-scale dams. In addition to project-based clients, the company will expand its reach to end users, including self-built homeowners, through Plantnery, a homebuilding firm wholly owned by SET-listed developer Pruksa Holding, one of Inno Precast's major shareholders. It is also studying and testing precast swimming pools, as pool villas are popular in both Bangkok's luxury housing market and major resort destinations, particularly Phuket where loft-style designs are currently in trend, said Mr Songsak. "If the residential market was not in crisis as it is now, our revenue would grow or at least stay at the same level as in 2024," he said. "However, due to the economic stagnation, now further dampened by the US tariffs, we will not meet this year's revenue target." Inno Precast set a revenue target of 2 billion baht earlier this year, but the company may fall short of that goal. Spinning off from Pruksa's wholly owned subsidiary in 2023 to take on external projects, the company has an annual production capacity of 5 million square metres, equivalent to around 1,500 housing units a month, with a break-even point at 50% capacity utilisation. At present, it utilises 40% of its annual production capacity, with 80–90% allocated to residential projects, roughly half of which comes from Pruksa, down from 70% last year. The remainder primarily supports factory projects.
