Philippines to pilot biometric passenger system at airports

The Philippines Department of Transportation and UltraPass ID have partnered to pilot a biometric passenger processing system at selected airports following a memorandum of understanding (MOU) signing. The pilot test is scheduled to begin in early 2025 at Iloilo International Airport, with additional testing planned for Tacloban, Laoag, and Bicol International Airport later in the year.

The system, which embeds biometric data in passports, is designed to streamline airport operations by swiftly enabling passengers to pass through check-in, security, and boarding gates, enhancing both convenience and security. The implementation will occur in two phases – Phase 1 will involve Filipino passengers using the national ID, while Phase 2 will cater to foreign passengers with e-passports travelling domestically. Additionally, the system will integrate with the Philippine national ID system, which aims to reduce processing times and provide a touchless, more efficient airport experience.

Furthermore, this initiative is part of the US Smart Cities Trade Mission, which features 12 US companies from various sectors such as cybersecurity, AI, and tourism. These companies are already contributing to the growth of key Philippine industries, including the digital economy, semiconductors, and tourism.

Through this partnership, the Philippines aims to improve its airport operations and strengthen trade and investment opportunities. In doing so, the involvement of US companies sets high standards for labour practices, environmental responsibility, and corporate social engagement.

Indian VVDN partners with SecureThings.ai to boost automotive cybersecurity

VVDN Technologies has partnered with SecureThings.ai to enhance cybersecurity across various industry sectors, primarily focusing on the connected vehicle ecosystem. Through this collaboration, SecureThings.ai’s advanced cybersecurity solutions will be integrated into VVDN’s automotive products and services, including vehicle connectivity, in-vehicle infotainment systems, instrument clusters, advanced driver assistance systems (ADAS), and software-defined vehicle (SDV) solutions.

As a result, this partnership ensures that VVDN meets global cybersecurity standards, such as ISO 21434, while providing robust security for connected vehicles and IoT ecosystems. Specifically, key initiatives include intrusion detection and protection systems, real-time threat intelligence services, the establishment of a security research lab, and the provision of a red team as a service for independent cybersecurity assessments.

These efforts will help VVDN fortify connected devices, comply with evolving regulations like R 155/156 and AIS 189/190 in India, and offer comprehensive protection against cyber threats. Moreover, this partnership strengthens both companies’ positions in the cybersecurity market, with VVDN emphasising its commitment to delivering secure, reliable solutions globally.

Furthermore, SecureThings.ai’s expertise in cutting-edge security research and technologies will empower OEMs and tier-1 suppliers to combat emerging threats and adhere to stringent regulatory standards. The collaboration also leverages VVDN’s product engineering capabilities, thus driving innovation and setting new standards for cybersecurity in the automotive and IoT industries.

EU Commissioner calls for tougher 5G security measures

The incoming European Commissioner for Tech Sovereignty, Security, and Democracy, Henna Virkkunen, expressed dissatisfaction with the limited action taken by EU member states to exclude high-risk telecom suppliers, such as China’s Huawei and ZTE, from critical infrastructure. During her confirmation hearing in the European Parliament, Virkkunen noted that although the European Commission adopted 5G security measures in 2020, fewer than half of the EU member states have implemented restrictions on these suppliers. She indicated that this issue will be addressed in the planned revision of the Cyber Security Act next year and stressed the need for more serious action from national governments.

Virkkunen also pointed out that while the EU had adopted the 5G Cybersecurity Toolbox to protect telecom networks, only 11 of the 27 member states have fully implemented measures, including bans and restrictions on high-risk vendors. In addition to her efforts to strengthen cybersecurity, Virkkunen plans to propose a Digital Networks Act in 2025 to overhaul telecom regulations and boost investment and connectivity. On the topic of US Big Tech compliance with EU rules, she reaffirmed the importance of cooperation but emphasised that all companies must adhere to EU regulations, including those set out in the Digital Services Act.

Germany’s cybersecurity on high alert ahead of elections

Germany is strengthening its cyber defences as elections approach, with Interior Minister Nancy Faeser highlighting the need for robust protections against cyber-attacks and disinformation. Faeser warned of potential threats from Russia and other foreign actors, stressing that democracy must also be safeguarded in the digital realm.

The annual report from the Federal Office for Information Security pointed to Germany’s vulnerability to hybrid threats, which include hacking, manipulation, and disinformation. Faeser confirmed plans to bolster cybersecurity, aiming to counteract any attempts at digital interference that could destabilise the election process.

Germany’s snap elections are set for early next year, following the collapse of Chancellor Olaf Scholz’s coalition government amid economic concerns and rising populism. While recent elections saw no major cybersecurity incidents, authorities continue to monitor for risks.

With the political landscape in flux, security agencies remain vigilant. Enhanced measures are in place to detect and address cyber threats as the nation prepares for a potentially turbulent electoral period.

TSA proposes new cybersecurity rule to bolster US transportation infrastructure resilience

The US Transportation Security Administration (TSA) has proposed a new cybersecurity rule designed to strengthen the resilience of surface transportation infrastructure. Specifically, the rule mandates high-risk operators, including those in the pipeline, railroad, and bus sectors, to implement comprehensive Cyber Risk Management (CRM) programs to manage and mitigate cybersecurity risks.

In addition to this, operators will be required to report cybersecurity incidents to the Cybersecurity and Infrastructure Security Agency (CISA) and physical security concerns to TSA. Furthermore, the rule stipulates that operators must develop and maintain detailed cybersecurity plans, including a Cybersecurity Assessment Plan (CAP) for annual evaluations and a Cybersecurity Operational Implementation Plan (COIP) to guide improvements.

These plans must incorporate governance structures, designate cybersecurity coordinators, and undergo regular audits to assess their effectiveness. Moreover, the rule promotes a defence-in-depth approach to cybersecurity by including system monitoring, patch management, and incident response planning, all of which aim to reduce the impact of cyberattacks.

Additionally, TSA seeks public feedback on the rule’s potential compliance burdens, economic impacts, and ways to streamline the process, particularly for smaller entities. TSA’s initiative reflects a broader commitment to enhancing the cybersecurity posture of surface transportation systems while ensuring regulatory consistency across federal, state, and local levels.

Why does it matter?

The agency is seeking input on reducing redundancies and improving alignment with existing regulations, particularly in cybersecurity training and personnel vetting for high-risk industries. By gathering feedback, TSA aims to refine the rule and ensure it effectively addresses the evolving cyber threats facing the nation’s critical transportation infrastructure.

NTT DATA partners with Google Cloud to boost AI and cloud solutions in the Asia Pacific region

NTT DATA and Google Cloud have partnered to accelerate the adoption of cloud-based data analytics and generative AI solutions across the Asia Pacific region. By combining NTT DATA’s industry expertise and client base with Google Cloud’s cutting-edge technologies, the partnership aims to drive innovation, improve operational efficiency, and enhance agility for enterprises.

Specifically, the collaboration focuses on co-developing industry-specific solutions for sectors such as healthcare, financial services, manufacturing, retail, and the public sector. A new NTT DATA Google Cloud Business Unit will also be created to focus on joint solutions in data analytics, GenAI, applications, infrastructure, cybersecurity, and SAP on the Google Cloud Platform (GCP).

The expansion also involves enhancing internal expertise, as NTT DATA plans to certify at least 1,000 more engineers in the APAC region and provide advanced training to its teams to ensure successful solution delivery. With global public cloud spending projected to grow significantly, the partnership aims to capture the increasing demand for cloud services and AI-driven solutions.

The goal is to grow NTT DATA’s cloud business in APAC by more than 10 times over the next three years. By combining NTT DATA’s digital transformation portfolio with Google Cloud’s advanced technologies, the collaboration is set to drive modernisation in AI, cloud infrastructure, and cybersecurity, offering businesses secure and efficient solutions to accelerate their digital transformation.

Cybersecurity chief confirms US election integrity amid disinformation

The head of US cybersecurity, Jen Easterly, announced Monday that, despite an increase in disinformation targeting the 2024 presidential election, there has been no evidence of interference capable of affecting the election outcome. Easterly noted the unprecedented levels of false information spreading across online platforms, much of which has been attributed to foreign actors aiming to sow division among voters.

US authorities have pointed to Russia as one of the primary sources of election-related disinformation, including a widely circulated fake video in Georgia showing an immigrant falsely claiming to have voted multiple times. Officials say that similar tactics are expected to continue beyond Election Day, targeting trust in the electoral process through to January.

Easterly assured voters that election security is stronger than ever, thanks to enhanced protective measures and improved preparedness across voting jurisdictions. Her message emphasised the government’s ongoing commitment to maintaining safe, secure, and reliable elections for all Americans.

UNDP Bahrain and Derasat partner for digital transformation report

The United Nations Development Programme (UNDP) Bahrain and the Bahrain Center for Strategic, International, and Energy Studies (Derasat) have embarked on a significant partnership to develop the National Human Development Report (NHDR), titled ‘Digital Transformation: A Roadmap for Progress.’ That collaboration aims to harness digital transformation as a strategic tool for fostering inclusive growth in the Kingdom, aligning with Bahrain Vision 2030 and the Sustainable Development Goals (SDGs).

In this context, the NHDR will comprehensively analyse how digital transformation can enhance human development outcomes in Bahrain, addressing critical issues such as the digital divide, privacy concerns, cybersecurity, and integrating digital technologies into public services. Furthermore, the report will benchmark Bahrain’s digital landscape against regional and international standards, offering actionable insights and recommendations to improve digital inclusion, protect privacy, and secure digital infrastructures.

Moreover, the UNDP Bahrain and Derasat highlight the importance of stakeholder engagement in developing the NHDR. By collaborating with government entities, civil society organisations, and the private sector, diverse perspectives will be included to ensure alignment with Bahrain’s national development goals.

Chinese hacking tops list of cybersecurity threats to Canada

Canada’s signals intelligence agency has identified China’s hacking activities as the most significant state-sponsored cyber threat facing the country, according to a new threat assessment. The Communications Security Establishment (CSE) highlighted China’s advanced and aggressive cyber campaigns, describing them as highly sophisticated and primarily targeting political and commercial objectives, including espionage, intellectual property theft, and influence operations. This announcement comes amid strained relations between Ottawa and Beijing, fueled by past allegations of Chinese interference in Canada’s electoral process.

The CSE report also noted that Russia’s cyber operations are active in attempts to destabilise Canada and its allies, while Iran poses an additional cyber threat. These findings underscore the ongoing cyber challenges Canada faces from multiple state actors seeking influence and intelligence. The Chinese embassy in Ottawa has not yet commented on the CSE report, and Beijing has historically rejected similar accusations.

Canadian authorities have grown increasingly vocal about foreign interference, with Prime Minister Justin Trudeau previously accusing China of election meddling. Security experts warn that Canada will need to strengthen defenses as geopolitical tensions continue to heighten cyber risks.

Rapid7 explores sale as buyout firms show interest

Boston-based cybersecurity company Rapid7, valued at roughly $2.5 billion, is exploring acquisition options after attracting interest from private equity firms. Working with investment advisors Goldman Sachs and JPMorgan, the firm is reportedly in early discussions with major private equity groups, including Advent, Bain Capital, and EQT. Sources suggest that while talks are ongoing, Rapid7 may ultimately decide against a sale.

The company, a provider of vulnerability management tools helping organisations assess and monitor cybersecurity risks, has been under increased pressure to consider a sale. Activist investor Jana Partners recently acquired a 5.8% stake in Rapid7, urging it to explore strategic options as it faces strong competition from larger players like Tenable and Qualys.

Rapid7 has seen its shares fall around 32% this year amid rising challenges in the cybersecurity market, as clients cut back on spending due to economic pressures. However, news of a potential sale lifted the company’s stock by over 4% on Monday. Interest in cybersecurity acquisitions remains strong, with private equity firms actively pursuing opportunities in the sector, highlighted by major deals such as Advent’s $14 billion acquisition of McAfee in 2021 and Vista Equity’s $4.6 billion buyout of KnowBe4 last year.