Keeper Security warns of identity weaknesses after APAC incidents

Cybersecurity firm Keeper Security has pointed to recurring failures in identity and access management as the likely root cause behind two recent high-profile incidents in the Asia-Pacific region, reports Security Brief Asia.

Following a disruptive attack on South Korea's diversified Kyowon Group, Keeper's APAC lead Takanori Nishiyama warned that "a single point of compromise" in complex digital environments can cascade quickly, urging a renewed focus on strict privileged access controls and credential hygiene. Separately, after Instagram addressed a bug enabling mass password reset requests, Keeper CISO Shane Barney clarified the likely threat was recycled data fueling phishing, not a new breach. He emphasized that attackers "prefer to log in rather than break in," exploiting reused credentials to blend in as legitimate users.

Both experts converged on similar prescriptions: organizations must adopt zero-trust principles with continuous verification and monitoring, while individuals should rely on unique passwords and multi-factor authentication. These incidents underscore that robust identity security foundations, not novel attack techniques, are critical for defense against escalating regional threats.