Archives

Surviving the First Wave: Cybersecurity Lessons from First Quarter

The first quarter of 2025 confirmed that the cyber threat landscape continues to evolve rapidly, with attackers becoming more sophisticated and targeted. This period was marked by a sharp rise in AI-driven phishing, the persistence of ransomware, and increasing risks associated with cloud services and SaaS applications. Here’s a comprehensive summary of what we saw […]

Over 16,000 Fortinet Devices Compromised with Symlink Backdoor

Security researchers have discovered that over 16,500 Fortinet FortiGate firewall devices have been compromised by attackers using a symlink-based backdoor. This attack allows persistent and stealthy remote access to affected systems. The discovery was made by Lexfo Security, and the infections are believed to have started as early as 2022. Despite patches being released by […]

Cybercriminals Are Evolving — And They’re Using AI Against You.

At PKF, we recognize that the cybersecurity landscape  demands strategic vigilance, technical agility, and board-level attention. Microsoft’s latest Digital Defense Report outlines urgent trends that reaffirm what we’ve seen across industries: cyber risk is no longer a technical issue—it’s a business-critical concern. Here are the key highlights and what they mean for our clients and […]

Thailand Digital Arrival Card System Set to Launch on 1 May 2025

The Immigration Bureau of Thailand will launch the new Thailand Digital Arrival Card (TDAC) system on 1 May 2025, replacing the current paper arrival card for foreign nationals. From this date, all foreign visitors must submit their arrival information electronically before entering Thailand, whether by air, land, or sea.

SuperBlack Ransomware Exploits Fortinet Vulnerabilities for Unauthorized Access

A new ransomware group known as ‘Mora_001’ has been identified exploiting two authentication bypass vulnerabilities in Fortinet firewall appliances to deploy a custom ransomware strain named ‘SuperBlack’. Exploited Vulnerabilities: CVE-2025-24472: Initially fixed in January 2025, this vulnerability enables remote attackers to gain super-admin privileges by making maliciously crafted CSF proxy requests. Although Fortinet initially stated […]

2025 General Overview for Thailand Tax Return Filing Deadlines

Contributor Pakpoom Chatayatorn Tax Director Glossary of terms General abbreviations Tax Types Tax return and forms General overview of tax return filing for companies or juristic partnerships in Thailand Tax return submission methods Online tax filing extension Deadline adjustment for public holidays and weekends Requirements for electronic tax filing CIT filings Additional monthly tax filing […]

Permanent Residence Quota Now Open (Mar 5 – May 15, 2025)

The Immigration Office has officially announced the delayed opening of permanent residency (PR) applications for the year 2024. Applications will be accepted from March 5 to May 15, 2025. Key Criteria for PR Application Applicants must meet the following requirements: Non-Immigrant Visa Requirement: Must have held a Non-Immigrant Visa with permission to stay on a […]

Juice Jacking: When Public Charging Becomes a Security Risk

Introduction We’ve all been there—phone battery at 5%, important calls to make, and the relief of spotting a public USB charging station at the airport or bus terminal. These charging stations have become lifelines in our digital world, popping up everywhere from shopping malls to hotel lobbies. While they offer a convenient solution to our […]

Reminder to Submit Your Progress Report to the BOI via the E-Monitoring System

As we approach mid-February, all BOI-promoted companies are required to submit their progress report through the BOI e-monitoring system. This submission, which is required twice a year (by the end of February and July), is vital for ensuring your company is still on track and remains compliant with BOI regulations and continues to receive the […]