Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Subho Halder
Mobile App Security After MAV: Who Sets the Standard Now?
In June 2025, the Department of Homeland Security made a quiet but significant decision. The Cybersecurity and Infrastructure Security Agency (CISA) shut down its Mobile App Vetting (MAV) Program, which had served as the federal government’s central mechanism for testing the security of mobile applications for years. The move didn’t make the front page headlines, but it has major implications for cybersecurity and IT professionals across both the public and private sectors.
Telecom Networks as Critical Infrastructure in the Age of SIM-Server Threats
In September 2025, the U.S. Secret Service dismantled a network of over 300 SIM servers containing 100,000 SIM cards across the New York tri-state area. The devices were concentrated within 35 miles of the United Nations headquarters during the General Assembly. The infrastructure could launch denial-of-service (DoS) attacks on cell towers, mask anonymous threats, and facilitate encrypted communications between criminal organizations and nation-state actors.
Opinion - ITP.net
Subscribe to receive the latest tech news & views in Middle East & Africa
Security - Information Security News & Cybersecurity Insights, Threats & Hacks - ITP.net
Posted inACN, Cloud & Data, Cybersecurity, Edge, OPINION Posted inACN, Cybersecurity, Edge, News Subscribe to Edge Middle East Newsletter Subscribe to receive the latest tech news & views in Middle East & Africa Posted inNews, ACN, Cybersecurity Posted inNews, ACN, Cybersecurity, Digital Transformation, OPINION Posted inACN, Cybersecurity, OPINION by Subho Halder, Chief Executive Officer and Co-Founder, Appknox Posted inACN, Cybersecurity, OPINION Posted inEdge, ACN, Business, Cybersecurity
Why NIST & SOC 2 Still Matter, Even as Oversight Changes
The regulatory landscape will continue to evolve, but the fundamental need for robust security, reliable operations and transparent governance remains constant. The beauty of well-designed frameworks like NIST and SOC 2 is that they’re rooted in sound operational principles, not political whims, says Subho Halder, co-founder and CEO of mobile security testing platform Appknox.
DevSecOps for Mobile - Why It's Different (and How to Get It Right)
Mobile apps are everywhere. They handle payments, authentication, messaging, and health data — often all in the same session. But most organizations still approach mobile security like it's an extension of the web. It's not. Attacks on mobile apps jumped 80% last year. Mobile apps still ship with known vulnerabilities. And the reality is, attackers have figured out what most teams haven't: Mobile is often the weakest link in the stack.
Ultimate Guide to OWASP API Top 10
The OWASP API Top 10 is a list of common vulnerabilities found in APIs. OWASP created it as a resource for developers, testers, and security professionals to help them understand how to protect against API threats. Many people think that APIs are just another type of web application, but they're not; they have their own set of risks and challenges that need to be addressed. A simple API call can result in a data breach that could have lasting consequences for your business.
5 Healthcare Cybersecurity Trends to watch for - ET HealthWorld
by Subho Halder With a rapid adoption in digital healthcare services both by healthcare providers as well as consumers, healthcare cybersecurity has become an area of primary concern and investment, as opposed to an afterthought. Today, healthcare organizations actively utilize the secure infrastructure and advanced, sophisticated systems to securely store and process patients’ health data.
Top 7 Cybersecurity Regulations in the Financial Industry that you Need to Know
Cybersecurity incidents aren’t rare for businesses now. In fact, in the first 6 months of 2021, around 1767 data breach incidents rocked the business world and exposed more than 18 billion records. And one of the hardest-hit industry verticals from threatening cyber-attacks is the financial industry.
What You Should Know About PCI Gap Assessment?
We know how complicated and resource-consuming it can be to comply with the standards set up by the PCI (Payment Card Industry) Security Standards Council. It’s not surprising that less than 1 in 5 businesses (around 18%) assess their PCI DSS controls more frequently than is required by the regulation. However, things become a lot easier and streamlined with PCI DSS gap assessment.
How Penetration Testing Helps You Comply with ISO 27001?
ISO27001 is a prominent International Standard and best practice for Information Security Management. The core element of this standard is identifying risks and mitigating vulnerabilities that threaten the security of information assets. So, the technical risk and vulnerability assessment form the basis of implementing the ISO27001 Standard. For these reasons, Penetration Testing plays a crucial role in the achievement of the ISO27001 Standard.
What is Common Vulnerability Scoring System (CVSS)?
Given the large and growing number of cyber attacks that exploit software vulnerabilities, vulnerability management is critical. A variety of unintended consequences can result from misjudging the severity of an existing vulnerability. Legal battles, financial losses, and reputational damage are all possible outcomes for a business. To combat today's modern cyber security challenges, it's critical to have a vulnerability management program in place.
What is NIST Cybersecurity Framework? ( CSF ) | Complete Guide
NIST Cybersecurity Framework (CSF) is a voluntary security framework created through industry, academic, and US government collaboration that aims at reducing cyber risks to critical infrastructure. The framework is a result of the Presidential Executive Order (EO) 13636 that directed NIST to develop a framework in collaboration with the security stakeholders of the economic and National security of the US.
What Businesses Need To Follow To Be Compliant With GLBA
Cybercrimes, along with human error, can put a business at risk for legal repercussions when confidential information is stolen or corrupted. Companies are also susceptible to downtime when security issues occur, which can halt production and impact productivity. The goal of IT security compliance is to help organizations avoid fines and penalties while simultaneously protecting customer information.
What is the role of SecDevOps in PSD2 compliance?
link to original article When it comes to online payments and credit card processing, retailers in the EU have been granted a reprieve. The European Union’s Revised Payment Services Directive, known in short as PSD2, extended its deadline for compliance to March 2021, leaving it up to retailers and banks to remain secure while legislation is left in limbo. And yet, a deadline extension does not mean companies can rest on their laurels.
5 Mobile Application Security Best Practices for Companies that you need to know
The rapid evolution of the world of smartphones and mobile applications has skipped no one's eyes. Around the globe, around 5.19 billion people now use smartphones and almost 90% of their time is spent on mobile apps. The fact that a major chunk of the human populace relies on smartphones and mobile apps to store their personal and financial information makes matters pretty serious.
Five things CIOs can do as IoT adoption turns into a nightmare
There is no doubt that IoT technology has tremendous potential to improve outcomes for customers and also deliver significant business outcomes. As businesses are increasing investment on IoT, security professionals are going through a nightmare implementing secure deployments. While there are numerous benefits, the highly interconnected nature of IoT setups and deployments coupled with their open nature and diverse hardware is creating a new set of security problems to deal with.
5 Ways Your Cryptocurrency May be Hacked
Over time technologies evolved and now things that seemed to be not possible several years ago become the reality. Now you can order food, services, and basically anything you need online, and pay for it without leaving home. No surprise here, that cash payments are becoming a relic of the past. Along with wireless payments like Google or Apple pay (that still require assigning a banking account or card i.e. physical currency), the cryptocurrencies like Bitcoin are getting widely used.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Subho
Contact Subho, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack