News, Article, and Solution in Cybersecurity Realms.

INTRODUCTION How much of what a vulnerability scanner flags every week actually turns out to be real? Research from OWASP puts the false positive rate for common vulnerability types somewhere between 15% and 30%, and separate research from Snyk found that security teams now spend roughly 70% of their time chasing alerts that end up being nothing at all. That gap between what a tool reports and what is actually exploitable is not a minor inconvenience. It is the reason a third of companies surveyed admitted they responded late to a genuine attack because their team was buried in phantom threats instead. ITSEC Asia, Indonesia's leading cybersecurity company, works with organizations across the region that have learned this the hard way, and the question that keeps coming up is simple. If a scanner already checks the boxes, why does AI-powered penetration testing exist at all, and what does it actually do differently? Source: OWASP false positive research via DEV Community [https://dev.to/kuboidsecurelayer/why-automated-vulnerability-scanners-miss-most-real-security-vulnerabilities-2p96] · Snyk: Minimizing False Positives [https://snyk.io/blog/minimizing-false-positives-enhancing-security-efficiency/] THE FUNDAMENTAL DIFFERENCE: FOLLOWING RULES

The cybersecurity industry is undergoing its most significant transformation in more than a decade. As cyber threats grow increasingly sophisticated, the rapid adoption of Artificial Intelligence (AI) and rising demand for more adaptive security solutions are driving cybersecurity companies worldwide to invest more heavily in proprietary technologies, software platforms, and intellectual property as new engines of longterm growth. These shifts are not only redefining customer expectations but are also reshaping the cybersecurity business model itself. Traditional service-led offerings are increasingly complemented by integrated platforms that combine AI, software, threat intelligence, and automation to deliver faster, smarter, and more resilient cyber defense. In response to this evolving landscape, PT ITSEC Asia Tbk (ITSEC Asia) (IDX: CYBR) has strengthened its long-term business strategy through an expansion of its business activities, following shareholder approval at the Extraordinary General Meeting of Shareholders (EGMS) held on Tuesday, 30 June 2026. The expanded business scope provides the foundation for the Company to accelerate the development, commercialization, and operation of AI-powered cybersecurity technologies while expanding its software-driven and recurring

As cyber threats continue to escalate across Indonesia, cyber crisis preparedness has become an increasingly important issue for business leaders and decision-makers. Throughout 2025, Indonesia's National Cyber and Crypto Agency (BSSN) recorded more than 5.16 billion anomalous traffic events and indicators of suspicious cyber activity requiring further attention. The figures highlight that the ability to respond effectively to cyber incidents is just as critical as prevention itself. To help strengthen this capability, PT ITSEC Asia Tbk (ITSEC Asia) (IDX: CYBR), together with the Indonesian Digitalization and Cybersecurity Association (ADIGSI), brought the National Cyber Resilience Movement (GNKS) Roadshow to Makassar in Thursday, 25 June 2026. The event gathered industry leaders, cybersecurity professionals, and stakeholders to enhance organizational readiness against a wide range of cyber crisis scenarios. Held at Novotel Makassar Grand Shayla, the program featured an Executive Tabletop Exercise designed to give decision-makers practical exposure to cyber incident management. The session forms part of the broader National Cyber Resilience Movement being conducted throughout 2026. Previously, GNKS also was held in Banten on 30