A naukri.com initiative
Cyber Security News
Medium
1d
23
Image Credit: Medium
Using the Deming wheel for ISO 27001 certification: Do and Check phases
- The Do and Check phases are essential in using the Deming wheel for ISO 27001 certification.
- The Do phase involves implementing the action plan and controlling the process needed to achieve information security objectives.
- The Check phase involves evaluating the success of the implementations, assessing information security performance, and conducting audits.
- Management reviews are conducted regularly to ensure the ISMS is appropriate, adapted, and effective.
Read Full Article
1 Like
Tech Radar
1d
266
Image Credit: Tech Radar
If you receive a Shein mystery box, do not open it
- If you receive an email with a “Shein mystery box” - don’t open it.
- It is a phishing email, coming from unidentified hackers, looking to steal your personal information.
- Cybersecurity researchers observed more than 1,000 phishing emails impersonating Shein.
- The email contains red flags like a suspicious sender's address and a fake website URL.
Read Full Article
16 Likes
Medium
1d
363
Image Credit: Medium
Unveiling Lazarus Group’s Deceptive Tactics: Impersonating Fenbushi Execs on LinkedIn
- The Lazarus Group, a state-backed cybercriminal organization, has been impersonating Fenbushi Capital on LinkedIn.
- They create false identities and engage in private conversations with unsuspecting victims, using the alias 'Nevil Bolson'.
- Once they gain trust, they share malicious links that lead to phishing attacks, compromising sensitive data.
- This highlights the need for vigilance and robust cybersecurity measures on platforms like LinkedIn.
Read Full Article
21 Likes
TechSpark
1d
216
Startup for 10: 4FOX Security
- 4FOX Security is a cybersecurity startup based in Bristol and Bath.
- The company aims to make managing security risks accessible to everyone, providing cyber security health checks to small to medium-sized businesses and sole traders.
- They also offer Den Defender, a free assessment for individuals to carry out their own cyber security health checks.
- Additionally, 4FOX Security supports schools with e-safety workshops and provides cyber security guidance to students, parents, guardians, and teachers.
Read Full Article
13 Likes
Medium
1d
317
Image Credit: Medium
Not sharing this with your partner, why share it with anyone
- Many apps, including Google, use microphone permission to record audio, but denying the permission disables 'Hey Google' feature.
- Mozilla Firefox has a clear privacy policy, does not sell user data, and offers flexible tracking protection controls.
- Chrome, on the other hand, is known for collecting user data and has complex privacy policies.
- To protect privacy, restrict app permissions and turn off website tracking in browsers.
Read Full Article
19 Likes
Medium
1d
166
Image Credit: Medium
Unlocking Cybersecurity Excellence: A Step-by-Step Guide on Crafting Professional Statements
- TechRays.net is a resource for mastering the art of cybersecurity professional statements.
- It provides insights into the industry's current trends, challenges, and demands.
- Guidance is offered on defining expertise and showcasing achievements.
- The platform keeps professionals updated and facilitates networking and collaboration.
Read Full Article
10 Likes
Siliconangle
1d
224
Image Credit: Siliconangle
Akamai launches Guardicore Platform to enhance zero-trust security for hybrid environments
- Akamai Technologies has launched the Guardicore Platform to enhance zero-trust security for hybrid environments.
- The Guardicore Platform combines zero-trust network access and microsegregation to help businesses stop ransomware, meet compliance mandates, and secure their hybrid workforce and cloud infrastructure.
- The platform offers features like microsegmentation, multifactor authentication, DNS firewall, and threat hunting to enable zero trust and enhance security posture.
- With the integration of AI, the Guardicore Platform allows security professionals to ask natural language questions of their network and simplifies network labeling.
Read Full Article
13 Likes
Medium
1d
193
Image Credit: Medium
Does Cybersecurity Require Coding? Here’s What You Need to Know
- While coding offers advantages in understanding cybersecurity, it's not a requirement for everyone in the field.
- Coding proficiency enhances comprehension of cybersecurity systems and allows for precise defense strategies.
- Non-coding roles like policy analysts and ethical hackers contribute to cybersecurity through critical thinking and problem-solving.
- Collaboration and diverse expertise are crucial for a robust cybersecurity ecosystem.
Read Full Article
11 Likes
Gbhackers
1d
270
LightSpy Malware Actively Targeting MacOS Devices
- Huntress researchers have discovered a macOS variant of the LightSpy malware, contradicting earlier reports of it being an iOS malware.
- The macOS variant targets Intel or Apple Silicon with Rosetta 2-enabled devices.
- The researchers provided detection rules for further investigation.
- The macOS version of LightSpy exhibits more advanced features and a more organized development process compared to the iOS version.
Read Full Article
16 Likes
Gbhackers
1d
197
New Android Malware Mimic As Social Media Apps Steals Sensitive Data
- A new RAT malware has been discovered to be targeting Android devices.
- The malware disguises itself as legitimate social media apps like Snapchat, Instagram, WhatsApp, Twitter, and Google to steal sensitive data.
- The malware utilizes HTML files to create fraudulent login pages and harvest credentials from users.
- It also gains control over the infected device and executes various malicious actions.
Read Full Article
11 Likes
Medium
1d
309
Exploring Your Options for an Online Cyber Security Course in India
- Online courses provide flexibility for learning at your own pace and from any location.
- Online learning platforms offer a range of resources, making it easier to understand complex concepts.
- Online courses are cost-effective and offer comprehensive curriculum and recognized certifications.
- Practical exposure, hands-on learning, and real-world projects are crucial in online cyber security courses.
Read Full Article
18 Likes
Gbhackers
1d
375
Safari Vulnerability Exposes EU iOS Users to Malicious Marketplaces
- A newly discovered flaw in Apple’s Safari browser poses a risk to iPhone users in the European Union.
- The vulnerability allows third-party marketplace apps to track users and carry out malicious activities.
- Users are advised to exercise caution while browsing and downloading apps until a fix is rolled out.
- Apple is urged to enhance the security and privacy of the marketplace-kit URI scheme.
Read Full Article
22 Likes
Medium
1d
201
Image Credit: Medium
How To Create Your Own Vulnerable CTF Machines
- To create your own vulnerable Capture The Flag (CTF) machines, you can follow these steps:
- 1. Set up VirtualBox and Vagrant by downloading the necessary files and configuring the Vagrantfile.
- 2. Boot up the virtual machine.
- 3. Connect to the virtual machine and start configuring it manually or write an automated script.
- 4. Induce misconfigurations, gain initial access, escalate privileges, and perform cleanup and finalization.
- 5. Export the machine for others to use.
- To add specific Common Vulnerabilities and Exposures (CVEs) with publicly available exploits, you can download and install applications from exploit.db.
Read Full Article
12 Likes
Gbhackers
1d
15
Kaiser Permanente Cyber Attack Exposes 13.4 Million Users Data
- Kaiser Permanente, a leading healthcare provider in the US, experienced a cyber attack compromising the personal data of 13.4 million users.
- The breach was caused by unauthorized access to City of Hope, a service provider to Kaiser Permanente.
- Sensitive information including names, contact details, social security numbers, and medical records were accessed and copied by the attacker.
- City of Hope has taken immediate action to secure their systems, conducted an investigation, and implemented enhanced security measures to prevent future incidents.
Read Full Article
Like
Siliconangle
1d
139
Image Credit: Siliconangle
New ML-powered service from Semperis aims to streamline identity threat detection
- Semperis has released Lightning Identity Runtime Protection, a new machine learning-powered identity threat detection and response service.
- The service uses machine learning models to detect widespread attack patterns and risky anomalies.
- Lightning Identity Runtime Protection aims to address the challenge of detecting and responding to identity attacks.
- The service reduces noise by layering in an identity risk fabric and draws insights from multiple sources.
Read Full Article
8 Likes
For uninterrupted reading, download the app