A naukri.com initiative
Cyber Security News
Tech Story
1M
260
U.S. Expands Export Restrictions on Chinese Tech Firms
- The U.S. Commerce Department has added 140 Chinese tech firms to its “entity list” to restrict China's access to crucial technology.
- The new restrictions cover semiconductor manufacturing, chipmaking tools, and software.
- U.S. companies need special licenses to export to these firms, primarily targeting high-bandwidth memory chips.
- China criticized the move as economic coercion and vowed to take countermeasures.
Read Full Article
15 Likes
Tech Radar
1M
224
Image Credit: Tech Radar
Linux devices are being hit by LogoFAIL vulnerability, Bootkitty installed
- LogoFAIL, a group of vulnerabilities that allow threat actors to install malware at boot level, is actively being abused in the wild.
- The vulnerabilities allow actors to replace the logo image displayed on Windows and Linux devices during the boot process with a malicious code.
- Bootkitty, the first-ever Linux UEFI bootkit, has been observed being deployed using LogoFAIL.
- Bootkitty targets Linux and Windows devices and relies on a self-signed certificate to function.
Read Full Article
13 Likes
Neuways
1M
374
Image Credit: Neuways
Top 5 Cyber Security Trends for 2025
- The importance of third-party risk management will grow significantly, especially as generative AI tools become a standard part of software development.
- Macs are becoming prime targets for cyber criminals, with a rise in macOS vulnerabilities and increasing sophistication of attacks.
- Identity and access management (IAM) is shifting from IT to security teams, aligning IAM strategies with threat prevention and response.
- Geopolitical tensions are driving fragmentation in cyber regulations, creating a complex environment for businesses operating across borders.
- Social engineering attacks fueled by AI are on the rise, emphasizing the importance of employee training and awareness.
Read Full Article
22 Likes
Siliconangle
1M
333
Image Credit: Siliconangle
New Thales solution integrates Imperva technologies to enhance data risk management
- Thales SA launches Data Risk Intelligence, a new Imperva Data Security Fabric solution.
- The solution combines risk and threat identification capabilities of the Imperva Data Security Fabric with the data protection capability of the Thales CipherTrust Data Security Platform.
- Data Risk Intelligence provides a unified view of risks to critical data, allowing security teams to prioritize risk mitigation.
- Key benefits include enhanced risk prioritization, comprehensive visibility, and customizable risk indicators.
Read Full Article
19 Likes
Siliconangle
1M
44
Image Credit: Siliconangle
Rubrik expands cybersecurity and AI solutions with new AWS and Amazon Bedrock capabilities
- Data security software provider Rubrik Inc. has announced expanded cybersecurity and artificial intelligence capabilities and new solutions for Amazon Web Services Inc. and Amazon Bedrock.
- Rubrik unveiled updates to its cybersecurity solutions for AWS and introduced Rubrik Annapurna, a new API service for generative AI application development via integration with Amazon Bedrock.
- Rubrik Cloud Vault, an isolated and immutable backup repository managed by Rubrik, offers businesses a fully managed and secure off-site archive for backup data on AWS.
- Rubrik is enhancing security on AWS with features like anomaly detection and accelerating recovery, while Rubrik Annapurna enables fast and secure access to enterprise data for building generative AI applications.
Read Full Article
2 Likes
Global Fintech Series
1M
98
Image Credit: Global Fintech Series
ai1 Technologies Announces Release 1.0 of the AI – based Lending Suite to Revolutionize the FinTech Industry
- ai1 Technologies announced the release of its AI-based lending suite for the fintech industry.
- The suite combines a secure AI lending agent point of sale (POS) tool with machine learning algorithms.
- The solution aims to improve efficiency, accuracy, security, compliance, and reduce costs for lenders.
- It offers features such as dynamic decision-making, proactive recommendations, and what-if analysis.
Read Full Article
5 Likes
Securityaffairs
1M
224
Image Credit: Securityaffairs
Energy industry contractor ENGlobal Corporation discloses a ransomware attack
- Energy industry contractor ENGlobal Corporation disclosed a ransomware attack on November 25, disrupting operations.
- The threat actors gained unauthorized access to the company's IT system and encrypted some data files.
- ENGlobal Corporation is currently working with external cybersecurity specialists to investigate and remediate the incident.
- It is unclear when full access to the company's IT systems will be restored, and the impact on its financial condition and operations is being assessed.
Read Full Article
13 Likes
The Fintech Times
1M
233
Combatting First-Party Fraud: TransUnion Reveals Younger Generations are Committing More Fraud
- Nineteen per cent of adults would consider providing incorrect details to get a preferential rate on a financial product, reveals TransUnion.
- Younger age demographics, including Gen Z and Millennials, are more likely to falsify information.
- TransUnion emphasizes the need for effective data and technology solutions to combat first-party fraud.
- Consumers are encouraged to explore legal alternatives and improve their credit scores to access better deals.
Read Full Article
14 Likes
Wired
1M
175
Image Credit: Wired
Top US Consumer Watchdog Has a Plan to Fight Predatory Data Brokers
- The Consumer Financial Protection Bureau (CFPB) is proposing a rule that would allow regulators to police data brokers under the Fair Credit Reporting Act (FCRA). Under the proposal, data brokers would be limited in their ability to sell certain sensitive personal information.
- CFPB's director, Rohit Chopra, says that closing the loopholes allowing data brokers to trade in this data with little to no oversight will benefit vulnerable people and the US as a whole. The FCRA requires “credit reporting agencies” to adhere to certain standards of accuracy and privacy in their dealing with people’s financial information.
- The CFPB’s proposal would require data brokers to obtain “separate, explicit authorization” before acquiring or sharing people’s credit information.
- CFPB officials says that they are concerned about data being transmitted in ways that companies allege protects people's identities but in reality can be “de-anonymized” in simple ways.
- Emily Peterson-Cassin, director of corporate power at Demand Progress’s Education Fund, commended the CFPB’s proposal and urged the incoming Trump administration to see it through.
- In February 2023, a group of consumer-focused nonprofits urged Chopra to enforce the powers the FCRA affords regulators to prevent data brokers from engaging in these potentially damaging practices.
- Elon Musk, who is coleading an office named after a meme coin—the Department of Government Efficiency, or DOGE—directly attacked the CFPB's work last week, calling for the agency to be “deleted.”
- CFPB officials declined to comment on whether they believe the regulatory action will be short-lived, as president-elect Donald Trump plans to empower a number of Silicon Valley figures to reorganize the federal government with the aim of targeting “waste and fraud.”
- The CFPB was founded in 2011 with the aim of protecting consumers from the kinds of fraud and abuse that kicked off the 2008 financial crisis.
- CFPB's proposal is aimed at stopping data brokers from “enabling scammers, stalkers, and spies undermining our personal safety and America's national security.”
Read Full Article
10 Likes
Socprime
1M
256
Image Credit: Socprime
SmokeLoader Malware Detection: Notorious Loader Reemerges to Target Companies in Taiwan
- The SmokeLoader malware has reemerged and is targeting Taiwanese companies in various sectors.
- SmokeLoader, typically used as a downloader for deploying other malicious samples, is now directly executing attacks by retrieving plugins from its C2 server.
- Security professionals can rely on SOC Prime Platform for collective cyber defense and access dedicated Sigma rules to detect SmokeLoader attacks.
- SmokeLoader belongs to the adversary toolkit of the financially motivated UAC-0006 group and has been used in phishing campaigns against Ukraine in the past.
Read Full Article
15 Likes
Identityiq
1M
431
Image Credit: Identityiq
Why Identity Theft Protection is an Important Employee Benefit
- Identity theft protection for employees is an excellent way to promote employee well-being, as it protects workers and has advantages for the employer.
- Identity theft instances were almost 382% higher last year, highlighting the need for employee identity theft protection.
- Disengaged employees cost companies more than $500 billion per year, and identity theft protection can help prevent employees from becoming disengaged while dealing with this issue.
- Employers offering additional benefits can enhance their reputation, a vital aspect of future success.
- Identity theft protection is a critical benefit that enhances financial security and helps companies build a strong, productive workforce.
- IdentityIQ industry-leading identity theft protection and credit monitoring is an excellent benefit that promotes financial security and economic stability for every person on your payroll.
- Identity theft protection provides security tools that keep consumers safe from identity theft and digital threats and aids them in quickly recovering fraud losses.
- Identity theft protection comprises credit monitoring, identity theft insurance, identity restoration, and digital protection tools that ensure members are continually informed about their credit and have resources available.
- Offering identity theft protection at your company can improve your reputation and aid in attracting and retaining top talent, especially among millennials, who prioritize comprehensive benefits.
- Employers can partner with IdentityIQ to provide customized identity theft protection, offering a valuable benefit that enhances financial security and stability for employees and their families.
Read Full Article
25 Likes
TechBullion
1M
435
Image Credit: TechBullion
Why Tech Professionals Use VPNs for Enhanced Security
- Tech professionals use VPNs for enhanced security to protect their data and online activities.
- VPNs encrypt internet traffic, making data unreadable to unauthorized parties.
- VPNs provide secure access to public wifi networks, preventing data leaks.
- VPNs mask IP addresses, making it harder for cybercriminals to track devices and launch targeted attacks.
Read Full Article
26 Likes
Neuways
1M
444
Image Credit: Neuways
Blue Yonder Ransomware Attack Demonstrates the Vital Role of Cyber Resilience and Business Continuity
- The recent ransomware attack targeting Blue Yonder has disrupted supply chain operations, affecting companies like Starbucks.
- The incident highlights the need for robust cyber security measures and business continuity plans.
- Supply chains are prime targets for cybercriminals, emphasizing the shared responsibility between businesses and technology partners.
- Neuways offers solutions to ensure continuity, enhance threat intelligence, and establish manual failovers.
Read Full Article
26 Likes
Tech Radar
1M
62
Image Credit: Tech Radar
UK is being hit by more cyberattacks than ever before, NCSC warns
- The UK is experiencing a significant increase in cyberattacks, with academia, manufacturing, and IT sectors being the top targets.
- The National Cyber Security Center (NCSC) received 1,957 reports of cyberattacks this year, up from previous years.
- The number of incidents deemed nationally significant has tripled compared to last year, with 89 incidents falling into this category.
- Head of NCSC, Richard Horne, emphasizes that cyber risks are widely underestimated and more efforts need to be made to stay ahead of adversaries.
Read Full Article
3 Likes
Dev
1M
363
Image Credit: Dev
How to Migrate Data from One SafeLine to the other
- Prepare the environment for migration, ensuring version consistency
- Stop the containers in both the original and new environments
- Copy the SafeLine directory from the original environment to the new environment
- Restart the containers in the original environment
- Move the license from the old SafeLine to the new SafeLine and re-activate the license
Read Full Article
21 Likes
For uninterrupted reading, download the app