A naukri.com initiative
Cyber Security News
Global Fintech Series
4w
223
Image Credit: Global Fintech Series
The Architecture of Push-to-Card Payments: How Real-Time Transactions Are Processed Globally
- Push-to-Card Payments revolutionize real-time money transfers and enable instant and borderless transactions.
- The architecture of push-to-card payments involves payment networks, compliance mechanisms, and security protocols.
- Key components in the push-to-card payment ecosystem include senders and recipients, payment processors, card networks, financial institutions, and regulatory frameworks.
- Cutting-edge technologies such as tokenization, AI and machine learning, APIs, and blockchain power push-to-card payments while adhering to compliance and security considerations.
Read Full Article
13 Likes
The Verge
4w
206
Image Credit: The Verge
Google acquires cybersecurity firm Wiz for $32 billion
- Alphabet, Google's parent company, has announced its largest-ever acquisition, acquiring cybersecurity firm Wiz for $32 billion.
- Wiz, a fast-growing Israeli-founded startup, provides cloud-based cybersecurity solutions and was previously valued at $12 billion.
- The deal is pending regulatory approval, and if successful, it will surpass Google's previous largest acquisition of Motorola Mobility for $12.5 billion.
- Google aims to strengthen its cloud security provisions by incorporating Wiz's expertise and plans to retain Wiz as a multicloud platform.
Read Full Article
12 Likes
Global Fintech Series
4w
303
Image Credit: Global Fintech Series
Bluefin and Printec Group Partner to Bring PCI-Validated P2PE to European Retailers
- Bluefin and Printec Group have formed a strategic partnership to bring PCI-validated P2PE to European retailers.
- Printec will integrate Bluefin's P2PE solution into its payment offerings, ensuring best-in-class security for European customers.
- The partnership will begin with a deployment at a global supermarket chain, securing retail payments through Verifone devices.
- The collaboration strengthens data protection for retailers, reduces compliance costs, and mitigates security risks.
Read Full Article
18 Likes
Tech Radar
4w
98
Image Credit: Tech Radar
A worrying critical security flaw in Apache Tomcat could let hackers take over servers with ease
- A deserialization vulnerability on Apache Tomcat servers is being abused in the wild to completely take over affected endpoints.
- The attack is dead simple to execute and requires no authentication, allowing threat actors to gain full remote access to vulnerable servers.
- Most web application firewalls (WAF) miss this attack, making it difficult for organizations to detect and prevent the breach.
- Users are advised to upgrade to the latest versions of Apache Tomcat to fix the security flaw.
Read Full Article
5 Likes
Medium
4w
424
Image Credit: Medium
What I Will Teach My Kids About Cybersecurity
- Teach children to keep personal information private online and avoid sharing details like home address and full name.
- Educate children about online threats and common scams, and encourage them to report any suspicious activity.
- Teach children to create strong passwords, never share them, and be cautious of cyberbullying.
- Promote critical evaluation of online content and establish rules for safe usage of online platforms.
Read Full Article
25 Likes
Siliconangle
4w
259
Image Credit: Siliconangle
VulnCheck raises $12M to boost global expansion of exploit intelligence platform
- VulnCheck has raised $12 million in new funding to expand its exploit intelligence platform and support international growth.
- The company provides real-time exploit and vulnerability intelligence to predict attack vectors accurately.
- VulnCheck's platform autonomously collects data from various channels, offering up-to-date information on vulnerabilities.
- The funds will be used to enhance the platform and scale go-to-market initiatives for accelerated growth.
Read Full Article
15 Likes
TechCrunch
4w
256
Image Credit: TechCrunch
Google is buying Wiz for up to $33B to beef up in cloud security
- Alphabet, Google's parent company, is acquiring cloud security startup Wiz for up to $33 billion.
- The deal is similar to LinkedIn's acquisition by Microsoft, with Wiz maintaining its autonomy.
- Google plans to expand Wiz's business and make more acquisitions in the cloud security space.
- Wiz is generating $700 million in annual recurring revenue and is expected to double it to $1 billion this year.
Read Full Article
15 Likes
Tech Radar
4w
13
Image Credit: Tech Radar
Standalone identity theft protection from Nord Security is now available
- Nord Security has made NordProtect a standalone service.
- US customers can access the service without a NordVPN subscription.
- The service offers comprehensive identity theft protection and insurance.
- NordProtect monitors the dark web, offers credit monitoring, and provides insurance against cyber extortion.
Read Full Article
Like
Tech Radar
4w
415
Image Credit: Tech Radar
Ofcom cracks down on UK tech firms, will issue sanctions for illegal content
- Ofcom will issue sanctions against tech platforms for failing to remove illegal or harmful content.
- Online Safety Act updates mean platforms must implement measures to quickly remove illegal material.
- Fines of up to £18 million could be issued for non-compliance.
- Scope includes social media platforms, search engines, and user-to-user services with a significant number of UK users.
Read Full Article
25 Likes
Securityaffairs
4w
299
Image Credit: Securityaffairs
GitHub Action tj-actions/changed-files was compromised in supply chain attack
- The GitHub Action tj-actions/changed-files was compromised, enabling attackers to extract secrets from repositories using the CI/CD workflow.
- Threat actors compromised the GitHub Action tj-actions/changed-files, allowing the leak of secrets from repositories using the continuous integration and continuous delivery CI/CD workflow.
- The tj-actions/changed-files GitHub Action is used in over 23,000 repositories, automating workflows by detecting file changes in commits or pull requests.
- GitHub promptly removed the tj-actions/changed-files Action and users are advised to update to version 46.0.1 and review workflows from March 14-15 for unexpected output in the changed-files section.
Read Full Article
18 Likes
Tech Radar
4w
129
Image Credit: Tech Radar
Subsea internet cables can now ‘listen’ for sabotage using irregular pulses of light
- Subsea internet cables can now 'listen' for sabotage using irregular pulses of light.
- AP Sensing has developed a way to detect disturbances in light pulses traveling through undersea fiber optic cables.
- The technology can locate potential sources of sabotage or damage and provide insight into vessel's size, location, and direction of travel.
- The system requires listening stations to be installed on cables, and other companies are also developing novel ways to detect cable sabotage.
Read Full Article
7 Likes
Dev
4w
89
Image Credit: Dev
How to Prevent Cross-Site Script Inclusion (XSSI) in Laravel
- Cross-Site Script Inclusion (XSSI) is a security vulnerability that allows attackers to exploit the way browsers handle script inclusions, potentially leading to unauthorized data access.
- XSSI leverages the browser's ability to include scripts from different origins without enforcing the Same-Origin Policy (SOP). Attackers can exploit this behavior to access sensitive data by tricking the browser into executing malicious scripts.
- XSSI vulnerabilities in Laravel can lead to unauthorized data access, session hijacking, and data manipulation.
- To prevent XSSI in Laravel, key steps include setting correct Content-Type headers, avoiding including sensitive data in scripts, implementing Content Security Policy (CSP), validating and sanitizing user inputs, and conducting regular security assessments.
Read Full Article
5 Likes
Hackernoon
4w
361
Image Credit: Hackernoon
The Internet Is Full of Duplicate Requests—Here’s How Smart Developers Prevent Them
- Securing requests between frontend and backend is crucial to prevent data leaks, duplicate operations, and service outages.
- Methods of securing requests include JWT Tokens, HTTPS, CSRF Tokens, Data Validation, Rate Limiting, CORS Policies, and more.
- Idempotency, ensuring the same result for an operation performed multiple times, is essential to prevent request duplication.
- Implementing idempotency involves using an Idempotency-Key header to uniquely identify and process requests.
- Idempotency key generation on the client side should ensure uniqueness, consistency on retries, and independence from random factors.
- Server-side processing of the Idempotency-Key involves checking for existing keys and storing results with a defined TTL.
- Implementation in languages like Go simplifies request processing and enhances system resilience.
- Common mistakes in implementing idempotency include setting a too short TTL, non-unique keys, and caching errors.
- By incorporating idempotency in unsafe HTTP methods, developers can create more stable and predictable APIs.
Read Full Article
21 Likes
Securityaffairs
4w
53
Image Credit: Securityaffairs
New StilachiRAT uses sophisticated techniques to avoid detection
- Microsoft discovered a new remote access trojan (RAT), dubbed StilachiRAT, that uses sophisticated techniques to avoid detection.
- StilachiRAT is a sophisticated RAT designed for stealth, persistence, and data theft.
- The malware supports functionalities to steal credentials, digital wallet data, clipboard content, and system information.
- StilachiRAT employs advanced evasion methods and targets cryptocurrency wallet extensions.
Read Full Article
3 Likes
Global Fintech Series
4w
241
Image Credit: Global Fintech Series
Resecurity Partners With Union of Arab Banks to Strengthen Cybersecurity and Fraud Prevention Across the Arab Financial Sector
- Resecurity has partnered with the Union of Arab Banks (UAB) to enhance cybersecurity and fraud prevention in the Arab financial sector.
- The UAB represents over 330 Arab banking and financial institutions, serving as the largest banking consortium in the region.
- Through this collaboration, Resecurity and UAB aim to strengthen cybersecurity capabilities and promote advanced threat intelligence solutions.
- The partnership includes providing UAB member banks with access to Resecurity's comprehensive suite of cybersecurity solutions and fraud prevention platform.
Read Full Article
14 Likes
For uninterrupted reading, download the app