A naukri.com initiative
Cyber Security News
Lastwatchdog
4w
22
News alert: Link11’s research shows DDoS attacks are more targeted — and doubled — year-over-year
- The latest Link11 European Cyber Report reveals that DDoS attacks have more than doubled year-over-year, becoming shorter, more targeted, and technologically advanced.
- The largest attack measured to date reached 1.4 terabits per second (Tbps).
- The combination of different attack vectors makes defense more difficult, requiring precise protection.
- Organizations are advised to continuously adapt their IT security strategies to avoid becoming victims of targeted attacks.
Read Full Article
1 Like
Securityaffairs
4w
357
Image Credit: Securityaffairs
Threat actors rapidly exploit new Apache Tomcat flaw following PoC release
- Threat actors rapidly exploit new Apache Tomcat flaw following PoC release
- A recently disclosed Apache Tomcat vulnerability is being actively exploited after the release of a public PoC exploit
- The vulnerability, tracked as CVE-2025-24813, allows remote code execution or information disclosure
- Users are recommended to update their affected Tomcat versions immediately
Read Full Article
21 Likes
Dev
4w
0
Image Credit: Dev
💀 Insomni'hack 2025 CTF write-up
- The Insomni'hack 2025 CTF took place during the Insomni'hack conference in Lausanne, Switzerland, with challenges ranging from easy to complex.
- A participant shared their experience as a beginner focusing on easy challenges due to time constraints and fatigue.
- In one of the challenges 'Welcome To Insomni'hack', participants had to clone a repository, encountering suspicious commands in the package.json file.
- By analyzing the scripts, participants discovered encoded flags leading to successful completions of the challenge.
- Another challenge 'v0l4til3' involved memory analysis using Volatility to extract hash values and solve a flag-related task.
- A SQL injection vulnerability in the 'Crack the gate' challenge allowed participants to bypass authentication and obtain the flag.
- In the 'EG101' challenge, a crypto puzzle required decoding data and exploiting cryptographic operations to reveal the flag.
- Participants exploited LFI vulnerabilities in the 'Hawkta' challenge by manipulating parameters to access sensitive files and retrieve the flag.
- Overall, the Insomni'hack 2025 CTF offered a variety of challenges that tested participants' skills in cybersecurity and problem-solving.
Read Full Article
Like
Medium
4w
433
Image Credit: Medium
AWS IAM Users, Roles, and Policies: A Guide with Best Practices
- AWS IAM is crucial for managing access to AWS services and resources securely.
- IAM users represent individuals with credentials to interact with AWS, while IAM roles provide secure access without long-term credentials.
- IAM policies are JSON documents that define permissions for IAM identities.
- Implementing least privilege, using roles, auditing policies, and utilizing AWS tools like Access Analyzer and CloudTrail can help reduce security risks.
Read Full Article
26 Likes
The New Stack
4w
111
Image Credit: The New Stack
How We Built a LangGraph Agent To Prioritize GitOps Vulns
- In Kubernetes environments, managing vulnerabilities can be overwhelming; HAIstings, an AI-powered prioritizer using LangGraph and LangChain, was developed by Stacklok.
- HAIstings helps prioritize vulnerabilities based on severity, infrastructure context, user insights, and evolving understanding through conversation.
- Main components include k8sreport, repo_ingest, vector_db, and memory to gather data, provide context, store files, and maintain conversation history.
- HAIstings uses LangGraph for conversation flow, retrieving data, creating reports, gathering context, and refining assessments based on new information.
- A retrieval-augmented generation (RAG) approach efficiently retrieves relevant files from GitOps repositories for each vulnerable component.
- CodeGate enhances security by redacting secrets and PII, controlling model access, and maintaining a traceable history of interactions with AI models.
- Configuring HAIstings with CodeGate involves updating the LangChain configuration to work seamlessly with the security controls provided.
- The combined system provides context-aware vulnerability prioritization while ensuring strict security measures are in place.
- HAIstings can generate security reports highlighting critical vulnerabilities, providing tailored recommendations for prompt attention.
- Performance considerations emphasize the trade-off between latency and security benefits when utilizing LLMs for vulnerability prioritization.
Read Full Article
6 Likes
Medium
4w
174
How to Disappear Online: The Art of Digital Vanishing in an Age of Surveillance
- Companies, governments, and cybercriminals rely on digital surveillance to monitor people.
- Modern CCTV systems analyze footage in real-time using AI, matching body posture and movement patterns.
- Data brokers collect and resell personal information for marketing and surveillance purposes.
- By understanding surveillance and taking strategic steps, you can reduce your digital footprint and protect your privacy.
Read Full Article
10 Likes
TechCrunch
4w
107
Image Credit: TechCrunch
Texas man faces prison for activating ‘kill switch’ on former employer’s network
- Software developer Davis Lu has been convicted of 'causing intentional damage' to his former employer's network.
- Lu created and activated a 'kill switch' that locked out all company employees when his credentials were deactivated.
- The kill switch caused widespread system disruptions and resulted in significant financial losses for the company.
- Lu faces a maximum prison sentence of up to 10 years for his actions.
Read Full Article
6 Likes
TechCrunch
4w
174
Image Credit: TechCrunch
Hackers are exploiting Fortinet firewall bugs to plant ransomware
- Hackers linked to the LockBit gang are exploiting Fortinet firewall vulnerabilities to carry out ransomware attacks on company networks.
- The hackers are specifically using two vulnerabilities, CVE-2024-55591 and CVE-2025-24472, to breach the networks and deploy a custom ransomware strain called 'SuperBlack.'
- Forescout Research has investigated three attacks, and there may be others, with the hackers selectively encrypting file servers after exfiltrating data.
- The threat actor, Mora_001, shows close ties to the previously disrupted LockBit ransomware gang.
Read Full Article
10 Likes
Tech Radar
4w
170
Image Credit: Tech Radar
Infamous ransomware hackers reveal new tool to brute-force VPNs
- The infamous Black Basta ransomware actors created an automated framework for brute-forcing firewalls, VPNs, and other edge networking devices.
- Their tool, called BRUTED, has been in use since 2023 and is used for large-scale credential stuffing and brute-force attacks.
- BRUTED targets several VPNs and firewalls, including SonicWall NetExtender, Palo Alto GlobalProtect, Cisco AnyConnect, and more.
- To protect against such attacks, businesses should ensure strong, unique passwords, enforce multi-factor authentication, and apply zero-trust network access.
Read Full Article
10 Likes
Cybersecurity-Insiders
4w
362
Image Credit: Cybersecurity-Insiders
Cloud Storage buckets holding sensitive information vulnerable to ransomware attacks
- A recent study by Palo Alto Networks‘ Unit 42 Threat Intelligence reveals that 66% of cloud-stored data is vulnerable to ransomware attacks.
- Many businesses and individuals fail to implement necessary security measures in their cloud environments, relying on default settings that offer minimal protection.
- The responsibility of securing data in the cloud falls on both the cloud storage provider and the user, who must implement and manage security tools effectively.
- To mitigate the risk of ransomware attacks, users should adjust default settings, implement strong encryption protocols, manage access permissions, and stay updated with security patches and best practices.
Read Full Article
21 Likes
VentureBeat
4w
344
Image Credit: VentureBeat
Visa’s AI edge: How RAG-as-a-service and deep learning are strengthening security and speeding up data retrieval
- Visa utilizes RAG-as-a-service and deep learning to enhance security and speed up data retrieval, particularly in dealing with complex policy-related questions across different countries.
- The use of generative AI has allowed Visa's client services team to access information up to 1,000 times faster, improving the quality of results and operational efficiency.
- Visa introduced 'Secure ChatGPT' to address employees' demand for AI tools within a secure environment, ensuring data confidentiality and control.
- Secure ChatGPT offers several model options such as GPT, Mistral, Anthropic’s Claude, Meta’s Llama, Google’s Gemini, and IBM’s Granite, providing versatility and customization.
- Visa's data infrastructure investment of around $3 billion in the past decade strengthens their AI capabilities with a multi-layered tech stack.
- Visa focuses on fraud prevention through AI, investing over $10 billion to enhance network security and block attempted fraud, totaling $40 billion in 2024.
- Technologies like deep learning recurrent neural networks aid Visa in transaction risk scoring for CNP payments, while transformer-based models improve real-time fraud detection.
- Synthetic data is used to augment existing data for fraud prevention simulations, staying ahead of cyber threats in an evolving landscape.
- Visa's AI tools, backed by deep learning and secure frameworks like RAG-as-a-service, exemplify the company's commitment to innovation and data-driven security measures.
- Continuous testing of AI models ensures performance, unbiased outcomes, and effective fraud mitigation across Visa's expansive global operations.
- Through strategic investments in AI technologies and data infrastructure, Visa is able to deliver faster, more secure services while upholding strict data protection standards and fraud prevention protocols.
Read Full Article
20 Likes
Securityaffairs
4w
331
Image Credit: Securityaffairs
Attackers use CSS to create evasive phishing messages
- Threat actors exploit Cascading Style Sheets (CSS) to bypass spam filters and detection engines, and track users’ actions and preferences.
- Cisco Talos observed threat actors abusing CSS to evade detection and track user behavior, raising security and privacy concerns.
- Attackers use CSS properties like text-indent and font-size to hide phishing text in emails and bypass security parsers.
- Threat actors can also track user behavior and conduct fingerprinting attacks using CSS, gathering data on recipients' preferences and system information.
Read Full Article
19 Likes
TechCrunch
4w
170
Image Credit: TechCrunch
Vote for the session you want to see at TechCrunch Sessions: AI
- TechCrunch Sessions: AI is hosting an Audience Choice voting to select a speaker for their event.
- There are six outstanding finalists, and the voting will last until March 21.
- The finalists include Cristina Mancini, Yann Stoneman, Hua Wang, Hardik Vasa, Marcie Vu, and Mahesh Chayel.
- The chosen speaker will lead their own breakout session and share their AI expertise.
Read Full Article
10 Likes
Medium
4w
85
Image Credit: Medium
5 Free Offline Password Managers for Android
- Keeping passwords in the cloud may not always be safe, so offline password managers are a good alternative.
- Offline password managers store passwords on your device, providing more control and security.
- Here are five free offline password managers for Android, including Buttercup and KeePass-compatible apps.
- Some apps require manual file syncing, while others offer built-in QR code features for easy login details capture.
Read Full Article
5 Likes
Cgmagonline
4w
89
Image Credit: Cgmagonline
Stay Anonymous, Stay Secure: Why E-Money Is the Ultimate Private Payment Method
- E-money, like prepaid cards and digital wallet top-ups, offers a level of privacy that traditional payment methods simply can’t match.
- No personal banking data is required, eliminating invasive tracking and unnecessary exposure of financial details.
- E-money allows for better control over spending, avoiding surprise fees and unwanted charges.
- It provides enhanced security, keeping users safe from hacks, data breaches, and identity theft.
Read Full Article
5 Likes
For uninterrupted reading, download the app