A naukri.com initiative
Cyber Security News
Dev
1M
395
Image Credit: Dev
Beyond Shift Left: Transforming Security from Reactive to Proactive Teamwork
- CVEs have increased 30% year over year, with ransomware attacks like Blue Yonder becoming commonplace.
- Ops teams are overwhelmed and lack the tools to address the complexity of vulnerability management.
- Strategic cyber attacks that exploit vulnerabilities are on the rise, causing significant disruptions.
- A holistic approach to security is necessary, investing in proactive security tools and processes.
Read Full Article
23 Likes
Hackernoon
1M
197
Image Credit: Hackernoon
Sweet Security Unveils First Unified Detection And Response Platform
- Sweet Security has unveiled its unified Cloud Native Detection and Response platform.
- The platform integrates capabilities of Application Detection and Response (ADR), Cloud Detection and Response (CDR), and Cloud Workload Protection Platform (CWPP).
- Sweet Security aims to provide unparalleled detection and response capabilities for cloud environments.
- The platform offers unified visibility, vulnerability management, runtime CSPM, and identity threat detection and response (ITDR).
Read Full Article
11 Likes
Siliconangle
1M
373
Image Credit: Siliconangle
Sweet Security introduces unified Cloud Native Detection and Response platform
- Sweet Security has introduced its unified Cloud Native Detection and Response platform.
- The platform integrates application detection and response, cloud detection and response, and cloud workload protection into one platform.
- The offering aims to address issues such as dwell time and lack of context in resolving cloud incidents.
- In testing, the platform demonstrated an average detection time of 30 seconds and reduced mean time to resolution by 90%.
Read Full Article
22 Likes
Hackernoon
1M
175
Image Credit: Hackernoon
Code Smell 282 - Bad Defaults and How to Fix Them
- Ignoring unknown responses can lead to security risks and error misinterpretation.
- Defaulting to valid states and mismatched authorizations can be problematic.
- Solutions include validating responses, logging unexpected cases, testing with edge scenarios, and designing change-resilient systems.
- Maintaining bijection between internal representation and actual codes is crucial to avoid security holes.
Read Full Article
10 Likes
Medium
1M
80
Image Credit: Medium
Claims for California Victims of Ticketmaster Data Breach
- California residents affected by the Ticketmaster data breach are encouraged to seek legal assistance.
- Potter Handy LLP is committed to safeguarding the rights and privacy of affected individuals.
- The data breach includes personal and payment information, leaving users vulnerable to cybercriminal activity.
- Victims may be entitled to compensation or other remedies based on the severity of their cases.
Read Full Article
4 Likes
VentureBeat
1M
31
Image Credit: VentureBeat
Cohere’s Rerank 3.5 is here, and it’s about to change enterprise search forever
- AI company Cohere released Rerank 3.5, a powerful search model for global businesses.
- Rerank 3.5 can process queries across more than 100 languages, benefiting non-English speaking markets.
- The model improves information retrieval in finance, healthcare, and manufacturing, potentially saving costs and reducing risks.
- Rerank 3.5's enhanced reasoning capabilities and cross-encoding technique make enterprise search more intuitive and context-aware.
Read Full Article
1 Like
TechCrunch
1M
179
Image Credit: TechCrunch
An Apple employee is suing the company over monitoring employee personal devices
- An Apple ad-tech employee has filed a lawsuit against the company over monitoring employee personal devices.
- The lawsuit claims that Apple's policies allow it to monitor workers even when off duty.
- The employee alleges that Apple's policies have harmed his employment prospects.
- The outcome of the lawsuit could potentially impact the trend of bossware in the workplace.
Read Full Article
10 Likes
Tech Radar
1M
287
Image Credit: Tech Radar
AWS launches security tool to help businesses recover from cyberattacks
- AWS has launched a new service called AWS Security Incident Response to help businesses address cybersecurity and recover from cyberattacks.
- The service aims to simplify incident response by automating the triaging of security findings, offering preconfigured notification rules and permission settings, and providing a centralized console for messaging and secure data transfer.
- AWS Security Incident Response is now available in 12 AWS Regions globally and helps businesses prepare for, respond to, and recover from security incidents like data breaches and ransomware attacks.
- Incident response is crucial for businesses to minimize downtime, financial loss, protect their reputation, ensure regulatory compliance, and maintain customer trust.
Read Full Article
17 Likes
TechCrunch
1M
148
Image Credit: TechCrunch
Poland arrests former spy chief in Pegasus spyware probe
- Former head of Poland's internal security agency, Piotr Pogonowski, has been arrested in connection with the probe into the alleged abuse of Pegasus phone spyware.
- Pogonowski was forcibly taken to testify before parliament after ignoring three summons.
- Citizen Lab and Amnesty International found evidence of Pegasus spyware being used against critics of the previous Polish government.
- The Polish senate deemed the use of Pegasus spyware in the country as unlawful.
Read Full Article
8 Likes
Tech Radar
1M
62
Image Credit: Tech Radar
This worrying new phishing attack is going after Microsoft 365 accounts
- A new phishing kit called 'Rockstar 2FA' is targeting Microsoft 365 accounts.
- The kit can bypass multi-factor authentication (MFA) and steal session cookies.
- It has been aggressively promoted on Telegram and dark web forums.
- The kit is available for purchase at $200.
Read Full Article
3 Likes
TechCrunch
1M
17
Image Credit: TechCrunch
Indian online ID verification firm Signzy confirms security incident
- Indian online ID verification firm Signzy has confirmed a security incident.
- The company, which provides identity verification services to financial institutions, was hit by a cyberattack.
- The incident was reported to India's computer emergency response team (CERT-In).
- Signzy's clients, including PayU and ICICI Bank, have stated that they were unaffected by the incident.
Read Full Article
1 Like
TechCrunch
1M
143
Image Credit: TechCrunch
Russian government confirms rare criminal charges against ransomware hacker
- The Russian government has confirmed the indictment of a 32-year-old resident who is accused of creating and launching ransomware attacks.
- The accused hacker, named Mikhail Matveev, is on the FBI's most wanted list and is linked to the Babuk, Hive, and LockBit ransomware gangs.
- Russian authorities have filed criminal charges against Matveev, who planned to use ransomware to encrypt data of commercial organizations and receive a ransom for decryption.
- The arrest of a ransomware operator in Russia is rare, but the country has been accused of providing a safe haven for cybercriminals.
Read Full Article
8 Likes
Medium
1M
247
Image Credit: Medium
The Cybersecurity Frontier: Market Trends and Industry Leaders
- The global cyber security market is forecast to grow to $272bn in 2029, with Europe projected to reach $45.7bn in 2024
- Emerging technologies such as AI, ML and blockchain provide both opportunities and challenges in the cybersecurity space
- Governments and regulatory bodies are imposing stricter regulations, creating prime opportunities for businesses to help organizations navigate and adhere to their compliance and regulatory obligations
- There is currently a global shortage of 4 million cybersecurity professionals, increasing to 85 million workers by 2030
- Investment in cybersecurity has grown at a 24.4% CAGR over the past decade, consistently drawing more investment than many other sectors
- Early-stage cybersecurity investment remained strong at over $600m annually since 2019, highlighting the strength of the cybersecurity investment thesis across Europe
- PE and strategic acquisitions present highly sought-after exit opportunities for founders, while IPOs remain a potential avenue for growth
- Startup Wise Guys, Kima Ventures, Mercia, IQ Capital, Entrée Capital, and TIIN Capital are leading investors at various stages of the cybersecurity market
- Technological and regulatory tailwinds, alongside geopolitical headwinds, continue to drive innovation and resilience in the cybersecurity market, which is essential to our personal and professional lives
Read Full Article
14 Likes
Tech Radar
1M
355
Image Credit: Tech Radar
Pakistan withdraws plans for VPN ban – but usage may still be at risk
- Pakistan's telecom body has decided not to ban VPN usage after facing legal limitations.
- The Pakistan Telecommunication Authority (PTA) initially set a deadline to regulate VPN usage for businesses and freelancers.
- However, the PTA extended the registration deadline and eventually withdrew the VPN ban due to lack of legal grounds.
- While VPN usage remains accessible, there may still be challenges and concerns regarding VPN censorship in Pakistan.
Read Full Article
21 Likes
Pymnts
1M
116
Image Credit: Pymnts
Staying Safe From AI’s Surging Enterprise Threat This Cyber Monday
- Artificial intelligence (AI) is a major concern this Cyber Monday as cybercriminals use AI-powered scams and frauds.
- Companies like Amazon and JPMorgan have witnessed a substantial increase in hacking attempts, thanks to AI tactics.
- AI-driven cyberattacks have become more sophisticated, targeting financial data, intellectual property, and enterprise systems.
- Businesses are urged to prioritize proactive defenses, embrace AI-driven cybersecurity solutions, and automate their AP processes.
Read Full Article
7 Likes
For uninterrupted reading, download the app