A naukri.com initiative
Cyber Security News
Tech Radar
1M
158
Image Credit: Tech Radar
Infrastructure-as-code security issues could put cloud platforms everywhere at risk
- Security researchers have warned about vulnerabilities in Infrastructure-as-code (IaC) and policy-as-code (PaC) tools, which could pose risks to cloud platforms worldwide.
- Certain tools used for managing cloud infrastructure and policies, such as Terraform and Open Policy Agent (OPA), can be hijacked for malicious purposes.
- The report suggests using role-based access control (RBAC), logging actions for detection of suspicious behavior, limiting data and network access, and scanning infrastructure code for issues before deployment.
- Preventing unreviewed code and changes from automatically running in workflows is also recommended.
Read Full Article
9 Likes
Hitconsultant
1M
388
Image Credit: Hitconsultant
Third-Party Cyberattacks: The Healthcare Sector’s Achilles’ Heel
- The healthcare sector’s continual digital revolution requires it to increasingly rely on third-party vendors for everything from electronic health records to telehealth platforms.
- More than one-quarter (28%) of all breaches occurred at healthcare organizations
- Bad actors are using AI and ML to make their attacks more successful; we, on the protective side, need to, as well.
- Implementing a robust vendor risk management program is crucial.
- Your staff is your first line of defense and your biggest risk.
- Playing defense in cybersecurity is a must and investing in technologies like intrusion detection and prevention systems, firewalls, and encryption is crucial for protecting your network and data.
- An active cyberattack is an anxiety-inducing situation, and having a plan in place—that your team has role–played—is a must for moving through the situation quickly and thoughtfully.
- As healthcare organizations continue to rely on external vendors, the opportunity for attack expands.
- By taking a proactive and comprehensive approach to cybersecurity, that includes a commitment to compliance, embracing new technologies like AI and ML, and planning for the inevitable, healthcare organizations can protect their patients, their data, and their reputations.
- Personal medical records and insurance information fetch a high price on the dark web and, when combined with stolen data from other industry sectors, help create a holistic data portrait of individuals.
Read Full Article
23 Likes
Cybersecurity-Insiders
1M
212
Image Credit: Cybersecurity-Insiders
Illegal Movie Piracy Streaming service taken down and malware spread investigation impending
- A major illegal piracy streaming service was dismantled in a joint operation led by Italy’s Postal and Cybersecurity Police Service, in collaboration with Europol, Eurojust, and a specialized cyber team connected to the UK’s National Cyber Security Centre (NCSC).
- The investigation revealed that the service was being exploited to distribute malware, and raids were conducted in multiple countries, leading to the arrest of 96 individuals.
- The dismantled service had over 22 million users and earned approximately $265 million monthly, posing a serious threat to the global movie industry.
- Pirated movie streaming services can compromise devices, monitor activities, steal sensitive information, and deliver malicious payloads.
Read Full Article
12 Likes
TechBullion
1M
90
Image Credit: TechBullion
How AI-Powered vCISO Services Assist SMBs and Startups in Achieving Cybersecurity Governance
- AI-powered vCISO services utilize machine learning and predictive analytics to assess and manage cybersecurity risks.
- These services automate compliance tracking and reporting, helping SMBs and startups adhere to industry regulations.
- AI-driven vCISO services offer enhanced threat detection, automation, scalability, and more effective risk management.
- By leveraging AI algorithms, SMBs and startups can establish robust cybersecurity governance frameworks.
Read Full Article
5 Likes
Siliconangle
1M
262
Image Credit: Siliconangle
The new frontier of data security in the era of generative AI
- Enterprises experimenting with generative AI tools like Microsoft Copilot face data security challenges.
- Privacy and governance controls are crucial for managing unstructured data and sensitive information.
- Advanced data security solutions enhance visibility and control over data access.
- Automation is key to mitigating risk and enabling AI adoption without compromising privacy or compliance.
Read Full Article
15 Likes
Siliconangle
1M
140
Image Credit: Siliconangle
Harnessing the power of cloud and AI to drive digital resilience
- Organizations are embracing cloud and AI to enhance digital resilience and optimize costs.
- Leaders aim to create seamless hybrid environments to integrate enterprise data and enable smarter decision-making.
- Splunk recently announced the availability of running software-as-a-service offerings natively on Azure, enabling customers to conquer hybrid cloud complexity.
- The partnership between Splunk and Microsoft aims to deliver unmatched observability and faster decision-making to address evolving enterprise needs.
Read Full Article
8 Likes
Securityaffairs
1M
366
Image Credit: Securityaffairs
VMware fixed five vulnerabilities in Aria Operations product
- VMware has addressed multiple vulnerabilities in its Aria Operations product.
- The vulnerabilities could lead to privilege escalation and cross-site scripting (XSS) attacks.
- The vulnerabilities include local privilege escalation and stored cross-site scripting vulnerabilities.
- VMware has released security updates to fix these vulnerabilities.
Read Full Article
22 Likes
Medium
1M
40
Image Credit: Medium
The Darknet is not as evil as you may think.
- The Darknet, often associated with illegal activities, can also be used for good purposes.
- While it provides strong protection against surveillance, it is attractive to cyber criminals.
- However, the Darknet is also used by researchers, government agencies, and individuals for legitimate purposes.
- It is important to understand the misconceptions and risks associated with the Darknet.
Read Full Article
2 Likes
Socprime
1M
122
Image Credit: Socprime
Making Use of Building Block Rules in Elastic
- Within the “Advanced Options” of the “About Rule” section of Elastic hides a useful feature that gets little attention.
- This feature makes the rule generate alerts that are ‘hidden’ from the alerts view.
- Create threshold rules to identify interesting behaviors when 5 or more of them occur within a time period.
- Build new terms rules to look for the first time someone performs a 'low' behavior, based on existing threshold rules.
Read Full Article
7 Likes
Tech Radar
1M
379
Image Credit: Tech Radar
Top WordPress anti-spam plugin may actually be putting your site at risk of attack
- A major anti-spam plugin for WordPress carried critical vulnerabilities.
- Flaws allowed threat actors to install malicious plugins and execute arbitrary code remotely.
- The vulnerabilities have been patched, and users are advised to update their sites.
- The plugin, called 'Spam protection, Anti-Spam, and Firewall', is installed on over 200,000 websites.
Read Full Article
22 Likes
Dev
1M
402
Image Credit: Dev
How To Integrate Direct Card Payment on Your Website Using Flutterwave
- Flutterwave facilitates various payment methods, including card charges, bank transfers, and mobile money.
- This makes collecting payments seamless, ensuring a smooth customer experience.
- In this tutorial, you’ll learn how to integrate Flutterwave’s direct card payment into your web application.
- You’ll also learn about the available card options and understand their differences.
- Before delving into integration, you should have the following: Experience with building server-side apps with Nodejs. Experience with HTML, CSS, and Javascript.
- Flutterwave offers a secure platform for handling card payments, fully compliant with Payment Card Industry Data Security Standard (PCI DSS).
- The basic steps to follow when integrating Flutterwave direct card charges includes initiating the charge, completing the charge, and validating the charge.
- Flutterwave's testing page can be used to get card details to mock the multiple card scenarios.
- With this integration, you’ve added a key feature that meets the demands of today’s economy, setting your business up for growth and customer satisfaction.
- You can begin accepting seamless card payments from your customers.
Read Full Article
24 Likes
Dev
1M
131
Image Credit: Dev
The Essential Guide to Transport Layer Security (TLS): Protecting Your Online Communications 🔒🌐
- TLS is a cryptographic protocol that ensures secure communication over the internet.
- TLS works through a handshake process, data encryption, data integrity, and authentication.
- Benefits of using TLS include privacy, data integrity, and authentication.
- TLS is essential for protecting against cyber threats, building trust, and complying with regulations.
Read Full Article
7 Likes
Medium
1M
448
_The Importance of Cyber Security in Today's Digital Age_
- Cyber attacks are on the rise, costing the global economy over $6 trillion annually.
- Consequences of cyber attacks include identity theft, financial loss, and reputational damage.
- Prioritizing cybersecurity is crucial to protect sensitive data, maintain public trust, and ensure operations continuity.
- Best practices for cybersecurity include using strong passwords, keeping software updated, and being cautious with unknown sources.
Read Full Article
26 Likes
Socprime
1M
361
Image Credit: Socprime
Fields Aren’t Always Faster, Keyword Searches to Speed Up Splunk
- Using tokens or distinct keywords in index based searches can speed up searches in Splunk.
- Datamodels are generally the best option for faster searches in Splunk.
- Tokenizing raw logs and specifying fields in searches can improve search performance.
- Long, distinct keywords are often effective in speeding up search operations in Splunk.
Read Full Article
21 Likes
TechJuice
1M
262
Image Credit: TechJuice
PTA Issues Advisory on Critical WordPress Plugin Vulnerability
- The Pakistan Telecommunication Authority (PTA) has issued a Cyber Security Advisory regarding a critical vulnerability in the WP Tools plugin for WordPress, designated as CVE-2022-43453.
- The vulnerability allows remote authenticated attackers to bypass security protocols through an authorization lapse.
- The affected version is 3.41, and the PTA urges WordPress site administrators and users to update to the latest version to mitigate the threat.
- The PTA emphasizes the importance of maintaining up-to-date systems and software, applying security patches, and reporting cybersecurity incidents for a swift response.
Read Full Article
15 Likes
For uninterrupted reading, download the app