A naukri.com initiative
Cyber Security News
Securityaffairs
1M
216
Image Credit: Securityaffairs
Feds seized $23 million in crypto stolen using keys from LastPass breaches
- U.S. authorities seized $23M in crypto linked to a $150M Ripple wallet theft, experts believe the incident is linked to the 2022 LastPass breach.
- Authorities seized $24M in frozen assets before they could be withdrawn, aligning with prior findings that cybercriminals cracked master passwords from LastPass to carry out major heists.
- Law enforcement traced $23,604,815.09 of stolen crypto between June 2024 and February 2025 to multiple exchanges, including OKX, Kraken, WhiteBIT, AscendEX, FixedFloat, SwapSpace, and CoinRabbit.
- Investigators found no evidence of device hacking, supporting the hypothesis that attackers decrypted stolen password manager data to access the victim’s crypto wallet.
Read Full Article
13 Likes
Pymnts
1M
329
Image Credit: Pymnts
80% of Pay-by-Bank Users Report Better Data Security and Lower Cart Abandonment
- Pay by bank is gaining traction in consumer-facing sectors, providing advantages such as reducing cart abandonment and improving data security for customers.
- 80% of businesses using pay by bank reported enhanced data security as a benefit.
- Consumer-facing companies using pay by bank also experienced lower cart abandonment rates.
- Cost concerns remain a barrier, but companies using traditional card-based payment methods could save significant costs by switching to pay by bank.
Read Full Article
19 Likes
Lastwatchdog
1M
9
GUEST ESSAY: Four essential strategies to bolster cyber resilience in critical infrastructure
- In 2023, cybercrime complaints to the FBI reached nearly 900,000, with losses totaling $12.5 billion.
- Attacks on critical infrastructure organizations increased by 30% in 2023.
- To bolster cyber resilience, organizations should prioritize cross-functional collaboration, embracing AI and automation, adopting a security-first mindset, and continuously monitoring and learning.
- By implementing these strategies, critical infrastructure organizations can better protect themselves against evolving cyber threats and minimize damages.
Read Full Article
Like
Fintechnews
1M
392
Image Credit: Fintechnews
Endowus Strengthens Security with Twilio Amid Rising Fraud Concerns
- Endowus has partnered with Twilio to enhance platform security and client trust.
- The collaboration addresses rising concerns about fraud and phishing scams in Singapore.
- Endowus has implemented Twilio Verify for SMS and WhatsApp one-time password verification.
- The implementation has resulted in a high verification conversion rate and accurate fraud detection.
Read Full Article
23 Likes
Insider
1M
57.5k
Image Credit: Insider
The résumé a software engineer used to land a cybersecurity job at Microsoft
- Ankit Masrani, a software engineer, shared the résumé that helped him land a job at Microsoft in the cybersecurity field.
- Masrani studied IT, obtained a Master's in computer science, and worked at AWS before joining Microsoft.
- He transitioned to cybersecurity by focusing on data experience, security knowledge, and building services for a security platform.
- According to Masrani, domain knowledge of data governance, security products, and familiarity with regulations is crucial in the cybersecurity sector.
Read Full Article
43 Likes
Cybersecurity-Insiders
1M
40
Image Credit: Cybersecurity-Insiders
Understanding Operational Technology Cyber Attacks: The Emerging Threat to Critical Infrastructure
- The Internet of Things (IoT) and digital technologies have increased the threat of cyber attacks on Operational Technology (OT), impacting critical infrastructure sectors like energy and transportation.
- OT systems manage physical processes critical for societal function and include industrial control systems, SCADA systems, and specialized machinery.
- As industrial systems become more interconnected, cyber attacks on OT have escalated, posing risks of equipment damage and service disruptions.
- Ransomware attacks, Advanced Persistent Threats (APT), DoS/DDoS attacks, Man-in-the-Middle attacks, and physical sabotage are common types of OT cyber attacks.
- OT systems lack robust security measures like firewalls, encryption, and access controls, making them vulnerable to cyber threats.
- Network segmentation, regular patching, multi-factor authentication, employee training, intrusion detection systems, and incident response plans are key strategies to protect OT systems.
- OT cyber attacks can have severe consequences, such as contaminating water supplies or disrupting power grids, emphasizing the importance of OT cybersecurity.
- Securing OT systems is crucial to maintaining public safety, health, and national security, requiring proactive measures and vigilance against cyber threats.
- Industries must prioritize OT cybersecurity by implementing defenses, training personnel, and developing response plans to mitigate risks from cyber attacks.
- By safeguarding critical infrastructure from cyber threats, businesses can ensure the resilience and security of essential services against future attacks.
Read Full Article
2 Likes
Securityaffairs
1M
1k
Image Credit: Securityaffairs
Japanese telecom giant NTT suffered a data breach that impacted 18,000 companies
- Japanese telecom giant NTT suffered a data breach that exposed information of nearly 18,000 corporate customers.
- The breach was detected in NTT's 'Order Information Distribution System' and access was immediately restricted.
- Unauthorized access was discovered on another device during the investigation.
- NTT will notify the affected customers and has taken additional security measures.
Read Full Article
28 Likes
Cybersecurity-Insiders
1M
76
Image Credit: Cybersecurity-Insiders
Why software upgrades on Smart Phones matters in Cybersecurity POV
- Smartphones have become essential tools for various tasks, but software support is often overlooked, leaving devices vulnerable to cyber threats.
- Long-term software support is crucial for smartphone security, with two years of upgrades and three years of patches being ideal.
- Google Pixel stands out for its long-term support with timely software and security updates, making it a reliable choice.
- Samsung, especially with the Galaxy S and A series, offers extended support, positioning itself as a leader in Android long-term support.
- Other manufacturers like Honor, Motorola, Nothing, and OnePlus are also improving their software support.
- Nokia has announced plans to join the long-term upgrade trend, providing extended software and security updates.
- While younger generations may upgrade frequently, older users value long-term support for reliability and functionality.
- Investing in phone protection is essential for maintaining the device's hardware integrity and longevity.
- Choosing a smartphone with extended software and security updates is a wise investment, ensuring security and functionality for years to come.
- Long-term support from manufacturers like Google Pixel and Samsung Galaxy enhances the value and reliability of smartphones.
Read Full Article
4 Likes
Medium
1M
234
Image Credit: Medium
Federated Learning: Making Health AI Not Just Powerful but Ethical
- Federated learning is a safer way to train AI without pooling all the data in one vulnerable spot.
- Researchers can refine AI models locally and send back only learned insights, not raw data.
- Federated learning can help address AI's blind spots and create more inclusive models in healthcare.
- Investing in local expertise, building secure infrastructure, and shaping policies can lead to resilient and ethical AI in healthcare.
Read Full Article
14 Likes
Gritdaily
1M
862
Image Credit: Gritdaily
Meet the Platform That’s Making Enterprise-Level Security Available to Everyone
- The cybersecurity company Snaarp is launching an all-in-one security platform to provide enterprise-level protection to businesses of all sizes.
- The platform offers advanced threat detection, device management, and productivity tools in a user-friendly mobile application.
- It aims to democratize cybersecurity by empowering organizations to safeguard their digital assets with the same level of protection previously reserved for large enterprises.
- The platform addresses the critical need for comprehensive and accessible security measures, particularly for small and medium-sized enterprises.
Read Full Article
21 Likes
Medium
1M
58
Image Credit: Medium
AI the Guardian of Truth: Filtering Misinformation Without Censorship
- Artificial intelligence (AI) can be an effective and balanced solution for filtering misinformation without censorship.
- AI can act as a fact-checking assistant, providing users with context, sources, and alternative viewpoints to challenge misinformation.
- Intelligent filtering through AI ensures that misinformation is challenged with evidence, promoting truth without stifling free speech.
- By focusing on context, visibility adjustments, user choice, and transparency, AI can restore trust in online information while preserving open discourse.
Read Full Article
3 Likes
Dev
1M
329
Image Credit: Dev
How to Check if Email is Spam Online: Tools and Best Practices
- Email remains a popular vector for spam, scams, and phishing, with nearly 45% of email traffic being unwanted spam.
- Sophisticated spam emails pose real threats, making access to reliable email spam checkers essential for digital safety.
- Traditional spam filters like those in Gmail and Outlook may miss evolving spam tactics and legitimate emails.
- Introducing a Gmail-style spam detector tool that uses AI for in-depth spam analysis.
- Key features include comprehensive analysis, AI-powered detection, detailed breakdowns, and visual risk assessments.
- Using the spam detector tool involves copying and pasting details from suspicious emails for analysis.
- Situations when checking emails for spam is valuable include requests for urgent action or unexpected links.
- Additional methods to check email spam online include examining sender addresses and hovering over links.
- Protection tips include keeping software updated, being skeptical of unsolicited messages, and reporting spam.
- Access to a reliable email spam checker and following security best practices are vital for mitigating email-based threats.
Read Full Article
19 Likes
Dev
1M
216
Image Credit: Dev
Empowering Developers to Achieve Microservices Observability on Kubernetes with Tracestore, OPA, Flagger & Custom Metrics
- Achieving comprehensive observability in Kubernetes environments is essential for ensuring application performance, security, and stability.
- Tracestore provides insights into distributed tracing, aiding in root cause analysis and bottleneck identification.
- OPA enforces dynamic policy controls, ensuring security and consistent access management in Kubernetes.
- Flagger automates progressive delivery, reducing deployment risks through controlled traffic shifting and rollbacks.
- Custom Metrics offer actionable insights by tracking application-specific behaviors aligned with business objectives.
- Integrating Tracestore, OPA, Flagger, and Custom Metrics enhances visibility and control in microservices environments.
- Best practices include efficient trace propagation, thoughtful Rego policy design, strategic Flagger configurations, and well-defined custom metrics.
- These observability solutions help developers move from reactive troubleshooting to proactive optimization for improved reliability and user experience.
- Key tools like TraceStore, OPA, Flagger, and Custom Metrics empower developers to address challenges in dynamic Kubernetes environments and enhance system visibility, security, and stability.
- By leveraging these tools and best practices, developers can optimize their Kubernetes workloads, meet performance demands, and align monitoring efforts with business goals.
- Adopting a comprehensive observability strategy fosters a culture of reliability, scalability, and proactive optimization in microservices architectures.
Read Full Article
13 Likes
Dev
1M
241
Image Credit: Dev
AWS GuardDuty vs. Inspector vs. Shield, What’s the Difference?
- AWS GuardDuty is a threat detection service that continuously monitors your AWS environment for suspicious activity, using machine learning and analyzing various logs.
- AWS Inspector is a vulnerability scanner that automatically assesses resources, identifies security issues, and provides recommendations for fixing vulnerabilities.
- AWS Shield protects applications from DDoS attacks, with Shield Advanced offering enhanced protection and support.
- GuardDuty, Inspector, and Shield can work together to create a comprehensive security strategy, detecting threats in real time, identifying vulnerabilities, and protecting against DDoS attacks.
Read Full Article
14 Likes
Medium
1M
141
Image Credit: Medium
Generative AI in Every Second Company: Real Benefits for Cyber Identity
- Generative AI in Every Second Company: Real Benefits for Cyber Identity
- Generative AI takes traditional identity verification methods to the next level by enabling more sophisticated, adaptive authentication mechanisms.
- AI models can proactively detect and prevent fraudulent activities by analyzing anomalies in user behavior, login patterns, and transaction histories.
- Generative AI strengthens digital security through continuous identity verification, deepfake detection, and automating compliance monitoring.
Read Full Article
8 Likes
For uninterrupted reading, download the app