A naukri.com initiative
Cyber Security News
Neuways
1M
218
Image Credit: Neuways
Understanding Drive-by Download Attacks
- Drive-by download attacks are becoming increasingly popular among cybercriminals.
- These attacks trick users into unknowingly downloading malicious software.
- Attackers compromise websites, links, or digital ads to deploy malware.
- Prevention measures include patching, strong browser security, and security awareness training.
Read Full Article
13 Likes
Tech Radar
1M
309
Image Credit: Tech Radar
The majority of QR codes are spam, new survey claims
- New research claims many QR code emails are spam, with 60% of them being spam.
- Anti-spam filters often fail to detect QR codes in emails, allowing them to bypass detection.
- QR code phishing, known as 'Quishing,' is a growing threat that tricks users into entering personal or payment information on fake websites.
- Users are advised to exercise caution when scanning QR codes and use QC decoders to inspect the links.
Read Full Article
18 Likes
Cybersecurity-Insiders
1M
186
Image Credit: Cybersecurity-Insiders
Halo Security Launches Slack Integration for Real-Time Alerts on New Assets and Vulnerabilities
- Halo Security has launched a Slack app for real-time alerts on new assets and vulnerabilities.
- The integration allows customers to receive security notifications within their Slack workflows.
- Halo Security's platform offers external attack surface management, including asset discovery and penetration testing.
- Customers can activate the Slack app directly from their accounts and new users can sign up for a 7-day free trial.
Read Full Article
11 Likes
TechBullion
1M
113
Image Credit: TechBullion
Meet Virtuoso Holding – The Brains Behind the mSpy Parental Control
- Virtuoso Holding is the company responsible for developing and success of the mSpy parental control app.
- Led by CEO Viktoriia Adamchuk, Virtuoso Holding has become a leader in providing innovative tools for digital parenting.
- mSpy offers a wide range of features to monitor and control children's online and offline activities.
- Virtuoso Holding plans to invest in research and development, expand partnerships, and prioritize customer feedback to ensure continued growth and success.
Read Full Article
6 Likes
Tech Radar
1M
391
Image Credit: Tech Radar
Huge US healthcare payment network finally restored after ransomware attack
- Change Healthcare has confirmed its clearinghouse services have finally been restored after the organization suffered a massive ransomware attack in February 2024.
- Recovery from the Change Healthcare cyberattack has been grueling, costing close to $2 billion so far, with some systems still yet to be restored nearly nine months on.
- The attack caused unprecedented levels of disruption to billing and payments providers across the US, and threatened the viability of hospitals across the country.
- Reports claim the ransom never made it to the affiliates responsible for the attack, and was taken in entirety by the ransomware operators, who were only meant to receive a portion.
Read Full Article
23 Likes
Secureerpinc
1M
91
Image Credit: Secureerpinc
Cloud Architecture Exposed by Cybersecurity Skills Shortage
- Many businesses are discovering their cloud architecture security measures aren’t as robust as they thought.
- Only 4% of companies have the framework to mitigate public cloud attacks.
- Common weaknesses in cloud architecture include misconfigurations, lack of expertise in AI adoption, insecure interfaces/APIs, and employee training gaps.
- The cybersecurity skills shortage is a significant factor contributing to vulnerable cloud architectures.
Read Full Article
5 Likes
Pymnts
1M
113
Image Credit: Pymnts
PayPal Resolves 2-Hour Global Outage Affecting Multiple Products
- PayPal experienced a global outage that affected multiple products for about two hours on November 21.
- The incident lasted from 10:53 UTC to 12:59 UTC and impacted account withdrawals, express checkout, cryptocurrency, the receive money function of Xoom, and several functions of Venmo.
- PayPal posted its initial notification at 12:15 UTC and resolved the issue at 12:59 UTC on the same day.
- During the outage, Downdetector reported a surge in PayPal problem reports, peaking at 8,735 reports.
Read Full Article
6 Likes
Cybersecurity-Insiders
1M
4
Image Credit: Cybersecurity-Insiders
Over 1 million dating records of UK and USA army personnel exposed online
- The dating records of over 1.1 million UK and USA army personnel have been exposed online.
- The leak includes sensitive personal details such as photographs, Social Security numbers, mailing addresses, and military-related information.
- Although real photos were not typically uploaded, the risks of identity theft and impersonation still exist.
- Forces Penpals has restricted access to the database and hired forensic experts to investigate and strengthen security measures.
Read Full Article
Like
Tech Radar
1M
31
Image Credit: Tech Radar
Ubuntu Linux has a worrying security flaw that may have gone unseen for a decade
- Ubuntu Linux has been carrying multiple high-severity vulnerabilities for a decade
- Flaws found in the OS utility feature called 'needrestart'
- Vulnerabilities allow malicious actors to escalate privileges and run arbitrary code
- A patch is available and users are urged to apply it
Read Full Article
1 Like
Mcafee
1M
36
The Top Data Breaches of 2024
- Billions of records on millions of people have been exposed at an estimated cost of nearly $10 trillion dollars to people and businesses around the world.
- Here are five of the most noteworthy breaches this year: The National Public Data (NPD) breach, the Ticketmaster breach, a breach at an insurance and financial tech vendor Infosys McCamish Systems, a breach at debt collector Financial Business and Consumer Solutions, and the AT&T breach.
- Hackers stole nearly three billion records from National Public Data.
- The Ticketmaster hack resulted in over a half-billion people having their personal information compromised. Live Nation Entertainment, which owns Ticketmaster, first announced the breach in May 2024. ShinyHunters claimed responsibility for the breach.
- The breach at insurance and financial tech vendor Infosys McCamish Systems affected millions of people in 2024 and data was subject to unauthorized access and acquisition.
- A breach at a U.S. debt collector, Financial Business and Consumer Solutions, might have compromised the records of over four million people. The scope of the breach increased in several updated filings.
- Hackers stole the call and text logs of nearly all AT&T customers, estimated at nearly 100 million people.
- To protect yourself from data breaches, we suggest the following: Check your credit, consider a security freeze, and get ID theft protection; monitor your identity and transactions; keep an eye out for phishing attacks; and update your passwords and use two-factor authentication.
Read Full Article
2 Likes
TechCrunch
1M
173
Image Credit: TechCrunch
Wiz acquires Dazz for $450M to expand its cybersecurity platform
- Wiz is acquiring Dazz for $450m to expand its product reach in cloud security, particularly with developers.
- The deal is valued at $450 million in a mix of cash and shares.
- Dazz's remediation and posture management services are key services in the cybersecurity market that Wiz was not covering as well as it wanted to.
- Dazz will continue to operate as a separate entity while it’s integrated into the larger Wiz stack.
- Wiz and Dazz already had a close relationship going into this deal, with Dazz CEO Merav Bahat having worked closely with Wiz CEO Assaf Rappaport at Microsoft.
- The acquisition is one of several for Wiz, which earlier this year filled its coffers with $1bn expressly for the purpose of M&A.
- Wiz is spinning the acquisition as a way to give developers more help to better secure their systems.
- Wiz says it is now at $500m in annual recurring revenues and counts over 45% of the Fortune 100 as customers.
- Dazz says its ARR was in the tens of millions of dollars and it is currently growing at 500% on a customer base of about 100 organizations.
- Wiz is aiming for $1bn in ARR in the next year.
Read Full Article
10 Likes
Tech Radar
1M
163
Image Credit: Tech Radar
ExpressVPN beefs up its protection with new Credit Scanner tool
- ExpressVPN has launched a new credit monitoring tool called Credit Scanner.
- Credit Scanner provides real-time monitoring to protect your identity and finances online.
- It offers regular updates on credit score, payment history, and account balance, allowing users to track changes and identify potential identity theft.
- ExpressVPN's Credit Scanner is available for free to users in the US along with their subscription plans.
Read Full Article
9 Likes
Global Fintech Series
1M
122
Image Credit: Global Fintech Series
Stackup Unveils Enterprise Platform to Transform How Businesses Operate on Blockchain
- Silicon Beach startup, Stackup, has announced its evolution into an enterprise-grade platform that transforms how businesses operate on blockchain.
- The platform eliminates manual overhead and security risks, replacing clunky hardware wallets and fragmented tools with seamless financial operations.
- Stackup's platform introduces industry-firsts such as true non-custodial operations, cross-chain permissions and workflows, automated transaction management, and real-time financial visibility across all blockchain operations.
- The solution leverages advanced smart contract technology to eliminate the need for hardware wallets and complex key management systems.
Read Full Article
7 Likes
TechCrunch
1M
191
Image Credit: TechCrunch
Palo Alto Networks warns hackers are breaking into its customers’ firewalls — again
- Hackers have exploited two zero-day vulnerabilities in Palo Alto Networks' widely used software, compromising potentially thousands of organizations.
- The vulnerabilities allow attackers to gain administrator privileges and perform actions with higher root privileges on compromised firewalls.
- Hackers have already compromised over 2,000 affected firewalls, with the United States being the most affected country.
- Palo Alto Networks has released patches for the vulnerabilities and urged organizations to patch their systems promptly.
Read Full Article
11 Likes
Tech Radar
1M
204
Image Credit: Tech Radar
Finance giant Finastra warns clients of potential data breach
- Finastra, a fintech software firm, warns customers of a potential data breach.
- The breach was the result of stolen credentials, not an exploited vulnerability.
- The attack originated on Finastra's Secure File Transfer Platform (SFTP).
- The company assures that no customer files were tampered with or accessed.
Read Full Article
12 Likes
For uninterrupted reading, download the app