A naukri.com initiative
Cyber Security News
Securityaffairs
7d
262
Image Credit: Securityaffairs
U.S. CISA adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalog
- U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalog.
- CISA added Sitecore CMS and XP deserialization vulnerabilities (CVE-2019-9875 and CVE-2019-9874) and GitHub Action embedded malicious code vulnerability (CVE-2025-30154).
- CVE-2019-9875 allows authenticated attackers to execute arbitrary code in Sitecore CMS and Experience Platform.
- CISA orders federal agencies to fix the vulnerabilities by specified dates.
Read Full Article
15 Likes
Mcafee
7d
41
Image Credit: Mcafee
How to Spot Phishing Emails and Scams
- Phishing emails continue to target millions of inboxes daily with the intention of stealing personal information or money.
- These emails often appear to be from trusted companies like banks or service providers but contain deceptive links or malware.
- Scammers utilize bait-and-hook tactics in phishing emails to steal sensitive information or install malicious software.
- In 2022, over 300,000 victims reported phishing attacks to the FBI in the U.S., with worldwide attempts increasing by 61%.
- Spear phishing targets specific individuals, often with authority over financial matters, resulting in substantial financial losses.
- Phishing emails may create a sense of urgency, posing as notifications from companies like PayPal or credit card providers.
- Advanced phishing attacks mimic genuine messages, making it harder to differentiate between legitimate and fraudulent emails.
- Scammers employ various tactics like fear, urgency, and unconventional payment requests to deceive recipients.
- Key indicators of phishing emails include mismatched addresses, urgent demands for action, and payment through untraceable methods.
- To stay safe, verify email sources, refrain from downloading suspicious attachments, and hover over links to verify URLs before clicking.
- Using online protection software can help identify and block phishing attempts, as well as remove personal information from risky data broker sites.
Read Full Article
2 Likes
Global Fintech Series
1w
8
Image Credit: Global Fintech Series
Scam Survey: UK Consumers Lack Confidence in Real-Time Payments Security
- UK consumers have concerns about the security of real-time payments (RTP).
- 23% of UK consumers are unsure if RTP processes have enough security checks.
- UK usage of RTP is lower than the global average.
- Increased education about RTP and improved security measures can lead to wider adoption.
Read Full Article
Like
The Verge
1w
108
Image Credit: The Verge
Vivaldi bundles Proton VPN into its web browser
- Vivaldi has integrated the free version of Proton VPN directly into its browser, making it easier for users to explore the web privately.
- Currently, the feature is only available on the desktop version of Vivaldi, and users can access the free version of Proton VPN by logging into a Vivaldi account.
- The free version of Proton VPN allows users to connect to servers in five randomly selected countries, while the paid version offers faster VPN speeds and the ability to choose servers across more than 110 countries.
- Vivaldi and Proton are both European companies, and the partnership offers an alternative to Silicon Valley's dominance and China's state-driven oversight.
Read Full Article
6 Likes
Tech Radar
1w
308
Image Credit: Tech Radar
NHS IT supplier hit with major fine following ransomware attack
- Software firm Advanced Computer Group Ltd has been fined £3.07 million by the ICO following a ransomware attack in which NHS data was stolen and systems were encrypted.
- This is the first fine from the ICO for a data processor, highlighting the risks of not having robust security measures in place.
- 79,404 people's personal information was put at risk, including patient phone numbers, medical records, and access details for the homes of 890 people receiving care at home.
- The ICO found that Advanced Computer Group Ltd lacked sufficient security measures, including comprehensive vulnerability scanning and adequate patch management.
Read Full Article
18 Likes
Medium
1w
400
Image Credit: Medium
Building a Bulletproof Android App: Best Security Practices You Must Follow
- Use Secure Authentication and Authorization to protect user data.
- Encrypt Data at All Levels to secure sensitive information.
- Secure API Communication using HTTPS, JWT, and request validation.
- Secure Code by obfuscating, avoiding sensitive information in source code, and regular code scanning.
Read Full Article
24 Likes
Siliconangle
1w
34
Image Credit: Siliconangle
Straiker launches with $21 million in funding to secure enterprise AI applications
- Straiker, an artificial intelligence-native security company, has raised $21 million in funding.
- The company aims to secure enterprise AI applications by addressing critical security and safety risks.
- Straiker's solutions include automated assessment, runtime safety, and security guardrails for continuous analysis and blocking.
- Two AI-native models, Ascend AI and Defend AI, have been introduced to provide in-depth attack simulation and protection for AI applications and agents.
Read Full Article
1 Like
Analyticsindiamag
1w
338
Image Credit: Analyticsindiamag
Beware, AI Coding Can Be a Security Nightmare
- AI coding tools are increasingly being utilized by developers, with some relying heavily on them for code generation.
- One quarter of YC founders admit that a significant portion of their codebase is AI-generated.
- While AI-assisted coding can be convenient, it also introduces security concerns, especially in terms of vulnerabilities.
- The integration of AI in coding necessitates a strong understanding of security practices to mitigate risks.
- Users deploying AI tools like Cursor for coding have faced security challenges and attempts at exploitation.
- AI-generated code is highlighted to contain security holes and can be susceptible to hacking attempts.
- Developers are cautioned to assess security implications when utilizing AI coding assistants for production environments.
- The growing trend of 'vibe coding' with AI poses risks such as security vulnerabilities and compliance issues.
- Research reports emphasize the importance of vulnerability assessment in AI-generated code to prevent security flaws.
- Certain features of AI code assistants like Cursor have been flagged for potential security risks, including leaked company secrets and unauthorized access.
Read Full Article
20 Likes
Cybersafe
1w
271
Image Credit: Cybersafe
OpenAI raises maximum Bug Bounty to $100,000 for Critical Vulnerabilities
- OpenAI has raised its bug bounty reward to $100,000 for critical security vulnerabilities, increasing from the previous cap of $20,000.
- The move highlights OpenAI's focus on cybersecurity as its AI models advance towards artificial general intelligence (AGI) and its user base exceeds 400 million weekly active users.
- The enhanced Security Bug Bounty Program aims to identify and address sophisticated security flaws that could pose risks to OpenAI's systems.
- OpenAI plans to introduce additional promotional periods with bonus incentives and is also offering microgrants in API credits to encourage innovation in cybersecurity.
Read Full Article
16 Likes
Securityaffairs
1w
45
Image Credit: Securityaffairs
Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!)
- Arkana Security, a new ransomware group, claims to have breached the telecommunications provider WideOpenWest (WOW!).
- Arkana Security group claims to have stolen data from two databases of WideOpenWest, containing a total of 2.6 million accounts.
- The group threatens to expose and sell the stolen customer data if the requested fee is not paid.
- WOW! has not yet confirmed the alleged data breach.
Read Full Article
2 Likes
TechCrunch
1w
171
Image Credit: TechCrunch
NHS vendor Advanced to pay £3M fine following 2022 ransomware attack
- NHS vendor Advanced has been fined £3 million ($3.8 million) for not implementing basic security measures prior to a ransomware attack in 2022.
- The fine is half of what the Information Commissioner's Office (ICO) initially sought, which was over £6 million.
- The ICO found that Advanced broke data protection law by not fully implementing multi-factor authentication, allowing hackers to breach the system and steal personal information of thousands of people.
- The ransomware attack on Advanced caused widespread outages across NHS systems.
Read Full Article
10 Likes
Cybersecurity-Insiders
1w
204
Image Credit: Cybersecurity-Insiders
The Four Fundamentals of Cybersecurity to Build a Resilient SOC
- To build a resilient Security Operations Center (SOC), security teams need to evolve in the face of increased security demands and complex IT environments.
- Key areas often overlooked include reclaiming the home field advantage by creating a hostile environment for adversaries and enhancing basic configurations.
- Prioritizing data hygiene is crucial for understanding assets, identifying visibility gaps, and ensuring accurate detection in investigations.
- Investing in cybersecurity education is essential for keeping up with evolving technologies and defense strategies against attackers.
- Breaking down internal department silos is vital for building relationships with external teams and business units for faster incident response.
- Mastering fundamentals like data hygiene and internal collaboration is key to detecting and mitigating cyber threats effectively.
- The author, Neil Desai, with 25 years of cybersecurity experience, emphasizes the importance of defending organizations against evolving threats.
- Neil's expertise ranges from securing financial institutions to guiding organizations in building Security Operations Centers (SOCs) and SIEM systems.
- He highlights the significance of prioritizing security strategy fundamentals and enhancing security postures to combat cyber threats.
Read Full Article
12 Likes
Pymnts
1w
275
Image Credit: Pymnts
64% of Credit Unions Plan to Offer Biometrics Authentication
- 64% of credit unions plan to offer biometric authentication or digital identity in the next three years.
- Higher digital adoption and meeting member expectations offer advantages to credit unions, such as low churn.
- Security and self-service are top priorities for credit unions, with biometric authentication being a key solution.
- Consumer satisfaction with credit unions' handling of fraud situations has increased.
Read Full Article
16 Likes
Medium
1w
267
Image Credit: Medium
How Can Generative AI Be Used in Cybersecurity?
- Generative AI is being used in cybersecurity to detect and combat evolving cyber threats.
- AI-powered solutions analyze email patterns and language structures to detect phishing attacks.
- Generative AI can predict future threats by analyzing past cyber incidents.
- AI helps automate security processes, streamline incident response, and enhance fraud prevention.
Read Full Article
16 Likes
VoIP
1w
4
Image Credit: VoIP
Bell Canada Unveils Timely SECaaS Amid Rising Cyber Threats
- Bell Canada is launching a Security-as-a-Service (SECaaS) offering in response to rising cyber threats.
- The SECaaS promises real-time threat response, scalability, and compliance with local data regulations.
- The service is anchored by the Bell Business Enterprise Cyber Intelligence Centre in Canada.
- The demand for SECaaS is growing as global cyber threats intensify and companies seek flexible security solutions.
Read Full Article
Like
For uninterrupted reading, download the app