A naukri.com initiative
Cyber Security News
Dev
13h
253
Image Credit: Dev
Interview With Author Ahmed Awad ( NullC0d3 )
- Ahmed Awad, also known as NullC0d3, is a veteran cybersecurity threat intelligence analyst with over 20 years of experience. He has written two books in the Hacker Hunter series focusing on real-world cybersecurity strategies and insights.
- His latest book, 'Inside the Hacker Hunter’s Toolkit,' was inspired by the need for practical guidance in cybersecurity beyond certifications. Ahmed writes authentically after completing real-world cases and draws inspiration from authors like Kevin Mitnick and Clifford Stoll.
- He is currently working on his third book, 'Inside the Hacker Hunter’s Ransomware Playbook,' which aims to delve into ransomware operations and how defenders can counter them effectively.
- Ahmed Awad leverages platforms like LinkedIn, Medium, TikTok, and Facebook Groups for book promotion. His advice to new authors includes not waiting for perfection and ensuring their work provides value to readers.
Read Full Article
15 Likes
Dev
14h
134
Image Credit: Dev
What is Dangling DNS? (And How It Can Lead to Domain Takeovers)
- Dangling DNS occurs when a DNS record still points to a cloud service that has been deleted, leaving the record 'dangling.'
- Attackers can exploit dangling DNS by claiming the deleted resource name and hosting malicious content under the subdomain, leading to brand impersonation, data theft, and phishing.
- An example scenario is deleting an Azure App Service but forgetting to remove the CNAME record, allowing an attacker to claim the resource name and redirect traffic.
- To prevent dangling DNS, it is crucial to clean up DNS records when deleting cloud services, audit DNS regularly, use monitoring tools, and enable ownership validation on platforms that support it.
Read Full Article
8 Likes
Medium
14h
87
Image Credit: Medium
Soul Cyber Tech Brief
- Bitchat is a messaging app that operates without servers, the internet, or phone numbers, using Bluetooth technology to create a decentralized network for private and encrypted communication.
- Devices running Bitchat form a mesh network where messages are relayed through nearby devices, enabling communication even in areas with poor internet connectivity or censorship.
- Key features include peer discovery through Bluetooth, self-destructing encrypted messages, and the ability to communicate when some devices are offline.
- Bitchat's use of decentralized mesh networks, Bluetooth Low Energy, encryption, and privacy features offers a resilient and secure communication option in scenarios like protests, disaster zones, or remote areas.
Read Full Article
5 Likes
Medium
16h
330
Mullvad VPN vs ProtonVPN: Who’s the Real Champion of Digital Anonymity
- Mullvad VPN and ProtonVPN are trusted for digital anonymity due to open-source transparency and third-party audits.
- Mullvad prioritizes anonymity, operating out of Sweden without mandatory data retention laws for VPNs.
- ProtonVPN balances privacy with account-based convenience and is more polished, offering better performance and global streaming options.
- Mullvad is simpler, cheaper, more anonymous by design, control-heavy, and maintains a smaller fleet of servers with a focus on privacy over streaming perks.
Read Full Article
19 Likes
Medium
17h
183
Image Credit: Medium
When Kindness Leads, Hearts Heal – A World We All Deserve
- Kindness is a powerful force that often goes unnoticed in today's fast-paced world focused on innovation and wealth.
- It is a silent yet impactful leader that can touch hearts and bring warmth to a future that needs kindness.
- Kindness is portrayed as courage in its gentlest form, capable of saving someone's day, offering support, and listening without judgment.
- The truest achievement lies in choosing to be human and fostering kindness in a world that often prioritizes speed and profits.
Read Full Article
11 Likes
Dev
17h
235
Image Credit: Dev
The Security Checklist I Use for Every Website I Build
- New website builder shares insight on crucial security checklist developed through experience.
- Emphasizes importance of integrating security from project initiation and offers practical tips.
- Covers topics like JWT structure, critical security measures, recent vulnerabilities, implementation lessons, and testing.
- Explains authentication methods, JWT best practices, security hardening, mistakes to avoid, and testing.
- Concludes with key takeaways on security implementation and the ongoing nature of security.
Read Full Article
14 Likes
Siliconangle
17h
271
Image Credit: Siliconangle
OpenAI tightens internal security amid fears of IP theft by Chinese AI rivals
- OpenAI is increasing internal security measures to protect its intellectual property from potential theft by Chinese AI competitors.
- The company has implemented stricter controls over sensitive information, enhanced staff vetting, physical safeguards, and enhanced cybersecurity practices.
- The security measures include compartmentalizing internal projects, implementing biometric authentication, adopting an air-gapped infrastructure, and hiring cybersecurity experts.
- While these measures aim to safeguard IP, they have also introduced challenges like hindering cross-team collaboration and slowing development workflows.
Read Full Article
12 Likes
Siliconangle
17h
54
Image Credit: Siliconangle
Report: Marco Rubio impersonator used AI to contact government officials
- A bad actor impersonated U.S. State Secretary Marco Rubio using AI to contact government officials, including a U.S. governor and foreign ministers.
- The impersonation campaign involved AI-generated voicemails and text messages to imitate Rubio, aiming to gain access to information or accounts of the officials.
- The State Department is urging diplomats to warn about impersonation attempts, while CNN reports a second impersonation campaign targeting government employees.
- Previous incidents include phishing campaigns targeting former government staffers and the hacking of a White House chief of staff's phone to impersonate officials.
Read Full Article
3 Likes
VentureBeat
18h
228
Image Credit: VentureBeat
Chinese researchers unveil MemOS, the first ‘memory operating system’ that gives AI human-like recall
- Chinese researchers have developed MemOS, a 'memory operating system' for AI systems.
- MemOS treats memory as a core computational resource, significantly improving performance.
- The system outperformed existing approaches in reasoning tasks, offering new potential for AI development.
- MemOS introduces 'MemCubes' for memory management, enhancing long-term relationships in AI interactions.
Read Full Article
13 Likes
Mcafee
18h
18
Image Credit: Mcafee
How to Protect Yourself from Concert and Festival Ticket Scams
- Concert and festival ticket scams are increasingly prevalent with online fraud on the rise.
- Scammers exploit the emotional investment in live music events to deceive unsuspecting fans.
- Common tactics include fake ticket sales, phantom festivals, and payment fraud schemes.
- Protect yourself by staying vigilant, using secure payment methods, and verifying ticket authenticity.
Read Full Article
1 Like
Dev
18h
177
Image Credit: Dev
My AWS Cloud Resume Challenge
- The individual completed the AWS Cloud Resume Challenge to showcase their skills by turning their personal website into a complex project, leveraging their AWS Solutions Architect Associate certification.
- Despite facing distractions, they persevered to complete the project, resulting in a basic-looking webpage with intricate backend functionalities.
- The individual found working with Terraform to convert their infrastructure into code surprisingly simple and enjoyed the support provided by HashiCorp's tutorials and documentation.
- Extras included implementing DNSSEC, ensuring no AWS credentials were exposed, and emphasizing the usefulness of AWS billing alerts. The individual encourages others to explore coding and web apps by attempting similar challenges.
Read Full Article
10 Likes
Insider
19h
303
Image Credit: Insider
Travelers won't have to take their shoes off at security in US airports
- Homeland Security Secretary Kristi Noem announced that travelers in US airports will no longer have to remove their shoes during security checks, a policy in place for nearly 20 years.
- The Transportation Security Administration (TSA) will begin testing the new approach at airports nationwide, aiming to enhance the travel experience while maintaining safety standards.
- The requirement for travelers to remove their shoes was implemented by the TSA in 2006, partly in response to the attempted shoe bombing incident by Richard Reid in 2001.
- Despite previous testing of shoe-scanning technology, it wasn't until Secretary Noem's announcement at Ronald Reagan National Airport that the policy change was officially put into effect.
Read Full Article
18 Likes
Securityaffairs
19h
133
Image Credit: Securityaffairs
Microsoft Patch Tuesday security updates for July 2025 fixed a zero-day
- Microsoft released Patch Tuesday security updates for July 2025 addressing 130 vulnerabilities across various Microsoft products.
- 10 of the vulnerabilities are rated Critical, with the remaining considered Important in severity.
- One of the flaws fixed is a publicly disclosed zero-day vulnerability, CVE-2025-49719, in Microsoft SQL Server.
- The updates also addressed critical issues like a wormable RCE flaw in Windows SPNEGO NEGOEX and an RCE vulnerability in Microsoft Office exploitable via the Preview Pane.
Read Full Article
8 Likes
TechCrunch
19h
365
Image Credit: TechCrunch
US government confirms arrest of Chinese national accused of stealing COVID research and mass-hacking email servers
- The U.S. Justice Department has confirmed the arrest of Chinese national Xu Zewei, an alleged prolific contract hacker accused of cyberattacks for China.
- Xu, along with another Chinese national Zhang Yu, is accused of hacking and stealing crucial COVID-19 research from U.S. universities in February 2020.
- The hackers are also accused of mass hacking Microsoft Exchange servers, targeting over 60,000 self-hosted servers in the U.S., leading to the theft of private company data.
- The hackers, known as Hafnium, have launched a new campaign called Silk Typhoon targeting big companies and government agencies.
Read Full Article
22 Likes
Medium
20h
152
Image Credit: Medium
Selfdestruct Vulnerabilities in Solidity: Bypassing ETH Caps to Lock Contracts
- The article discusses a selfdestruct vulnerability in Solidity where contracts can be locked by bypassing ETH caps.
- A Capture The Flag challenge involved finding a way to prevent VIP users from withdrawing tokens when the contract balance is low.
- The selfdestruct function in Solidity allows for the deletion of a contract and transferring remaining Ether, even without a receive() function defined.
- An example exploit using selfdestruct to lock a contract and prevent VIP withdrawals is demonstrated, highlighting the importance of internal verification processes.
Read Full Article
9 Likes
For uninterrupted reading, download the app