A naukri.com initiative
Cyber Security News
Pymnts
2w
357
Image Credit: Pymnts
Jason Blackhurst to Succeed Featurespace CEO Martina King After Visa Acquisition
- Jason Blackhurst will succeed Martina King as the CEO of Featurespace following its acquisition by Visa.
- During her tenure as CEO, King led Featurespace to become a leader in machine learning-powered fraud detection.
- Blackhurst, a senior vice president at Visa, will take on the role of senior vice president, head of Featurespace and acceptance risk solutions at Visa.
- Featurespace, now a part of Visa's Risk and Identity Solutions unit, has been granted a U.S. patent for its adaptive behavioral analytics technology.
Read Full Article
21 Likes
Tech Radar
2w
261
Image Credit: Tech Radar
Sam’s Club investigates possible C10p ransomware breach
- Sam’s Club, a Walmart wholesale club, is investigating a possible breach by ransomware gang C10p.
- The breach is likely connected to a previous exploitation of a vulnerability in Cleo File Transfer.
- C10p has claimed that the leaked files belong to Sam’s Club and criticized the company for neglecting security.
- Sam’s Club, with over 70 million members and 2 million employees, is currently investigating the incident, but no evidence of a security breach has been found so far.
Read Full Article
15 Likes
Ubuntu
2w
305
Securing Software Supply Chains: New Research Highlights Industry Vulnerabilities
- New research conducted by IDC, co-sponsored by Canonical and Google Cloud, highlights the challenges organizations face in securing their software supply chains.
- The report reveals that 70% of IT teams spend more than 6 hours a week on patching, emphasizing the need for more efficient and automated solutions.
- The adoption of AI technology is making security and compliance more complex, requiring security strategies to evolve.
- The report emphasizes the importance of bringing the software supply chain to the core of software delivery and implementing automation for vulnerability management and patching.
Read Full Article
18 Likes
Securityaffairs
2w
318
Image Credit: Securityaffairs
Russia-linked Gamaredon targets Ukraine with Remcos RAT
- Russia-linked Gamaredon targets Ukraine with a phishing campaign using troop-related lures to deploy the Remcos RAT via PowerShell downloader.
- Talos researchers warn that Gamaredon is behind the spear-phishing attacks targeting Ukrainian entities since 2014.
- The campaign, active since November 2024, involves distributing LNK files disguised as Office documents.
- Gamaredon uses PowerShell downloader and DLL sideloading to execute the Remcos backdoor payload.
Read Full Article
19 Likes
Securityaffairs
2w
322
Image Credit: Securityaffairs
CoffeeLoader uses a GPU-based packer to evade detection
- CoffeeLoader is a sophisticated malware that uses numerous techniques to bypass security solutions.
- It implements advanced evasion techniques including call stack spoofing, sleep obfuscation, and Windows fibers.
- The malware is being used to deploy Rhadamanthys info-stealer and is distributed via SmokeLoader.
- There are similarities between CoffeeLoader and SmokeLoader, indicating a possible connection between the two malware.
Read Full Article
19 Likes
The Fintech Times
2w
414
Unified Action Needed to Address Both Domestic and Cross-Border Fraud Risks Reveals Nasdaq Verafin
- Fraud risks related to domestic and cross-border transactions are increasing, according to Nasdaq Verafin.
- In 2023, $194.9 billion was moved across borders, contributing to the total fraud figure of $750 billion.
- The report emphasizes the need for unified action to combat fraud and protect the financial system.
- Nasdaq Verafin's cloud-based financial crime management solutions aim to prevent fraud and money laundering.
Read Full Article
24 Likes
Medium
2w
235
Image Credit: Medium
The Future of Gaming: Where Cybersecurity, Game Development, and GameFi Converge
- GameFi, the fusion of gaming and decentralized finance (DeFi), is revolutionizing how players interact with digital assets.
- Security is no longer an afterthought in game development. Developers must now integrate security into every phase of the development cycle to protect both gameplay integrity and financial assets.
- Gaming is transforming cybersecurity through gamification, using game mechanics to teach real-world security skills.
- The success of GameFi relies on the collaboration between developers, security professionals, and blockchain innovators to create safe and immersive gaming experiences.
Read Full Article
14 Likes
Medium
2w
261
The One Cybersecurity Mistake Everyone Makes (Are You Guilty?)
- The biggest cybersecurity mistake is reusing passwords.
- 80% of hacking-related incidents occur because of stolen or compromised passwords.
- Hackers steal passwords through data breaches, phishing attacks, WiFi snooping, and social engineering.
- To prevent being hacked, use a password manager, enable two-factor authentication, scan for leaked passwords, and avoid storing passwords in web browsers.
Read Full Article
15 Likes
Medium
2w
52
Image Credit: Medium
Top Secure Messaging Apps for 2025: Ensuring Your Privacy in the Digital Age
- Signal is a top secure messaging app known for its dedication to privacy, earning endorsements from security experts globally.
- Threema, originating from Switzerland, is a paid messaging app that prioritizes security and user anonymity, operating independently.
- Session is a decentralized messaging app that eliminates vulnerabilities associated with central servers, ensuring user identities remain concealed.
- SimpleX is gaining popularity for its advanced privacy features and encryption protocols, catering to users who prioritize anonymity and secure communication.
Read Full Article
3 Likes
Medium
2w
428
Image Credit: Medium
How AI Shapes Cybersecurity Threats in the Modern Era
- Cyberattackers are increasingly using AI to enhance the complexity and potency of their attacks.
- Phishing attacks have become more advanced with the help of AI, making detection and filtering challenging.
- AI-powered adaptive malware is more effective than traditional malware and requires advanced protection systems.
- While AI creates new threats, it also presents effective security solutions, improving cybersecurity operations.
Read Full Article
25 Likes
Siliconangle
2w
396
Image Credit: Siliconangle
Cisco Talos report finds identity-based attacks drove majority of cyber incidents in 2024
- A new report by Cisco Talos found that identity-based attacks were the main driver of cyber incidents in 2024.
- Identity attacks were involved in 60% of incidents, with attackers using valid credentials and native tools, rather than new malware.
- Old vulnerabilities were also exploited in cases where identity wasn't involved.
- The report identified weaknesses in multifactor authentication (MFA) as a top security issue for identity-based attacks.
Read Full Article
23 Likes
The Register
2w
296
Image Credit: The Register
Cloud security explained: What’s left exposed?
- AWS customers must remember that security within their cloud environment is their responsibility, despite AWS securing its infrastructure.
- AWS operates on a Shared Responsibility Model, where both AWS and customers have distinct security responsibilities.
- Customers are accountable for securing their data, applications, and configurations within the AWS environment.
- Organizations need to proactively address vulnerabilities like SSRF exploits by securing applications and enabling AWS IMDSv2.
- Identity and Access Management (IAM) is crucial, as misconfigurations can lead to data exposures in services like S3 buckets.
- Customers are responsible for securing data stored in AWS, even with AWS assisting in securing data stores like RDS.
- Patch management for OS, network, and firewall configurations is the customers' responsibility, not AWS'.
- AWS provides services like Lambda to reduce patch management needs, but organizations still need to ensure the latest patches.
- Organizations have the choice to make services publicly accessible or protect them within private cloud networks, with associated risks.
- Cloud security isn't automatic, and organizations need to actively manage their AWS security to prevent vulnerabilities and exposures.
Read Full Article
17 Likes
Analyticsindiamag
2w
366
Image Credit: Analyticsindiamag
Are Companies Practicing Traditional Disaster Recovery Ready for the Next Big Cyberattack?
- As cyber threats evolve, the risks extend beyond temporary disruptions, highlighting the need for organizations to adapt to new threats.
- Commvault has developed tools like 'ThreatWise' to help organizations detect and respond to cyber threats effectively.
- Many organizations lack preparedness for cyber recovery despite practicing traditional disaster recovery methods.
- Commvault utilizes AI to enhance threat detection capabilities and protect AI-based workloads and data.
- The company helps customers restore critical operations faster using AI-driven technologies.
- Organizations often fail at security due to outdated disaster recovery practices and insufficient data validation processes.
- Commvault leverages cloud and AI technologies to recover workloads securely from any location.
- AI is utilized to verify the cleanliness of recovered data and allow for more frequent testing in isolated environments.
- Commvault employs partner models like OpenAI and Avira for threat scanning and detecting AI-driven attacks.
- Bengaluru serves as the global capability center for Commvault, driving innovation and development of products like Commvault Cloud and Cloud Rewind.
Read Full Article
22 Likes
Silicon
2w
95
Image Credit: Silicon
Overcoming Digital Transformation Challenges: Lessons from Industry Leaders
- Digital transformation is essential for businesses to stay competitive and resilient, despite facing challenges like resistance to change and budget constraints.
- Engaging stakeholders from the start and aligning transformation goals with core values can reduce resistance and enhance adoption of new technologies.
- Creating a culture that prioritizes adaptability and involves all levels of the organization can smooth the process of digital transformation.
- Balancing innovation with operational stability is crucial, requiring a strong digital backbone, culture shift, and automation for efficiency and security.
- Measuring success and learning from failures are integral parts of the transformation journey to ensure tangible wins and a strong data foundation.
- Success in digital transformation depends on people, culture, and alignment with innovative strategies, as seen in the experiences of industry leaders.
- Lessons from failed initiatives emphasize the importance of change management, data quality, and inclusive approaches to avoid common pitfalls.
- Organizations can strike a balance between innovation and stability by adopting dual operating models, innovation sandboxes, and clear metrics for progress.
- Measuring success involves both quantitative improvements and qualitative impacts on efficiency, cost reduction, employee engagement, and collaborative innovation.
- Digital transformation is about fostering a culture of inclusivity, continuous learning, and human-centered innovation for sustainable growth and success.
Read Full Article
5 Likes
Cybersecurity-Insiders
2w
270
Image Credit: Cybersecurity-Insiders
Harnessing AI to Strengthen Cyber Teams Amidst Talent Shortage
- In the cybersecurity industry, the talent shortage poses a significant challenge amid a complex threat landscape where AI-powered attacks are proliferating.
- As companies face a scarcity of cybersecurity professionals globally, they are increasingly vulnerable to data compromises and breaches.
- AI is being leveraged by threat actors to personalize attacks and amplify their persistence, leading to heavier workloads for security teams.
- Through automation and AI adoption, security teams can boost efficiency, prioritize tasks, and focus on complex defensive strategies.
- Organizations embracing AI automation have seen significant reductions in manual security tasks and improved incident response times.
- Amidst the talent shortage, entry-level cybersecurity roles are scarce, highlighting the need for upskilling initiatives and investment in workforce development.
- Companies are urged to equip employees with AI skills and establish AI training programs to enhance preparedness for evolving threats.
- Key skills for aspiring cybersecurity professionals include AI literacy, responsible AI use, and a commitment to continuous learning.
- By integrating hyperautomation, autonomous SOCs, and AI training, companies can address burnout, enhance defense mechanisms, and bridge the talent gap.
- The evolving threat landscape necessitates that cybersecurity teams embrace AI to bolster their capabilities and combat innovative threats effectively.
Read Full Article
16 Likes
For uninterrupted reading, download the app