A naukri.com initiative
Cyber Security News
Dev
4w
328
Image Credit: Dev
The Role of Machine Learning in Enhancing Network Security
- Machine learning plays a vital role in enhancing network security and protecting sensitive data.
- It enables proactive threat detection by analyzing network traffic and user behavior in real-time.
- Machine learning enhances Intrusion Detection Systems (IDS) by reducing false positives and improving accuracy.
- It automates incident response by quickly assessing the severity of an incident and initiating the appropriate actions.
Read Full Article
19 Likes
Medium
4w
182
Image Credit: Medium
Unlocking the Power of General AI: How NSP is Revolutionizing Cybersecurity
- General AI has the ability to learn, reason, and apply knowledge to solve complex problems, making it an ideal solution for cybersecurity.
- NSP is committed to developing AI-powered solutions that can detect and respond to threats in real-time.
- By partnering with NSP, organizations can stay ahead of the curve and protect themselves from the latest threats.
- Learn more about how NSP is helping organizations with General AI-powered solutions.
Read Full Article
10 Likes
Cybersafe
4w
53
Image Credit: Cybersafe
North Korean Hackers steal $50 M in Crypto from Radiant Capital
- North Korean hackers stole $50 million in cryptocurrency from Radiant Capital.
- The cyberattack occurred on October 16, 2024, and was traced back to a group known as Citrine Sleet or UNC4736.
- Hackers compromised the devices of three Radiant developers and bypassed advanced security systems to execute unauthorized transfers.
- Radiant Capital is collaborating with cybersecurity experts to trace and recover the stolen funds while emphasizing the need for improved device-level security measures.
Read Full Article
3 Likes
Blockonomi
4w
257
Image Credit: Blockonomi
Google’s Willow Quantum Chip: A Step Forward in Computing, But Bitcoin Remains Secure
- Google has unveiled its latest quantum computing chip named Willow, capable of performing certain calculations in just 5 minutes that would take traditional computers about 10 septillion years to complete.
- Willow uses 105 qubits and shows reduced error rates as qubit count increases – a major breakthrough in quantum computing.
- The current encryption used by Bitcoin would require millions of qubits to break, making Willow's 105 qubits no immediate threat to Bitcoin's security.
- Experts estimate meaningful quantum threats to crypto security may emerge between 2030-2050, prompting industry leaders to work on quantum-resistant solutions.
Read Full Article
15 Likes
Socprime
4w
430
Image Credit: Socprime
Configuring Disk Allocation Thresholds in Elasticsearch and OpenSearch
- Efficient disk space management is crucial for stability and performance of Elasticsearch and OpenSearch clusters.
- There are three key settings related to disk allocation thresholds:
- 1. cluster.routing.allocation.disk.threshold_enabled - Enables or disables disk-based shard allocation.
- 2. cluster.routing.allocation.disk.watermark.low - Defines the minimum amount of free disk space before avoiding shard allocation.
- 3. cluster.routing.allocation.disk.watermark.high - Determines when to relocate shards away from a node with low disk space.
Read Full Article
25 Likes
Socprime
4w
270
Image Credit: Socprime
Understanding index.mapping.total_fields.limit in OpenSearch/ElasticSearch
- In OpenSearch and Elasticsearch, the number of fields in an index is governed by the index.mapping.total_fields.limit setting.
- The default value for index.mapping.total_fields.limit is 1,000 fields per index.
- If you need more fields, you can increase the limit by updating the index settings.
- Update the limit in Dev-Tools or use an index template for your index.
Read Full Article
16 Likes
Cybersecurity-Insiders
4w
182
Image Credit: Cybersecurity-Insiders
Aiming for Whales: Phishing Tactics Are Climbing the Corporate Ladder
- Whaling phishing attacks, targeting C-suite executives and decision-makers are growing and exploiting publicly available information to appear legitimate.
- These attacks are precise and deep, involving the combination of technical manipulation with psychological tactics.
- Whaling phishing has wide-ranging consequences – data breaches, financial losses and reputational damage.
- Leaders can safeguard their companies against these attacks by customising security training programs for employees including executives; Deploy advanced email filtering systems; Mandate multi-factor authentication (MFA); Audit and monitor publicly available executive data; Encourage a security-first culture.
- Executives are particularly vulnerable, being targeted as they have access to sensitive data and decision-making authority.
- Attackers invest in tailored tactics to exploit the most trusted individuals, whom may have less time for stringent cybersecurity training.
- Spoofing trusted contacts, social engineering and creating pressure scenarios are all methods for exploiting trust, urgency, and authority of executives.
- Falling victim to a whaling phishing attack can lead to serious legal and regulatory repercussions.
- Leadership must model proactive security practices to ensure the safety of their organizations in an increasingly complex threat landscape.
- By understanding how these attacks operate and implementing robust defenses, companies can reduce their risk significantly.
Read Full Article
10 Likes
allthingstalent.org
4w
391
Image Credit: allthingstalent.org
Why your HR team should be the first line of defense against cyber threats
- In the digital age, cybersecurity is no longer just an IT issue, but a business-wide concern, thus the HR department needs to be at the heart of the defense strategy.
- HR departments handle large volumes of highly sensitive employee data, making them prime targets for cybercriminals.
- Human error is still a leading cause of security incidents, and well-trained HR professionals can significantly reduce vulnerabilities.
- Remote and hybrid work models have expanded the cybersecurity risks for organisations and have exposed HR departments to new risks.
- Effective cybersecurity training can help HR professionals to identify off-site risks, including unsecured networks and device vulnerabilities.
- HR departments face unique cybersecurity challenges due to their role in managing large volumes of confidential data pertaining to both current and prospective employees.
- HR can play a pivotal role in shaping a cybersecurity-conscious workforce by consistently reinforcing that each employee’s actions have a direct impact on the organization’s security.
- Initiatives like awareness campaigns, interactive workshops, and visible recognition programmes for employees who demonstrate strong security practices can make cybersecurity feel personal and relevant.
- By equipping HR teams with critical cybersecurity skills, organisations can strengthen the security of remote workflows and reduce the likelihood of breaches in less controlled settings.
- It is critical for all members of an organization, especially for CHROs and HR professionals to undergo continuous cybersecurity training, given the sensitivity of the data they have access to.
Read Full Article
23 Likes
Dev
4w
124
Image Credit: Dev
Vulnerability Remediation: The Key to Safeguarding Your Systems and Data
- Vulnerability remediation is crucial for protecting networks, systems, and applications from threats and attacks.
- The process involves identifying, prioritizing, fixing, and continuously monitoring vulnerabilities.
- A successful vulnerability remediation plan includes automated assessment tools, regular security audits, and clear engagement among team members.
- Challenges in vulnerability remediation include resource limitations and balancing remediation with operational efficiency.
Read Full Article
7 Likes
Securityaffairs
4w
748
Image Credit: Securityaffairs
Deloitte denied its systems were hacked by Brain Cipher ransomware group
- Deloitte denies allegations of being hacked by the Brain Cipher ransomware group.
- The ransomware group claims to have stolen one terabyte of compressed data from Deloitte UK.
- Deloitte spokesperson clarifies that the source of the data is a single client's system, not linked to the company's network.
- The ransomware group threatens to release the stolen files unless a ransom is paid.
Read Full Article
13 Likes
Cybersecurity-Insiders
4w
297
Image Credit: Cybersecurity-Insiders
Cyber Threats in the Form of MS Office Email Attachments: A Growing Danger
- MS Office Email Attachments, particularly those involving Microsoft Office documents are the most common and persistent threats in the cyber world.
- Macro-based Malware, Exploiting Vulnerabilities, and Phishing and Social Engineering are the three most common methods used in MS Office Email Attachment Attacks.
- The consequences of opening a malicious MS Office attachment can be devastating, both for individuals and organizations. The impact varies depending on the nature of the malware and the attacker’s goals.
- Ransomware, Network compromise, Financial Loss, and Data Theft and Breaches are some of the most common results of MS Office Email Attachment Cyber Threats.
- In order to protect against cyberattacks involving MS Office email attachments, enable protected view and disable macros, keep software updated, use advanced email filtering, educate users, backup data regularly, and use antivirus and anti-malware software.
- Employee training is one of the most effective ways to prevent email-based attacks
- Adoption of strong cybersecurity practices to protect against these evolving threats is necessary.
Read Full Article
17 Likes
Cybersecurity-Insiders
4w
129
Image Credit: Cybersecurity-Insiders
Mysterious Drone-Like Objects Disrupting Electronics in New Jersey: Is It a New Cyber Threat or Something More?
- Large, car-sized flying objects have been spotted in New Jersey, causing significant disturbances to nearby electronic devices such as car clocks and GPS systems.
- The Federal Bureau of Investigation (FBI) has launched an investigation into the incidents, believing that these objects might be drones or light aircraft being used for surveillance or testing purposes, but have yet to confirm the nature of the objects.
- Law enforcement agencies across eight counties in New Jersey have issued a directive prohibiting the use of drones and similar devices until further notice.
- Many individuals speculate that a state actor may be behind these incidents, using them as a form of cyber warfare, part of a broader campaign of cyber-attacks on the US. Some believe that the targets appear to be exclusively government and official buildings.
- There are growing concerns that GPS jamming and spoofing could escalate into a serious global threat, potentially leading to catastrophic consequences if the attacks continue. The Federal Aviation Administration has raised suspicions about the potential political motives behind these disturbances.
- There is a rising conspiracy theory that these events are part of a targeted campaign, possibly by a foreign power or a shadowy organisation.
- The widespread interference with GPS signals and other electronic devices remains a significant concern, as experts warn that this phenomenon could have long-term negative consequences, particularly for the safety and security of citizens.
- Authorities continue their investigations into the drone-like objects in New Jersey, and the public is captivated by the mystery and is sparking urgent discussions about the future of electronic security.
Read Full Article
7 Likes
Livebitcoinnews
4w
253
Image Credit: Livebitcoinnews
Crypto Scam Targets Web3 Workers with Fake Meeting Apps
- Cybercriminals utilize fake meeting apps to target Web3 professionals.
- Real virus grabs crypto and sensitive data from compromised machines.
- Scam uses deceptive tactics like impersonation on messaging platforms to trick users.
- Users should be cautious while downloading apps from unknown firms or investment opportunities.
Read Full Article
15 Likes
Tech Radar
4w
971
Image Credit: Tech Radar
Popular Python AI library hacked to deliver malware
- Ultralytics YOLO11, an AI model for computer vision and object detection, was compromised in a supply chain attack and used to deploy malware.
- The malicious versions of YOLO11 were uploaded on PyPI, a Python package repository, and users who updated to these versions ended up with a cryptocurrency miner called XMRig installed.
- Ultralytics confirmed the attack and immediately removed the compromised versions from PyPI. They have released a new version and are conducting a full security audit.
- There have been reports of even newer trojanized versions of YOLO11, indicating ongoing security concerns.
Read Full Article
26 Likes
Tech Radar
4w
963
Image Credit: Tech Radar
QR codes can be used to crack this vital browser security tool
- Cybersecurity researchers have discovered a way to communicate with malware through browser isolation using QR codes.
- Browser isolation is a method that protects against web-borne cyberattacks by running scripts in a remote environment.
- Infected devices can receive commands via QR codes, bypassing browser isolation and rendering it ineffective.
- The method has limitations, including a maximum data stream size and latency, but can still be used for destructive malware attacks.
Read Full Article
22 Likes
For uninterrupted reading, download the app