A naukri.com initiative
Cyber Security News
Securityaffairs
4w
296
Image Credit: Securityaffairs
Security Affairs newsletter Round 516 by Pierluigi Paganini – INTERNATIONAL EDITION
- U.S. Treasury removed sanctions against the crypto mixer service Tornado Cash
- Zero-day broker Operation Zero offers up to $4 million for Telegram exploits
- RansomHub affiliate uses custom backdoor Betruger
- Pennsylvania State Education Association data breach impacts 500,000 individuals
Read Full Article
17 Likes
Medium
4w
367
Image Credit: Medium
Unlocking the Vault
- Security measures, like those in the legendary Götterdämmerung vault, often become more robust as the stakes increase, similar to everyday platforms stepping up security in critical scenarios.
- Balancing security and usability remains a challenge, with the need for complex passwords potentially hindering user experience.
- Emphasizing password length over complexity and improving backend security measures can enhance both security and usability.
- One-time passwords (OTPs) offer a more user-friendly alternative to traditional passwords, though challenges like secure distribution need to be addressed.
- Biometric logins provide enhanced security and convenience, but user literacy and awareness are crucial for effective implementation.
- Multi-factor authentication (MFA) adds layers of security but requires consideration of user preferences for various authentication factors.
- Single Sign-On (SSO) simplifies user access across multiple applications, reducing the need for multiple credentials.
- Innovative concepts like a pair login system for dual authentication offer increased security and mutual oversight.
- Educating users on safeguarding credentials and implementing regular security measures are essential for maintaining system security.
Read Full Article
22 Likes
Medium
4w
199
Image Credit: Medium
A Deep Dive into Malware Static Analysis: Dissecting Windows Reverse Shell for Threat Insights
- John, the junior security analyst, conducted static analysis on a reverse shell malware to gather insights on the threat.
- In static analysis, the file type of the malware was determined to be a 64-bit Windows PE file using tools like 'file' command on Kali Linux and hexdump.
- Hashes (MD5, SHA1, SHA256) were generated for the malware to identify replicas and search for results online.
- By analyzing the strings in the binary, John found clues that the malware communicated over the internet using cmd.exe.
- Comments in the code and the type of strings present provided insights into the functionality and possible development environment of the malware.
- Detection of a packed file, indicated by decreased file size and lack of readable strings, led to the discussion on packers, cryptors, and tools like ExeInfo for unpacking.
- Further analysis involved examining PE Headers, DOS Header, File Header, Optional Header, sections, and imports to gather more information on the malware.
- The compilation date, application type, and imported functions provided additional details on the malware's behavior.
- Overall, John's thorough analysis provided a deeper understanding of the malware's structure and functionalities despite attempts to obfuscate it.
- The article emphasizes the importance of static analysis in dissecting malware to unveil its potential threats and capabilities.
Read Full Article
12 Likes
Securityaffairs
4w
261
Image Credit: Securityaffairs
UAT-5918 ATP group targets critical Taiwan
- UAT-5918, an info-stealing threat actor, targets Taiwan using web shells and open-source tools for persistence, info theft, and credential harvesting.
- The group exploits N-day vulnerabilities in unpatched servers for long-term access and conducts post-compromise activities manually.
- APT UAT-5918 deploys web shells, creates admin accounts, and uses tools like Mimikatz and Impacket for lateral movement and credential theft.
- Talos researchers link UAT-5918 to Chinese APT groups based on TTP overlaps and shared tooling and tactics.
Read Full Article
15 Likes
Unite
4w
412
Image Credit: Unite
The Rise of AI-Powered Coding: Efficiency or a Cybersecurity Nightmare?
- AI-powered coding tools are transforming software development by automating tasks, providing debugging assistance, and increasing productivity.
- While these tools offer benefits like faster coding and reduced errors, they also pose risks such as cybersecurity threats and job displacement.
- AI in software development has evolved from basic syntax corrections to generating entire code blocks, revolutionizing the industry.
- GitHub Copilot, Amazon CodeWhisperer, and similar platforms have streamlined code creation and reduced manual coding time.
- AI addresses the shortage of skilled developers, allowing teams to focus on complex problem-solving rather than repetitive coding tasks.
- Despite enhancing productivity, AI-led coding tools raise concerns about cybersecurity vulnerabilities and job skills erosion.
- Security risks include AI-generated code with vulnerabilities like SQL injections and weak authentication mechanisms.
- Over-reliance on AI may lead to declining coding expertise and increased susceptibility to cyberattacks.
- Cybercriminals are leveraging AI to automate attacks, increasing the sophistication and scale of digital threats.
- Mitigating these risks requires a balanced approach, combining AI benefits with rigorous security audits and human oversight.
Read Full Article
24 Likes
Medium
4w
48
The Biggest Technology Trends of 2025: What to Expect
- AI is evolving to seamlessly integrate with human intelligence, enhancing decision-making, creativity, and efficiency across various industries by 2025.
- CRISPR-based gene editing and lab-grown meat are revolutionizing biotechnology, leading to advancements in personalized medicine and sustainable food production.
- Climate tech is addressing climate change through innovations like carbon capture, renewable energy, and sustainable materials, with AI and IoT optimizing resource use.
- Cybersecurity is combatting AI-powered cyber threats with quantum encryption, zero trust security models, and stricter data privacy regulations to stay ahead of evolving risks.
- Quantum computing is making significant strides in 2025, with the potential to transform drug discovery, financial modeling, climate science, and cryptography.
- The technological advancements of 2025 are reshaping industries and everyday life, emphasizing the importance of ethical considerations, regulatory frameworks, and responsible innovation.
- Rapid technological growth necessitates a balance between progress and accountability to ensure technology benefits humanity as a whole.
- Staying informed about tech trends in AI, biotechnology, climate tech, cybersecurity, and quantum computing is crucial in anticipating the groundbreaking discoveries of 2025.
Read Full Article
2 Likes
Medium
4w
288
Image Credit: Medium
My Smart Doorbell Tried to Scam Me — Here’s How I Fought Back
- Hackers hijacked a smart doorbell to send a fake notification and phishing link.
- The author turned their smart home into a secure environment.
- Smart devices are convenient but have security vulnerabilities.
- Implementing security measures can protect against hacking attempts.
Read Full Article
17 Likes
Dev
4w
217
Image Credit: Dev
How Secure Is Your Smartphone? 5 Simple Ways to Protect Your Mobile Device
- Set a strong passcode or use biometrics for your smartphone lock screen.
- Keep your software updated to fix vulnerabilities and protect against cyber threats.
- Be cautious with app permissions and review/disable unnecessary access.
- Enable two-factor authentication (2FA) for sensitive apps to add an extra layer of protection.
Read Full Article
13 Likes
Medium
4w
119
Image Credit: Medium
I Compared ChatGPT and DeepSeek’s Privacy Policies — Here’s What I Found
- The author compared the privacy policies of DeepSeek and OpenAI to identify potential differences in content, structure, and transparency.
- The last update to OpenAI's privacy policy was on November 4, 2024, while DeepSeek's was last updated on February 14, 2025.
- A privacy policy is a legal document that explains how a company collects, uses, stores, shares, and protects user data.
- DeepSeek's privacy policy mentions retaining information as long as necessary to provide services and for compliance with contractual and legal obligations.
Read Full Article
7 Likes
Medium
4w
31
Image Credit: Medium
How to Create a Secure Tails OS Bootable USB: Step-by-Step Guide
- To create a secure Tails OS bootable USB, follow these steps.
- Download the latest release of Tails OS and Rufus.
- Verify the integrity of the Tails OS image file.
- Use Rufus to create the bootable USB with the Tails OS image file.
Read Full Article
1 Like
Medium
4w
359
Image Credit: Medium
Ensuring Secure RPC Operations in Your Trading Bot: Tips and Tools
- RPC endpoints are crucial for trading bot operations and allow interaction with blockchain nodes.
- To ensure secure RPC operations in your trading bot, follow best practices such as verifying endpoints through reputable providers, checking documentation, and using isolated test environments.
- Risks of connecting to untrusted or malicious RPC endpoints include exposing your bot and funds to cyber threats.
- When in doubt, conduct further research, seek community feedback, and prioritize security in the crypto world.
Read Full Article
21 Likes
Dev
4w
208
Image Credit: Dev
HackTheBox Writeup: Cypher
- The Cypher write-up details the exploration and exploitation of a medium-difficulty machine.
- After an aggressive port scan, the machine is found to run Linux with HTTP and SSH services.
- The website on the machine contains minimal pages, with a username hint found in the source code.
- Directory enumeration using Gobuster led to discovering endpoints and the presence of a JAR file.
- Decompiling the JAR file revealed a Neo4j procedure that hinted at a potential remote code execution (RCE) vulnerability.
- Upon injecting Cypher queries, an error message disclosed the structure of Cypher queries used for login.
- Through a crafted Cypher injection leveraging custom procedures, RCE was achieved to gain shell access.
- Further enumeration allowed access to user.txt but lacked permissions to read it until credentials were found in a file.
- Escalating privileges involved utilizing a Python module for BBOT to read the root.txt flag.
- The exploitation concluded with successful retrieval of both user.txt and root.txt flags.
Read Full Article
12 Likes
Bitcoinist
4w
439
Image Credit: Bitcoinist
SEC And Crypto Leaders Finally Talk—No Threats, Just Dialogue
- The SEC has hosted its first-ever roundtable discussion on the regulation of digital assets.
- The main subject of the roundtable was "How We Got Here and How We Get Out - Defining Security Status."
- The SEC streamed the first roundtable live on their website, making it available to everyone.
- The result of these roundtables may have a significant impact on the perception and engagement with the crypto market.
Read Full Article
26 Likes
Medium
4w
252
Image Credit: Medium
Government Backdoors in Cybersecurity: A Necessary Evil or a Risk to Privacy?
- Government backdoors are built-in methods that allow access to private data, raising concerns about cybersecurity risks.
- These backdoors are claimed to be necessary for investigating crimes and enhancing national security.
- Tech companies and privacy advocates resist these backdoors, leading to a contentious debate over encryption.
- The balance between national security and individual privacy will determine the future of encryption policies.
Read Full Article
15 Likes
Securityaffairs
4w
390
Image Credit: Securityaffairs
U.S. Treasury removed sanctions against the crypto mixer service Tornado Cash
- The U.S. Treasury has decided to lift sanctions on the crypto mixer service Tornado Cash, which was accused of aiding North Korea's Lazarus Group in laundering illicit funds.
- The sanctions were imposed by the U.S. Treasury Department's Office of Foreign Assets Control (OFAC) in August 2022 due to Tornado Cash's involvement in money laundering activities.
- Tornado Cash was utilized by cybercriminals, including the Lazarus APT Group, to launder over $7 billion in virtual currency since its establishment in 2019.
- The Treasury removed the sanctions based on its review of legal and policy considerations concerning financial activities in evolving technological environments.
- Secretary of the Treasury Scott Bessent emphasized the importance of safeguarding the digital asset industry from misuse by illicit actors like North Korea.
- In addition to lifting sanctions on Tornado Cash, the U.S. Treasury also delisted over 100 Ethereum wallet addresses from the Specially Designated Nationals (SDN) list maintained by OFAC.
- The founders of Tornado Cash, Roman Storm and Roman Semenov, were charged with money laundering and violating economic emergency powers laws, potentially facing significant prison sentences.
- Recent reports suggest that Lazarus APT Group has resumed using Tornado Cash for money laundering operations, indicating ongoing challenges in combating illicit financial activities.
- Numerous individuals involved in facilitating money laundering through Tornado Cash have faced legal repercussions, with arrests and convictions highlighting law enforcement efforts against illicit financial flows.
- The case involving Tornado Cash underscores the importance of regulatory oversight and accountability in the cryptocurrency space to prevent misuse for criminal purposes and ensure financial safety.
Read Full Article
23 Likes
For uninterrupted reading, download the app