A naukri.com initiative
Cyber Security News
TechBullion
4w
329
Image Credit: TechBullion
Where Finance Meets Technology: A New Era of Efficiency and Security
- Wycliff Nagalilla, a senior financial analyst at Amazon, is passionate about using technology to enhance financial reporting, compliance, and automation.
- He focuses on leveraging technology to improve corporate governance and recognizes the importance of financial stability and efficiency for economic resilience.
- Wycliff has a strong educational background in accounting, holds various professional certifications, and is completing an MBA program in accounting.
- In his career, he has led financial automation initiatives, optimized workflows, and integrated cybersecurity into financial processes at companies like Amazon and ICEA Lion General Insurance.
- Wycliff's achievements include leading initiatives that transformed transportation financial operations, reducing manual workload, improving accuracy, and enhancing financial security.
- He has faced challenges in adapting to evolving technologies, regulations, and cybersecurity requirements, which have shaped him into a resilient and forward-thinking finance professional.
- As a senior financial analyst, Wycliff leads accounting operations for US and Canadian transportation processes at Amazon, focusing on compliance and cost control strategies.
- He serves as a Subject Matter Expert for North America at Amazon, driving global standardization and automation of financial processes to enhance efficiency.
- Wycliff's expertise lies in integrating financial automation, cybersecurity, and ESG compliance into financial operations, resulting in significant savings for organizations.
- Inspired by Steve Jobs, Wycliff aims to lead financial transformation initiatives in multinational corporations and attain an executive financial leadership role.
Read Full Article
19 Likes
HRKatha
4w
4.5k
Image Credit: HRKatha
Opportunities for techies at Infosys; large-scale lateral hiring planned
- Infosys is planning a large-scale lateral hiring to fill vacant tech positions.
- The company is seeking experienced techies with skills in cloud computing, automation testing, cyber security, Java Python, dotnet, and Android/IoS development.
- The hiring is based on ongoing project requirements and upcoming projects, although the exact number of hires is not disclosed.
- Interested candidates have been asked to provide their city preferences and interview locations.
Read Full Article
30 Likes
Hackernoon
4w
66
Image Credit: Hackernoon
A 'CEO' Reached Out to Me For a Smart Contract Job—It Was a Scam
- A Blockchain Engineer and Chainlink Developer Expert shares his experience of being targeted by scammers posing as a CEO for a smart contract job, highlighting the prevalence of scams in the Web3 ecosystem.
- The Web3 space is vulnerable to scams, ranging from technical vulnerabilities like reentrancy attacks to social engineering tactics targeting developers.
- The author was approached by scammers via LinkedIn, pretending to be from a company called MindGeek Labs, offering attractive rates for a DEX platform enhancement project.
- The scammers provided detailed project requirements and invited the author to collaborate, but red flags such as lack of technical specifics and a new GitHub repository raised suspicions.
- After engaging with the scammers and setting up a meeting with their CTO, the author exposed their scam tactics, leading to the scammers disappearing from LinkedIn.
- The typical scam playbook in such scenarios involves creating fake companies, sharing elaborate project details, and tricking developers into running malicious code to gain access to wallets.
- The author advises Web3 developers to verify entities thoroughly, enhance code analysis skills, prioritize security, never share private keys, use test environments, and trust their instincts to protect against scams.
- As the future of Web3 security evolves, the importance of security-conscious professionals and continuous education in identifying vulnerabilities and protecting protocols becomes paramount.
- By emphasizing security research and training, developers can contribute to building a more resilient Web3 ecosystem and safeguard against evolving technical and social attacks.
- In the decentralized world of Web3, developers need to prioritize security alongside innovation to mitigate risks and ensure the safety of their projects and assets.
Read Full Article
4 Likes
Securityaffairs
4w
191
Image Credit: Securityaffairs
Cisco Smart Licensing Utility flaws actively exploited in the wild
- Experts warn of the active exploitation of two recently patched security vulnerabilities affecting Cisco Smart Licensing Utility.
- The vulnerabilities are CVE-2024-20439, a static credential backdoor, and CVE-2024-20440, an information disclosure flaw.
- Attackers can exploit the backdoor to access sensitive log files, and the disclosure of exploit details has led to recent attack activity.
- Cisco has released software updates to fix the vulnerabilities, but researchers warn that the flaws are actively being exploited in attacks.
Read Full Article
11 Likes
Dev
4w
262
Image Credit: Dev
AWS WAF: Keeping Your Web Applications Secure
- AWS WAF is a web security solution that safeguards websites from common attacks.
- Key features of AWS WAF include custom security rules, real-time defense, ready-to-use managed rules, and IP access control.
- A use case example of AWS WAF in action is protecting SaaS web apps from SQL injection and XSS attacks.
- Benefits of using AWS WAF include scalability, detailed control, cost-effectiveness, continuous monitoring, and compliance support.
Read Full Article
15 Likes
The Fintech Times
4w
395
Image Credit: The Fintech Times
payabl. Finds UK Shows No Sympathy for Long Checkouts and Willing to Abandon Fraud Checks for Speed
- New research from payments and financial technology provider payabl. reveals that UK consumers have the lowest tolerance for long checkout processes.
- 43% of all shoppers across the UK, Germany, and the Netherlands would not return to a retailer after a poor online checkout experience.
- While 71% of European consumers consider fraud protection essential, UK shoppers prioritize faster checkout processes over security.
- 32% of UK shoppers are willing to sacrifice some online fraud protections, while 25% are even open to removing fraud checks entirely for a faster checkout experience.
Read Full Article
23 Likes
Dev
4w
312
Image Credit: Dev
Top Cyber Security Training Classes after 12th
- If you've just completed your 12th board and desire a career in the IT industry, consider cyber security due to the increasing internet usage and data threats.
- Cyber security involves protecting systems, software, and data from malicious attacks and unauthorized access through various techniques.
- Importance of cyber security includes preventing data breaches, protecting privacy, securing organizations, preventing cybercrime, and enhancing system reliability.
- Reasons to choose a career in cyber security include high demand for professionals, lucrative opportunities, exciting work, and no specific technical background requirement.
- Top cyber security training classes after 12th include Craw Security, Bytecode Security, Coursera, and Simplilearn, offering courses with job placement support.
- Skills you will learn include network security, ethical hacking, risk management, digital forensics, cloud security, cryptography, and more in cyber security training classes.
- Career opportunities in cyber security include roles like cybersecurity analyst, ethical hacker, security engineer, incident responder, cloud security specialist, and more.
- Choosing cyber security training classes after 12th provides a promising future due to the increasing demand for cyber security experts in the face of rising cyber threats.
- Top institutes offering cyber security training classes post-12th include Craw Security, Bytecode Security, Coursera, and Simplilearn, catering to individuals from all backgrounds.
- Frequently asked questions address topics like the best course for cyber security, learning duration, required training, and the rewarding nature of a career in cyber security.
Read Full Article
18 Likes
Cybersecurity-Insiders
4w
396
Image Credit: Cybersecurity-Insiders
AI and Network Security: Insights into the Differing Opinions of Network Engineers and Executives
- AI plays a crucial role in network security by detecting suspicious activities, breaches, and automating incident response.
- A study on AI-driven network management highlighted disparities in AI adoption between executives and network engineers.
- While 94% of CIOs reported AI implementation, only 42% of network engineers claimed full integration.
- Differences in perceptions between leadership and technical teams hinder the realization of AI's potential in network security.
- Network engineers felt that their organizations were not allocating sufficient resources for AI implementation.
- Challenges like high initial investment and the need for skilled professionals hinder full AI adoption.
- An incremental approach to AI implementation and emphasis on upskilling IT staff can address resource allocation challenges.
- Out of band technologies empower network teams to manage AI-integrated networks efficiently and remotely.
- Collaboration between executives and engineers is essential to develop a unified AI strategy for enhanced network security.
- AI holds the potential to strengthen security, streamline network management, and enhance cybersecurity measures.
Read Full Article
23 Likes
Dev
4w
373
Image Credit: Dev
JWT vs. PASETO: Which One is Right for You?
- JSON Web Tokens (JWT) and Platform-Agnostic Security Tokens (PASETO) are both used for authentication in web applications.
- JWT offers flexibility with multiple signing and encryption algorithms, but this also introduces risks such as algorithm confusion attacks and complex key management.
- PASETO enforces fixed cryptographic algorithms, eliminates algorithm confusion attacks, and provides built-in support for encryption.
- When deciding between JWT and PASETO, consider factors such as compatibility with existing systems, ecosystem support, and the need for PASETO's specific features.
Read Full Article
22 Likes
Cybersecurity-Insiders
4w
93
Image Credit: Cybersecurity-Insiders
Cyber Attack not the cause for electricity substation explosion at Heathrow Airport
- Heathrow Airport has experienced significant power outages due to an explosion at a nearby electricity substation in West London.
- The explosion resulted in widespread power outages, impacting thousands of homes.
- Firefighting teams are making progress in containing the flames at the substation.
- Speculations of a cyber-attack or state-sponsored attack causing the explosion are circulating, but no official statement has been issued regarding the cause.
Read Full Article
5 Likes
TechCrunch
4w
1.8k
Image Credit: TechCrunch
North Korea launches new unit with a focus on AI hacking, per report
- North Korea is establishing a new hacking unit within the Reconnaissance General Bureau (RGB).
- The group, named Research Center 227, will focus on developing offensive hacking technologies and programs.
- The unit will research Western cybersecurity systems, develop AI-based techniques for information theft, and respond to overseas hacking units.
- North Korean hackers have previously targeted crypto exchanges and companies, including the recent 1.4 billion-worth hack of Bybit.
Read Full Article
24 Likes
Dev
4w
400
Image Credit: Dev
How does BCrypt Verification work?
- The hashing algorithm used for password verification is a one-way hashing function.
- BCrypt hashing and verification use random letters called salt and a cost variable to produce unpredictable hash results.
- BCrypt stores the algorithm, cost, and salt alongside the hash result for future verification.
- To verify a password, the algorithm, cost, and salt are extracted from the stored hash, and the same process with the extracted values is used to generate a new hash for comparison.
Read Full Article
24 Likes
Securityaffairs
4w
356
Image Credit: Securityaffairs
Pennsylvania State Education Association data breach impacts 500,000 individuals
- A data breach at the Pennsylvania State Education Association exposed the personal information of over 500,000 individuals.
- The data breach occurred on or about July 6, 2024, and was confirmed in a investigation completed on February 18, 2025.
- Compromised personal information included names, dates of birth, driver's license numbers, social security numbers, account numbers, and health insurance information.
- The Pennsylvania State Education Association is providing affected individuals with one year of free credit monitoring and identity restoration services.
Read Full Article
21 Likes
Pymnts
4w
191
Image Credit: Pymnts
Hackers Are Using ChatGPT Bug to Access Sensitive Data
- A critical vulnerability in ChatGPT could be used by cybercrooks to gain unauthorized access to sensitive information.
- The flaw allows attackers to inject malicious URLs into input parameters, leading to unintended requests on their behalf.
- The bug is classified as of medium severity but its Exploit Prediction Scoring System score has significantly increased to 55.36%.
- Steps to address the threat include monitoring ChatGPT usage, implementing data validation techniques, updating software and systems, and educating employees about risks.
Read Full Article
11 Likes
Macdailynews
4w
200
Image Credit: Macdailynews
Mac users, don’t fall for this repurposed Windows phishing attack
- LayerX Labs has uncovered an advanced phishing campaign targeting Mac users.
- The phishing campaign previously targeted Windows users using fake Microsoft security alerts, but shifted its focus due to enhanced browser protections on Windows.
- The campaign uses compromised websites to display fake security warnings and tricks users into entering their Windows credentials.
- After browser developers implemented anti-scareware protections, the attackers shifted their focus to Mac users.
Read Full Article
12 Likes
For uninterrupted reading, download the app