A naukri.com initiative
Cyber Security News
Cybersecurity-Insiders
3d
332
Image Credit: Cybersecurity-Insiders
2025 Cybersecurity Predictions
- Robust supply chain security is essential for safeguarding against software vulnerabilities. Businesses should establish strict controls, conduct regular audits, and manage vulnerabilities.
- As geopolitical tensions rise, businesses must be prepared to swiftly isolate network segments to mitigate risks. Advanced network segmentation and robust remote control capabilities are crucial.
- The new NIS2 Directive mandates 24-hour reporting of cyber incidents. Organizations need to enhance their incident response frameworks for greater transparency and compliance.
- NIS2 emphasizes the importance of supply chain security and requires organizations to assess and manage risks associated with third-party vendors.
Read Full Article
20 Likes
Cybersecurity-Insiders
3d
104
Image Credit: Cybersecurity-Insiders
Fenix24 Debuts Argos99 to Fortify Cyber Resilience and Streamline Incident Recovery
- Fenix24 has launched Argos99, a new cybersecurity service.
- Argos99 aims to enhance organizations' cyber resilience and streamline incident recovery.
- It provides critical insights into IT assets and infrastructure, mapping dependencies and managing distributed assets.
- Key features include policy analysis, configuration monitoring, asset mapping, and rapid hardening.
Read Full Article
6 Likes
Medium
3d
68
AI IN FUTURE
- Artificial Intelligence (AI) is transforming industries and reshaping the way we live, work, and interact.
- AI encompasses subfields such as Machine Learning, Natural Language Processing, Computer Vision, and Robotics.
- AI is making significant contributions in healthcare, education, finance, transportation, and entertainment.
- Despite its benefits, AI presents challenges related to bias, privacy, job displacement, and accountability.
Read Full Article
4 Likes
Pymnts
3d
64
Image Credit: Pymnts
Mastercard Finalizes Acquisition of Threat Intelligence Company Recorded Future
- Mastercard has finalized its acquisition of threat intelligence company Recorded Future.
- The acquisition will enhance Mastercard's cybersecurity capabilities with AI-powered threat intelligence and actionable analytics.
- Recorded Future analyzes data to identify potential threats and helps customers take preventive actions.
- Mastercard aims to support customers in securing every digital interaction by leveraging Recorded Future's capabilities.
Read Full Article
3 Likes
Pymnts
3d
349
Image Credit: Pymnts
FTC Finalizes Order Requiring Marriott to Improve Data Security
- The Federal Trade Commission (FTC) has finalized an order requiring Marriott International and its subsidiary Starwood Hotels & Resorts Worldwide to implement a comprehensive information security program.
- The final order settles the FTC’s charges announced in October that the companies deceived customers by claiming to have reasonable data security, when in fact they did not.
- The companies suffered three data breaches that affected more than 344 million of their customers worldwide, according to the FTC.
- Under the order, Marriott and Starwood are required to establish a comprehensive information security program, retain personal information only as long as necessary, and restore stolen loyalty points upon request.
Read Full Article
21 Likes
Pymnts
3d
24
Image Credit: Pymnts
5 Ways 2024 Kicked Off A New Era for CFOs and Treasury Pros
- The year 2024 marked a transformative period for CFOs and treasurers, blending strategy, technology, and operational precision.
- The finance function has shifted from a reactive cost center to a proactive driver of growth and resilience.
- Real-time financial operations, AI integration, compliance and strategic growth convergence, cybersecurity, and payments innovations are reshaping the roles of CFOs and treasurers.
- AI is enabling finance teams to focus on strategy by automating manual tasks, while compliance is seen as a strategic opportunity.
Read Full Article
1 Like
Dev
3d
357
Image Credit: Dev
Things About Nonce & CSRF Token: Differences, Use Cases, and How They Work
- Nonce and CSRF Token are security mechanisms to prevent web attacks.
- Nonce is a randomly generated string used only once to ensure the uniqueness of each request.
- The nonce mechanism prevents the server from processing duplicate requests.
- CSRF Token is a security measure designed to prevent cross-site request forgery (CSRF) attacks.
- A typical CSRF attack exploits the victim's logged-in state to send malicious requests to a trusted website.
- Attackers may exploit a user's logged-in state to initiate high-risk actions like transferring funds.
- Nonce ensures request uniqueness to avoid duplicates.
- CSRF Token prevents Cross-Site Request Forgery by verifying the random string included in each request.
- Nonce and CSRF Token can be used together without conflict.
- Implementation depends on the specific problem to solve.
Read Full Article
21 Likes
Semiengineering
3d
148
Image Credit: Semiengineering
Fully Partitioned Security Monitoring Logic From Both The CPU’s Main Core and Privileged SW (KAIST)
- Researchers at KAIST have proposed a new approach to security monitoring hardware called Interstellar.
- Interstellar introduces fully partitioned hardware near the CPU's main core.
- The approach leverages hardware-level security monitoring and is capable of detecting attacks on privileged software.
- The proposed approach aims to address the challenge of defending against attacks on privileged software.
Read Full Article
8 Likes
Digitaltrends
3d
313
Image Credit: Digitaltrends
Surfshark vs. VPN Unlimited: Which VPN offers the best long-term value?
- Surfshark and VPN Unlimited offer good long-term value on virtual private networks (VPNs).
- Surfshark’s shortest subscription is expensive. At $15.45 monthly, you’d pay more than $185 each year.
- Surfshark offers much more affordable prices when you pay for one or two years in advance.
- VPN Unlimited has a surprise in its price structure. You can subscribe monthly for $10, annually for $60, or pay a one-time fee of $200 to get a lifetime subscription and keep using the VPN forever.
- Surfshark was the fastest VPN with download speed reaching 728Mbps. VPN Unlimited’s best speed was a fast 595Mbps for a U.S. server. Overseas connections were significantly slower.
- Both VPNs offer advanced features like kill switches to stop unprotected internet use, split-tunneling to exclude select apps from the VPN for optimal speed, and more.
- Surfshark offers quick, friendly live chat that’s available all day, every day. VPN Unlimited offers 24/7 email support.
- Both VPNs have privacy policies that state none of your personal data is shared or sold to third-party advertisers.
- Overall, Surfshark is the top pick for the best long-term VPN. VPN Unlimited has the potential to be the most affordable VPN ever, but you have to keep using it for many years to recover your initial investment.
- It’s worth doing some research to find the best VPN for your particular needs.
Read Full Article
18 Likes
Securityaffairs
3d
221
Image Credit: Securityaffairs
Sophos fixed critical vulnerabilities in its Firewall product
- Sophos has fixed three critical vulnerabilities in its Firewall product.
- The vulnerabilities allowed for SQL injection, privileged SSH access, and remote code execution.
- The vulnerabilities affected Sophos Firewall v21.0 GA and older versions.
- Sophos recommends specific mitigations to address the vulnerabilities.
Read Full Article
13 Likes
Dev
3d
164
Image Credit: Dev
Security news weekly round-up - 20th December 2024
- A supply chain attack targeted security professionals, stealing 390K credentials.
- Phishing attack abuses Google Calendar to bypass spam filters.
- 'Fix It' social-engineering scheme impersonates several brands.
- Android malware found on Amazon Appstore disguised as health app.
Read Full Article
9 Likes
Dev
3d
253
Image Credit: Dev
6 Ways to Prevent Triangulation Fraud
- Triangulation fraud is a sophisticated card-not-present (CNP) fraud that involves the criminal inserting themselves between a genuine buyer and the retailer.
- The fraudster impersonates a genuine seller by creating a believably similar e-commerce website or marketplace storefront.
- The spoofed brand website or marketplace storefront will offer deals that are almost too good to be true to get the client's attention.
- When a client orders from the fake website, the fraudster uses stolen credit cards to order the products from the legitimate merchant and sets the shipping address to that of the legitimate buyer.
- Upon discovering the fraudulent transaction, the compromised cardholder demands a chargeback and the merchant will be forced to refund the money.
- Merchant losses attributed to e-commerce fraud were estimated at $44.3 billion in 2024; projected to inflate to a dizzying $107 billion in 2029.
- Employ real-time fraud detection and monitoring tools, machine learning and AI models to hunt down fraud in real-time.
- Use robust authentication methods for user accounts and strict password policies to harden transaction security policies.
- Use threat intelligence to implement additional product protections and automatic updates to your application deny lists to ban known fraudsters.
- Implement risk-based order verification, which identifies identity threats like mismatched personal details.
- Clone-proof your storefront by monitoring for potential website scrapers and deploy honeypot traps and decoy information to discourage fraudsters from targeting your online shop.
Read Full Article
15 Likes
Dev
3d
148
Image Credit: Dev
Decoding IP Addresses: Mastering Subnet Mask and CIDR Notation
- IP addresses serve the purpose of identification in networking.
- IPv4 addresses consist of 32 bits divided into 4 segments.
- The 32 bits are divided into the Network portion and the Host portion.
- Subnet mask is used to define the Network and Host portions of an IP address.
Read Full Article
8 Likes
Pymnts
3d
289
Image Credit: Pymnts
This Week in AI: Security Flaw Exposes AI Giants While Robot Workers Get Upgrade
- Security researchers demonstrated a security vulnerability in AI systems, stealing AI models through electromagnetic signals.
- MIT developed PRoC3S, an AI system to enhance warehouse robot capabilities for handling odd-shaped packages.
- Three nations, including the US, Malaysia, and the UK, launched AI oversight initiatives and regulations.
- Google released Gemini 2.0, a more autonomous AI system for handling complex tasks across multiple platforms.
Read Full Article
17 Likes
TechCrunch
3d
334
Image Credit: TechCrunch
Third member of LockBit ransomware gang has been arrested
- U.S. prosecutors have publicly announced the arrest of Rostislav Panev, a dual Russian-Israeli national, who is accused of being a key developer in the LockBit ransomware gang.
- Panev is currently in Israeli custody and faces extradition to the United States.
- LockBit is a notorious ransomware gang responsible for launching cyberattacks on thousands of companies worldwide and is believed to have received at least $500 million in ransom payments.
- This is the third arrest related to the LockBit gang after the capture of Mikhail Vasiliev in Canada in 2022 and Ruslan Astamirov in the U.S. in 2023.
Read Full Article
20 Likes
For uninterrupted reading, download the app