A naukri.com initiative
Cyber Security News
Infoblox
4w
396
Image Credit: Infoblox
The FBI Warns of a Smishing Epidemic: How to Protect Yourself and How Protective DNS Helps
- The FBI has warned about the rise of smishing attacks, where cybercriminals are using text messages to deceive individuals into clicking malicious links.
- Smishing attacks exploit trust in text messages and impersonate various entities to trick victims into disclosing personal or financial information.
- Factors contributing to the growth of smishing attacks include increased mobile usage, bypassing email security measures, psychological manipulation, and the use of automation tools by cybercriminals.
- To protect against smishing, individuals should be skeptical of unexpected texts, watch for red flags, enable multi-factor authentication, use security software, and report suspicious messages.
- Protective DNS, like Infoblox Threat Defense, can stop smishing attacks by preemptively blocking DNS requests to fraudulent domains, preventing various threats such as credential theft and malware downloads.
- Infoblox goes beyond basic threat detection by focusing on identifying entire threat actor groups and their infrastructure, disrupting their operations and significantly reducing the effectiveness of attacks.
- A multi-layered approach combining user education, MFA, protective DNS, and threat intelligence is crucial to defend against smishing and other cyber threats.
- Infoblox offers advanced solutions to assist organizations in enhancing their cybersecurity posture and defending against evolving cyber threats like smishing.
Read Full Article
23 Likes
Medium
4w
49
Image Credit: Medium
Online Shopping… Is It Safe?
- Shop on familiar sites to avoid surprises and be wary of misspelled or fraudulent domains.
- Look for secure websites with 'https://' at the beginning of the URL.
- Use a credit card instead of a debit card for better fraud protection.
- Be cautious of extremely low prices and unfamiliar websites as they may be phishing schemes.
Read Full Article
2 Likes
Medium
4w
298
Image Credit: Medium
How To Respond to Your Child’s Cyber Ethics Mistake
- Kids in the Digital Age can make bad decisions online easily, needing guidance from Digital Parents on consequences and risks.
- Starting early, parents must educate children about online privacy, stranger danger, and cyber ethics to build awareness and protection.
- Continuously discussing technology and online behavior from childhood to teenage years helps kids develop responsible tech habits.
- Maintaining open communication with children is crucial to provide guidance and support in the complex digital world.
- Parents should address cyber ethics mistakes by holding children accountable while using them as learning opportunities.
- Avoid shaming children for online mistakes and focus on discussions about privacy, relationships, and consequences.
- In cases of exploitation, involving other parties like parents, school officials, and law enforcement may be necessary to address the situation.
- Using harsh punishments or public shaming can have negative impacts on children, leading to anxiety and fear of making mistakes.
- Encouraging open dialogue and supporting children through mistakes helps them learn and grow positively from their experiences.
- The key is to nurture trust and understanding, allowing children to navigate the digital world while learning from their missteps.
- Effective parenting involves guiding children through cyber ethics issues with empathy, communication, and a focus on continuous learning and growth.
Read Full Article
17 Likes
Hackernoon
4w
218
Image Credit: Hackernoon
SpyCloud’s 2025 Identity Exposure Report: The Scale And Hidden Risks Of Digital Identity Threats
- SpyCloud's 2025 Annual Identity Exposure Report emphasizes the growing threat of darknet-exposed identity data to enterprises.
- Cybercriminals leverage stolen data from various sources, requiring a shift to a holistic defense strategy by organizations.
- SpyCloud's darknet data collection has grown by 22%, comprising over 53.3 billion distinct identity records and 750+ billion stolen assets.
- Identity risks have evolved, empowering attackers to exploit vast arrays of personal and professional credentials, financial data, and more.
- An individual's identity exposure is a complex web of assets, allowing cybercriminals to bypass security barriers and access valuable information.
- Businesses face concerns as corporate users have an average of 146 stolen records linked to their identity, while consumers have 229 records per user.
- The report highlights breaches, infostealer malware, and phishing campaigns contributing to the pool of exposed identity data.
- Findings include the recapture of 17.3 billion cookies, 548 million credentials via malware, and a 125% increase in recaptured passwords in 2024.
- SpyCloud emphasizes the need for evolving cybersecurity strategies using holistic identity analytics to combat identity-based threats effectively.
- The comprehensive 2025 SpyCloud Identity Exposure Report provides further insights on the evolving cyber risks and preventive measures.
Read Full Article
13 Likes
Hackernoon
4w
71
Image Credit: Hackernoon
SecPod Launches Saner Cloud: A Revolutionary CNAPP For Preventive Cybersecurity
- SecPod has launched Saner Cloud, a Cloud-Native Application Protection Platform for automated remediation and workload security.
- Saner Cloud provides real-time and automated security across multi-cloud environments.
- It integrates AI-driven automation to remediate threats and offers a unified security platform.
- Saner Cloud secures endpoints, servers, network infrastructure, cloud environments, and cloud workloads from a single platform.
Read Full Article
4 Likes
Mjtsai
4w
254
Apple Passwords Phishing Vulnerability
- A serious HTTP bug in Apple Passwords left users vulnerable to phishing attacks for nearly three months.
- Security researchers at Mysk discovered the flaw, which allowed attackers to intercept HTTP requests.
- The bug was quietly patched in December, but Apple only recently disclosed the vulnerability.
- Mysk, the researchers who found the bug, did not receive a bounty from Apple for their discovery.
Read Full Article
15 Likes
VentureBeat
4w
276
Image Credit: VentureBeat
Nvidia’s Cosmos-Transfer1 makes robot training freakishly realistic—and that changes everything
- Nvidia has introduced Cosmos-Transfer1, an AI model facilitating the creation of realistic simulations for training robots and autonomous vehicles, addressing the gap between simulations and real-world applications.
- Cosmos-Transfer1 enables precise control over visual inputs in the simulated environments, enhancing their realism and utility, unlike traditional simulation models.
- It allows developers to generate photorealistic simulations using multimodal inputs like depth maps, segmentation, and edge detection, preserving scene aspects while adding natural variations.
- In robotics, developers can retain control over robotic arm movements while having creative freedom in background environment generation, showcasing the adaptability of Cosmos-Transfer1 in various applications.
- The technology enhances the photorealism of robotics simulations, improves scene details, shading, illumination, and preserves the physical dynamics of robot movement.
- For autonomous vehicles, Cosmos-Transfer1 is essential for handling diverse scenarios without encountering them on actual roads and allows vehicles to learn rare critical situations.
- Nvidia's Cosmos platform includes Cosmos-Predict1 and Cosmos-Reason1, aiming to assist physical AI developers in building AI systems more efficiently.
- Cosmos-Transfer1's real-time performance on Nvidia hardware provides significant speedup in world generation, enabling rapid testing and iteration cycles in autonomous system development.
- Nvidia's decision to release Cosmos-Transfer1 and its code on GitHub promotes accessibility to simulation technology, benefiting smaller teams and researchers in physical AI development.
- By sharing tools like Cosmos-Transfer1, Nvidia aims to foster developer communities and accelerate advancements in physical AI development, potentially shortening development cycles for engineers.
- While open-sourcing technology like Cosmos-Transfer1 enhances accessibility, effective utilization still requires expertise and computational resources, underlining the complexity of AI development.
Read Full Article
16 Likes
Dev
4w
84
Image Credit: Dev
Stay Ahead of Threats: Master Governance, Risk, and Compliance with Microminder
- Governance, Risk, and Compliance (GRC) is crucial for businesses in managing digital assets, mitigating risks, and ensuring compliance.
- GRC integrates governance, risk management, and compliance strategies to align business objectives with operational practices.
- Effective GRC enhances decision-making, minimizes risks, ensures compliance, and boosts organizational reputation.
- Microminder Cyber Security offers tailored GRC solutions focusing on governance, risk management, and compliance alignment.
- Clear governance structures at Microminder define roles, enhance accountability, and set expectations within organizations.
- Microminder's risk management strategies include risk assessment, mitigation measures, and continuous monitoring of organizational risks.
- The company assists in regulatory compliance through mapping, program development, and audit support to address compliance gaps effectively.
- GRC implementation benefits include cost reduction, operational efficiency improvement, and enhanced stakeholder confidence.
- Microminder's approach involves customized consulting, cybersecurity integration, and continuous improvement for GRC success.
- Challenges in GRC include regulatory complexity, integration difficulties, and resource constraints, which can be overcome with best practices like leadership commitment and regular training.
Read Full Article
5 Likes
Cybersecurity-Insiders
4w
17
Image Credit: Cybersecurity-Insiders
Implementing Least Privilege Access for Enhanced Data Security
- The principle of least privilege (PoLP) is a security measure that ensures systems, apps, and users have minimal access for tasks, aiding data security.
- Least privilege ensures that any user, program, or process has only the necessary system and network access for its function.
- Implementing the least privilege concept is crucial for improving data security by safeguarding assets and data.
- Minimum access policies are essential to prevent data breaches caused by human error, especially for businesses using outside vendors or contractors with remote access.
- Examples of applying least privilege access include setting up user accounts with minimal privileges and time-based access for critical activities.
- Benefits of least privilege include reducing attack surface, enhancing operational efficiency, reducing malware propagation, ensuring network stability, enhancing compliance, and mitigating insider risks.
- Best practices for implementing least privilege involve establishing default privilege policies, conducting audits, providing situation-based access, identifying high-level functions, monitoring network activity, and implementing separation of privileges.
- By following these best practices, businesses can enhance operational security, comply with requirements, and protect privileged accounts, data, and assets.
- Implementing the principle of least privilege balances security and productivity, reduces the attack surface, and fosters a strong security culture within organizations.
- Author Aidan Simister, CEO of Lepide, with over 20 years of IT experience, specializes in cybersecurity and aiding companies in securing sensitive data.
Read Full Article
1 Like
TechBullion
4w
334
Image Credit: TechBullion
How Pritam Mukherjee Ensures IT Application and Data Security and GRC for America’s Largest State Public Power Organization
- Pritam Mukherjee leads IT (SAP) Application and Data Security, Governance, and Compliance at NYPA, ensuring data security and leveraging advanced technologies for digital transformation.
- He has expertise in IT Application Security, GRC, AI, ML, and Fintech and led the design and management of SAP security solutions across multiple business processes.
- Pritam presented a case study at the 2023 Americas’ SAP Users’ Group (ASUG) conference and is focused on sustainable energy development through AI and ML technologies.
- With a Master's in Financial Innovation and Technology, he emphasizes the importance of data protection and security mechanisms in digitization journeys.
- Pritam navigates challenges in application security, highlighting the difficulties in legacy systems, vendor limitations, and balancing security controls with business needs.
- He stresses proactive risk identification and assessment as crucial to avoiding detrimental impacts and ensuring compliance with industry regulations.
- Incorporating GRC measures and aligning with regulatory compliance, Pritam aims to create secure and sustainable products in the clean energy sector.
- He advocates a security-conscious culture within organizations, emphasizing the role of training, awareness, and leadership commitment in fostering a proactive security approach.
- Pritam highlights the importance of staying current on new threats, regulations, and emerging risks in the digital landscape, especially concerning AI-driven systems.
- He discusses the significance of AI risk assessments, governance policies tailored to AI, and creating accountability frameworks for AI decision-making to address compliance challenges.
- By promoting security awareness and fostering a shared responsibility for cybersecurity, organizations can lower risks and enhance resilience against cyber threats.
Read Full Article
20 Likes
Cybersecurity-Insiders
4w
115
Image Credit: Cybersecurity-Insiders
New research shows we need to rethink approach to resilience and security, says leading tech firm
- New research shows most people feel organisations do not invest enough in cybersecurity
- Cyber-attacks remain one of the leading threats to critical national infrastructure
- Satellite IoT connectivity plays a crucial role in enhancing cyber resilience for mission-critical applications
- 82% of respondents believe organizations are not investing enough in cybersecurity for critical national infrastructure
Read Full Article
6 Likes
Digitaltrends
4w
80
Image Credit: Digitaltrends
Apple just patched a security flaw left users open to phishing attacks
- Apple has released a security update to address a critical vulnerability in the Apple Password App.
- The security flaw allowed unauthorized access to stored usernames and passwords.
- The patch ensures the Password app only uses HTTPS connections by default.
- Users are advised to update their iOS to at least version 18.2 to mitigate the risk.
Read Full Article
4 Likes
Hackernoon
4w
133
Image Credit: Hackernoon
Knocknoc Raises Seed Funding To Scale Its Just-In-Time Network Access Control Technology
- Knocknoc, a cybersecurity software company, has raised seed funding from Decibel Partners.
- The funding will support go-to-market, customer onboarding, and product development.
- Knocknoc's technology ties network access to SSO authentication status, reducing risk exposure.
- The company is already being used in critical infrastructure, telecommunications, and media companies.
Read Full Article
8 Likes
Dev
4w
214
Image Credit: Dev
WhoWeB Scanner - Simple Website Scanner Tool
- WhoWeB Scanner is a simple yet powerful website scanning tool designed to gather basic information about a website.
- Features of WhoWeB Scanner include extracting all links from a webpage, detecting cookies used, retrieving website IP address and country, finding email addresses, checking for Apache server and PHP usage, identifying the presence of Google Analytics, detecting frames on the webpage, listing uncommon HTTP headers, and displaying page title and the number of meta tags.
- To use the scanner, you need to have Python 3.x installed on your system and install the required libraries using pip.
- Please note that unauthorized scanning of websites may violate their terms of service, so the tool should be used responsibly for educational and research purposes.
Read Full Article
12 Likes
Medium
4w
263
Image Credit: Medium
Unpacking Algorithmic Bias and Privacy: The Hidden Challenges of AI in a Data-Driven World
- Algorithms, intended to be fair and objective, can perpetuate and magnify existing biases, impacting critical sectors like employment and healthcare.
- Addressing algorithmic bias and privacy requires a collaborative, multidisciplinary approach.
- Real-world examples of algorithmic bias include biased job application screening and racial profiling by law enforcement.
- Privacy professionals must balance the need for effective data use with ethical considerations to mitigate the risks of algorithmic bias.
Read Full Article
15 Likes
For uninterrupted reading, download the app