Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for How to Turn Off VPN ...

 How to

As working professionals and students who value our privacy in today’s digital world, many of us rely on VPN services to secure our online activities and locations. However, it is inevitable that sometimes one needs to disable VPN access, perhaps for certain apps that do not allow VPN connections. Luckily, turning   show more ...  

off VPN on iPhone is quite straightforward, though it can still confuse new users who aren't familiar with iOS networking settings. In this guide, we'll outline simple methods to disconnect from a VPN in iOS, ranging from temporarily disabling the VPN to completely removing the VPN profile. How to Disable VPN On iPhone 11? To disable VPN on an iPhone 11, you can follow these steps: 1) Open Settings: Tap on the "Settings" app icon on your iPhone's home screen to open the Settings menu. 2) Navigate to VPN Settings: Scroll down the Settings menu and locate the "VPN" option. Tap on it to access the VPN settings. 3) Turn Off VPN: In the VPN settings menu, you'll see a toggle switch next to the VPN connection you're currently using. Simply toggle the switch to the "Off" position to disable the VPN connection. 4) Confirm Deactivation: A prompt may appear asking you to confirm that you want to disconnect from the VPN. Tap on "Disconnect" or "Turn Off" to confirm and disable the VPN connection 5) Verify Disconnection: Once the VPN connection is disabled, you can verify that it's turned off by checking the VPN status indicator in the status bar at the top of the screen. If the VPN icon disappears from the status bar, the VPN is successfully disabled. 6) Close Settings: After disabling the VPN, you can exit the Settings app by pressing the home button or using the swipe-up gesture to return to the home screen. Following these steps, you can easily disable the VPN on your iPhone 11 and resume browsing the internet without a VPN connection. How to Disable VPN On iPhone 12? Disabling a VPN on your iPhone 12 is a straightforward process that allows you to disconnect from the VPN network temporarily. While VPNs offer numerous benefits such as enhanced security and privacy, there are instances where you might need to turn off your VPN. Knowing how to disable your VPN is essential if you're experiencing connectivity issues, need to access region-specific content, or simply want to conserve battery life. Below, we'll guide you through the steps to disable VPN on your iPhone 12. Access Settings: Begin by unlocking your iPhone 12 and locating the "Settings" app on your home screen. Tap on the "Settings" icon to open the Settings menu. Navigate to VPN Settings: In the Settings menu, scroll down until you find the "VPN" option. Tap on "VPN" to access the VPN settings on your device. Disable VPN Connection: Within the VPN settings menu, you'll see a list of configured VPN connections, if any. Locate the VPN connection you wish to disable and tap the toggle switch next to it. This switch allows you to turn the VPN connection on or off. Simply toggle the "Off" switch to disable the VPN connection. Confirm Disconnection: Depending on your VPN configuration, you may be prompted to confirm that you want to disconnect from the VPN network. If prompted, tap the confirmation button to disable the VPN connection. Verify Disconnection: After disabling the VPN, you can verify that it's been successfully disconnected by checking the status bar at the top of your iPhone's screen. If the VPN icon disappears from the status bar, it indicates that the VPN connection has been disabled. Close Settings: Once you've disabled the VPN connection, you can exit the Settings app by pressing the home button or using the swipe-up gesture to return to the home screen. Following these steps, you can easily disable the VPN on your iPhone 12 whenever needed. Whether you're troubleshooting network issues or switching between different online activities, turning off your VPN provides you with greater flexibility and control over your device's network connectivity. How to Disable VPN On iPhone 13? Disabling a VPN on your iPhone 13 is a simple process that allows you to disconnect from the VPN network when needed. While VPNs offer various benefits such as enhanced security and privacy, there are situations where you may want to turn off your VPN. Whether you're experiencing connectivity issues, accessing region-specific content, or conserving battery life, knowing how to disable your VPN is essential. Here's how you can do it on your iPhone 13: Access Settings: Unlock your iPhone 13 and locate the "Settings" app on your home screen. Tap on the "Settings" icon to open the Settings menu. Navigate to VPN Settings: Scroll down the Settings menu until you find the "VPN" option. Tap on "VPN" to access the VPN settings on your device. Disable VPN Connection: Within the VPN settings menu, you'll see a list of configured VPN connections, if any. Find the VPN connection you want to disable and tap on the toggle switch next to it. This switch allows you to turn the VPN connection on or off. Toggle the switch to the "Off" position to disable the VPN connection. Confirm Disconnection: Depending on your VPN configuration, you may be prompted to confirm that you want to disconnect from the VPN network. If prompted, tap the confirmation button to disable the VPN connection. Verify Disconnection: After disabling the VPN, verify it's been successfully disconnected by checking the status bar at the top of your iPhone's screen. If the VPN icon disappears from the status bar, it indicates that the VPN connection has been disabled. Close Settings: Once you've disabled the VPN connection, exit the Settings app by pressing the home button or using the swipe-up gesture to return to the home screen. By following these steps, you can easily disable the VPN on your iPhone 13 whenever necessary. Whether you're troubleshooting network issues or switching between different online activities, having the ability to turn off your VPN provides you with greater flexibility and control over your device's network connectivity. How to Turn Off VPN on iPhone 14? To turn off the VPN on your iPhone 14, follow these steps: Open Settings: Unlock your iPhone 14 and navigate to the home screen. Look for the "Settings" app, which typically features a gear icon, and tap to open it. Access VPN Settings: Scroll down the Settings menu and locate the "VPN" option. Tap on it to access the VPN settings on your device. Toggle Off VPN Connection: Within the VPN settings menu, you'll see a list of configured VPN connections, if any. Find the VPN connection you want to disable and locate the toggle switch next to it. Tap the toggle switch to turn off the VPN connection. The switch will change to the "Off" position, indicating that the VPN connection is disabled. Confirm Disconnection (if prompted): Depending on your VPN configuration, you may be prompted to confirm that you want to disconnect from the VPN network. If prompted, tap the confirmation button to disable the VPN connection. Verify Disconnection: After disabling the VPN, verify it's been successfully disconnected by checking the status bar at the top of your iPhone's screen. If the VPN icon disappears from the status bar, it indicates that the VPN connection has been turned off. Exit Settings: Once you've disabled the VPN connection, exit the Settings app by pressing the home button or using the swipe-up gesture to return to the home screen. Following these steps, you can easily turn off the VPN on your iPhone 14 whenever needed. Whether you're experiencing connectivity issues or want to browse without a VPN, disabling the VPN provides greater control over your device's network settings. VPN Won't Turn Off On iPhone, What To Do? If your VPN won't turn off on your iPhone, you can try the following troubleshooting steps to resolve the issue: 1) Restart Your iPhone: A simple restart can sometimes fix minor software glitches. Press and hold the power button until the "slide to power off" slider appears. Slide it to power off your iPhone, then press and hold the power button again until the Apple logo appears to restart your device. 2) Force Close VPN App: If you're using a VPN app to connect, force close the app and try turning off the VPN again. Double-click the Home button or swipe up from the bottom of the screen (on iPhones without a Home button) to view the app switcher. Swipe up on the VPN app's preview to force close it. Then, return to the Settings app and try turning off the VPN again. 3) Check VPN Settings: Go to the Settings app on your iPhone and navigate to the VPN settings. Verify that the VPN connection you're trying to turn off is listed there. If you don't see it, it may indicate that the VPN connection isn't active, or it might be configured differently. 4) Toggle Airplane Mode: Enable Airplane Mode temporarily by swiping down from the top-right corner of the screen to open Control Center, then tapping the airplane icon. After a few seconds, disable Airplane Mode by tapping the icon again. This action can sometimes reset network settings and resolve connectivity issues, including VPN problems. 5) Reset Network Settings: If the issue persists, you can try resetting your iPhone's network settings. Go to Settings > General > Reset > Reset Network Settings. This will reset Wi-Fi networks, passwords, cellular settings, and VPN configurations. After performing this reset, note that you'll need to re-enter Wi-Fi passwords and reconfigure any VPN connections. 6) Update iOS: Ensure that your iPhone is running the latest version of iOS. Go to Settings > General > Software Update to check for and install any available updates. Updating iOS can address known bugs and compatibility issues that may be causing problems with the VPN. 7) Contact VPN Provider: If none of the above steps resolve the issue, contact your VPN provider's support team for assistance. They can offer troubleshooting tips specific to their service or help diagnose any issues with your VPN configuration. By following these steps, you can resolve the issue of the VPN not turning off on your iPhone. If the problem persists, consider seeking further assistance from Apple Support or your VPN provider. When Would You Need To Turn Off a VPN? There are several scenarios in which you might need to turn off a VPN: Accessing Local Services: Some local services or devices, such as printers, network drives, or smart home devices, may only be accessible when connected directly to your local network. Turning off the VPN allows you to access these services without routing your traffic through remote servers. Troubleshooting Connectivity Issues: If you encounter network connectivity issues or slow internet speeds while using a VPN, turning it off temporarily can help identify whether the VPN is causing the problem. This allows you to troubleshoot network issues more effectively. Using Specific Applications: Certain applications or online services may not function properly when accessed through a VPN. Turning off the VPN enables you to use these applications without any compatibility issues or performance degradation caused by the VPN connection. Accessing Region-Restricted Content: Some websites and online services restrict access based on the user's geographic location. Turning off the VPN allows you to access region-restricted content that may be blocked or unavailable when using a VPN with a different location. Improving Gaming Performance: VPNs can introduce latency, which may affect the performance of online gaming, particularly in competitive multiplayer games where fast response times are crucial. Disabling the VPN can reduce latency and improve gaming performance. Avoiding Captchas and Verification Checks: Certain websites and online services use Captchas or verification checks to prevent automated access or suspicious activity. VPN usage may trigger these security measures, leading to frequent captchas or verification prompts. Turning off the VPN can help avoid these interruptions. Conserving Battery Life: Using a VPN on mobile devices can consume additional battery power due to continuous encryption and decryption of data traffic. Turning off the VPN when not needed can help conserve battery life and extend the device's runtime. While VPNs offer numerous benefits in terms of privacy, security, and online freedom, there are situations where temporarily turning off the VPN may be necessary or advantageous for specific tasks or activities. Why Would You Need To Turn Off a VPN? There are several reasons why you might need to turn off a VPN, despite the security and privacy benefits it provides: 1) Accessing Local Content: Some websites and online services restrict access to users connecting from specific regions or countries. Turning off the VPN allows you to access local content that may be blocked or restricted when using a VPN with a different geographic location. 2) Troubleshooting Network Issues: If you encounter connectivity issues or slow internet speeds while using a VPN, disabling it temporarily can help troubleshoot the problem. This allows you to determine whether the VPN is causing the issue or if there's another underlying problem with your network connection. 3) Using Specific Applications: Certain applications or online services may not work correctly when accessed through a VPN. Turning off the VPN allows you to use these applications without any compatibility issues or performance issues caused by the VPN connection. 4) Improving Gaming Performance: VPNs can sometimes introduce latency and affect the performance of online gaming, particularly in competitive multiplayer games where fast response times are essential. Disabling the VPN while gaming can reduce latency and improve overall gaming performance. 5) Avoiding Captchas and Verification Checks: Some websites and online services use captchas or verification checks to prevent automated access or suspicious activity. VPNs may trigger these security measures, leading to frequent captchas or verification prompts. Turning off the VPN can help avoid these interruptions and streamline the browsing experience. 6) Accessing Local Network Resources: In certain scenarios, such as accessing network printers or shared drives within your local network, you may need to turn off the VPN to establish a direct connection to these resources without routing traffic through remote servers. 7) Conserving Battery Life: Using a VPN can consume additional battery power on mobile devices, as it requires continuous encryption and decryption of data traffic. Disabling the VPN when not actively needed can conserve battery life and prolong the device's runtime. Overall, while VPNs offer significant advantages in terms of security, privacy, and online freedom, there are situations where temporarily turning off the VPN may be necessary or beneficial for specific purposes or activities. What Happens When You Turn Off a VPN? When you turn off a VPN, you're essentially removing the protective shield that encrypts your internet connection and hides your IP address. This action has several implications for your online privacy, security, and browsing experience: Exposure to Surveillance: Without a VPN, your online activities become visible to your internet service provider (ISP) and potentially other third parties. This exposure increases the risk of targeted advertising, tracking, and surveillance. Your ISP can monitor your browsing habits and collect data on your online behavior, potentially compromising your privacy. Vulnerability to Cyber Threats: Turning off a VPN exposes you to various cyber threats, such as phishing attacks, identity theft, and malicious hacking attempts. Without encryption, your sensitive information, including login credentials and personal data, is susceptible to interception by cybercriminals. This vulnerability is particularly concerning when using public Wi-Fi networks, where hackers often lurk to exploit unprotected connections. Decreased Privacy: With the VPN deactivated, your online activities are no longer encrypted, making it easier for third parties to track your movements and behavior online. Your browsing history, search queries, and website visits are exposed, compromising your privacy and anonymity online. Impact on Internet Speed: While VPNs can sometimes cause a slight reduction in internet speed due to traffic rerouting through remote servers, they also offer benefits such as bypassing censorship and accessing geo-blocked content. Without a VPN, you may experience faster data transfers and downloads, but you lose the added layer of security and privacy protection the VPN provides. Loss of Geo-Spoofing: Many users rely on VPNs to bypass geographic restrictions and access content blocked in their region. When you turn off the VPN, you lose the ability to spoof your location and access region-locked content on streaming platforms and websites. Turning off a VPN exposes you to various risks, including surveillance, cyber threats, and loss of privacy. While it may result in faster internet speeds and more stable connectivity in some cases, it comes at the expense of compromising your online security and anonymity. Therefore, weighing the trade-offs and considering the potential consequences before disabling your VPN is essential. The Bottom Line! Knowing how to turn off VPN on your iPhone can be extremely helpful and convenient. With just a few simple steps, you can easily disable your VPN and regain access to certain websites or apps that may have been restricted. Whether you no longer need the added layer of security or simply want to switch servers for a better connection, being able to turn off your VPN on your iPhone is a valuable skill to have. By following the step-by-step guide provided in this blog post, you can confidently navigate your device's settings and make any necessary changes to your VPN preferences. Furthermore, understanding how VPN works and its benefits can also improve your overall digital privacy and security. By using a VPN, you can encrypt your internet connection and protect your sensitive data from potential hackers or cyber attacks. It also allows you to bypass geo-restrictions and access region-locked content from anywhere in the world. Key Highlights You'll see a toggle switch in the VPN settings next to "VPN." Tap on the toggle switch to turn off the VPN connection. You can verify that VPN is turned off by rechecking the VPN settings. If the toggle switch is in the off position, VPN is successfully disabled. Turning off VPN on your iPhone reverts your internet connection to its regular state, allowing you to browse the web without VPN encryption. If you ever need to use VPN again, you can easily turn it back on by following the same steps and toggling the switch to the on position. FAQ's Q1: How do I turn off VPN on my iPhone? A: To disable VPN on your iPhone, go to Settings, tap on VPN, and toggle the VPN switch to the off position. Q2: Can I turn off VPN temporarily on my iPhone? A: Yes, you can easily turn off VPN temporarily on your iPhone by following the same steps and toggling the VPN switch to the off position. You can turn it back on whenever needed. Q3: Will turning off VPN affect my internet connection? A: Disabling VPN on your iPhone will revert your internet connection to its regular state, allowing you to browse the web without routing through the VPN server. Q4: How do I know if VPN is turned off on my iPhone? A: You can verify if VPN is turned off on your iPhone by checking the VPN settings in the Settings app. If the VPN switch is toggled to the off position, VPN is disabled.

image for Massive PandaBuy Dat ...

 Data Breach News

The popular online shopping platform PandaBuy allegedly fell victim to a massive data breach, leaving over 1.3 million users affected. The PandaBuy data breach was posted on a dark web forum in collaboration with two threat actors — Sanggiero and IntelBroker. The two hackers exploited vulnerabilities within   show more ...  

PandaBuy's systems, including critical flaws in its API. These weaknesses granted unauthorized access to sensitive user data, including user IDs, names, contact details, login IP addresses, and order histories. Alleged PandaBuy Data Breach Claims on Dark Web [caption id="attachment_60886" align="alignnone" width="1708"] Source: Dark Web[/caption] PandaBuy, renowned for enabling overseas consumers to purchase products from Chinese e-commerce giants like Tmall, Taobao, and JD.com, has not confirmed the data breach. Howeer, Microsoft Regional Director, Troy Hunt confirmed that the leaked data “did indeed come from Pandabuy”. Hunt also revealed that the sample data provided by the hackers had “made-up email addresses” that were not part of the original leak, which proves that the threat actors' claim of the "3 million" was an exaggeration and the leaked data was limited to 1.3 Million accounts.  [caption id="attachment_60910" align="alignnone" width="752"] Source: Troy Hunt on X[/caption] The PandaBuy data breach came to light when 'Sanggiero' posted about the incident on March 31, 2024, announcing the leaked download of the PandaBuy database on a hacking forum. The threat actor post reads, In April 2024, almost 3M+ rows of data from the store company Pandabuy was posted to a popular hacking forum. The data was stolen by exploiting several critical vulnerabilities in the platform's API and other bugs were identified allowing access to the internal service of the website.” Decoding the Sample Data Along with the post for the PandaBuy data breach, the threat actor Sanggiero, shared a string of sample data while conversing with other forum members. The Cyber Express analyzed this sample data and found a structured dataset of order inquiries from the PandaBuy platform.  Each line within the dataset represents a customer inquiry regarding their orders, providing insights into various aspects such as order cancellations, size adjustments, shipping updates, refunds, and order status queries. The Cyber Express has reached out to the e-commerce organization to learn more about this PandaBuy data breach. However, at the time of writing this, no official statement or response has been received, leaving the claims for the PandaBuy data leak unconfirmed. The Involvement of IntelBroker  The likelihood of this PandaBuy data breach being true is because IntelBroker, a solo hacker, is also involved in the incident. For its records, IntelBroker has claimed many cyberattacks and a majority of them have been proven true. Moreover, in an exclusive interview with the hacker, TCE found out the hacker had been working alone and had claimed data breaches on organizations like Los Angeles Airport. Discussing his modus operandi with TCE, IntelBroker discussed his hacking journey, dispelled misconceptions, and addressed involvement with CyberNiggers.  The hacker highlighted breaches that deserved more attention and shared insights into the deep dark web and data breaches. The hacker advocates transparency in handling cybersecurity incidents and admires Sanggiero from BreachForums for their contributions. As for the PandaBuy data breach, this is an ongoing story and The Cyber Express will be closely monitoring the situation. We'll update this post once we have more information on the alleged Pandabuy data breach or any official confirmation from the organization.  Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.

image for MarineMax Data Breac ...

 Data Breach News

In March 2024, MarineMax, a prominent yacht retailer in Florida, USA, confirmed a cybersecurity incident. It fell victim to a data breach orchestrated by the Rhysida ransomware group. The MarineMax data breach compromised both employee and customer data. Initially disclosed in a filing with the Securities and Exchange   show more ...  

Commission (SEC) on March 12, MarineMax reassured stakeholders that sensitive data wasn't stored within the compromised systems. However, a subsequent filing on April 1st, 2024, revealed a more concerning situation. It disclosed that personal data belonging to an unspecified number of individuals had indeed been stolen during the MarineMax data breach. MarineMax Data Breach Unfolded into Multiple Layers [caption id="attachment_60828" align="alignnone" width="1356"] Source: sec.gov[/caption] In the filings, MarineMax detailed the incident, mentioning the immediate implementation of incident response and business continuity protocols upon detection of the cyberattack. This action, although causing some disruption to business operations, aimed to contain the breach effectively. "The Company has determined that a cybercrime organization accessed a limited portion of our information environment associated with our retail business," MarineMax stated. An ongoing investigation, aided by external cybersecurity experts, is underway to ascertain the full extent of the breach.  MarineMax confirmed that a cybercrime group, later identified as the Rhysida ransomware group, had breached their systems and exfiltrated limited data, including customer and employee information. The company pledged to notify potentially affected parties and regulatory agencies as mandated by law, with law enforcement authorities already notified. The Cyber Express has reached out to the Florida-based yacht retailer to learn more about this MarineMax data breach, and any mitigation strategies for future threats. However, at the time of writing this, no official statement or response has been provided except the information mentioned in the SEC filings.  The Rise of Rhysida Ransomware Group Despite the MarineMax data leak incident, the organization clarified that its operations continued without impact at the time of filing. However, the company remained vigilant, evaluating potential future impacts on its financial standing. [caption id="attachment_60822" align="alignnone" width="750"] Source: Dark Web[/caption] The Rhysida ransomware group, infamous for its double extortion tactics, claimed responsibility for the breach and posted MarineMax's data on its data leak site. The group demanded a ransom of 15 BTC (approximately $774,415.65 at the time) within a specified timeframe, threatening to sell the data if payment wasn't made. [caption id="attachment_60824" align="alignnone" width="750"] Source: Dark Web[/caption] Known for posing as cybersecurity experts to infiltrate networks, Rhysida employs various tactics, including phishing attacks and the use of malware like Cobalt Strike for lateral movement within infected systems. The group's activity, first observed in May 2023, has drawn the attention of cybersecurity agencies like the Cybersecurity and Infrastructure Security Agency (CISA), which noted similarities between Rhysida's tactics and those of other ransomware groups. Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.

image for Critical XZ Utils Ba ...

 Firewall Daily

A critical vulnerability has been discovered within the XZ Utils library (a command line tool for compressing and decompressing XZ files within Linux distros), marked as CVE-2024-3094. This exploit, classified as a severe backdoor, impacts Linux distributions, potentially granting unauthorized access through SSH   show more ...  

authentication bypass. The vulnerability perturbs the Linux community, posing a substantial risk to systems relying on XZ Utils for data compression. The code embedded within versions 5.6.0 and 5.6.1 of XZ Utils subtly alters the liblzma library, a core component for data compression. This manipulation opens the door to remote code execution (RCE), circumventing SSH authentication. Critical XZ Utils Backdoor (CVE-2024-3094 Vulnerability) [caption id="attachment_60726" align="alignnone" width="1245"] Source: NVD[/caption] The discovery of this backdoor stemmed from anomalous SSH login behaviors observed by Microsoft engineer Andres Freund. Through trial and error, Freund traced the irregularities to the XZ build process, unraveling a series of obfuscations crafted to evade detection. "The upstream xz repository and the xz tarballs have been backdoored. At first I thought this was a compromise of debian's package, but it turns out to be upstream", stated Freund. [caption id="attachment_60724" align="alignnone" width="726"] Source: Treehouse[/caption] @JiaT75, purportedly the creator behind the infiltration, contributed to the oss-fuzz project, potentially aiming to obfuscate the backdoor's detection capabilities. This sophisticated move aimed to outsmart existing security measures, adding layers of complexity to the analysis. Technical analysis of CVE-2024-3094 reveals a multifaceted approach to exploit systems. An obfuscated script, injected during the XZ build process, selectively targets specific Linux distributions and build conditions. This selection criterion ensures the backdoor's stealthy deployment, evading detection in non-targeted environments. Mitigation Against the CVE-2024-3094 Vulnerability Furthermore, runtime requirements for exploitation add additional nuances, such as environmental variables and binary paths, complicating detection and mitigation efforts. Despite these challenges, no instances of active exploitation have been reported as of March 30, offering a window for preemptive action. Affected Linux distributions include Fedora 40/41, Rawhide, Arch Linux, Debian Sid, Alpine Edge, openSUSE Tumbleweed, and openSUSE MicroOS. Recommendations urge users to revert to secure versions, such as XZ Utils 5.4.6 Stable, while conducting thorough assessments to identify potential compromises. Cloud environments, although exposed, exhibit limited vulnerability, with only a small percentage of instances running affected versions. Nonetheless, proactive measures are advised to preempt any potential exploitation. Moreover, CVE-2024-3094 poses a critical threat to Linux systems, necessitating immediate action to mitigate risks and safeguard sensitive data. By following advisories from organizations like CISA, and MITRE, and downgrading affected versions, users can protect their Linux systems against this backdoor. Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.

image for Imperva WAF Flaw (CV ...

 Firewall Daily

A critical security flaw, identified as CVE-2023-50969, has recently been discovered in Imperva SecureSphere, a popular on-premise Web Application Firewall (WAF).  This Imperva SecureSphere vulnerability poses a risk to organizations, potentially leading to severe security breaches.  With a CVSS score of 9.8, it   show more ...  

allows attackers to bypass crucial security protocols designed to thwart common web-based attacks such as SQL injection and cross-site scripting. Updates on the Imperva SecureSphere Vulnerability (CVE-2023-50969) [caption id="attachment_60794" align="alignnone" width="1130"] Source: NVD[/caption] The vulnerability lies in the manipulation of "Content-Encoding" headers within HTTP requests, coupled with the transmission of specifically encoded POST data.  This exploitation technique enables malicious actors to clandestinely inject harmful payloads past the WAF's defenses. Essentially, attackers can exploit this flaw to target vulnerabilities within applications that the WAF was intended to safeguard. Security researcher HoyaHaxa has provided technical insights into how this vulnerability can be exploited. By skillfully manipulating HTTP request headers and encoding POST data, attackers can circumvent security measures, potentially targeting an organization's digital infrastructure. [caption id="attachment_60796" align="alignnone" width="628"] Source: HoyaHaxa[/caption] Imperva has confirmed that the CVE-2023-50969 vulnerability impacts specific versions of SecureSphere WAF. Organizations using the Imperva SecureSphere WAF v14.7.0.40 and Any version of Imperva SecureSphere lacking the Application Defense Center (ADC) update released on February 26, 2024, are susceptible to this threat. Mitigation Techniques Against the Imperva SecureSphere Vulnerability It's worth noting that Imperva Cloud WAF customers remain unaffected by this vulnerability. Recommended actions for organizations utilizing Imperva SecureSphere WAF, include applying the ADC rule update released by Imperva on February 26, 2024. Detailed instructions for implementing this update can be found on the official Imperva Support Portal documentation. Another technique to mitigate against Imperva SecureSphere vulnerability is conducting a comprehensive audit of your web applications, focusing on vulnerabilities that were previously shielded by the WAF. This vulnerability highlights the pivotal role of Web Application Firewalls in fortifying organizations against cyber threats. Given the severity of the CVE-2023-50969 vulnerability, organizations utilizing Imperva SecureSphere WAF must take immediate action to mitigate the risk of exploitation.  By implementing these mitigation techniques and remaining vigilant against emerging threats, organizations can enhance their cybersecurity posture and protect their digital assets from potential breaches. Moreover, this is an ongoing story and The Cyber Express will share any new information on the vulnerability or any security patches shared by the organization.  Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.

image for How to easily transi ...

 Products

We could bang on forever about the advantages of our protection: its speed, cutting-edge tech stack, and incredible threat neutralization. But its better to just let independent tests speak for themselves. Throughout 2023, Kaspersky participated in (precisely!) 100 independent tests and reviews, with its products   show more ...  

being awarded 93 firsts and 94 top-3 finishes — achieving its highest annual result ever. Our protection is unmatched according to independent researchers, and no other security vendor comes even close to such an abundance of awards. (Our protection for home users received the highest award — Product of the Year 2023 — from the independent European testing laboratory AV-Comparatives, as well as first place in the home protection segment in independent testing by SE Labs in the fourth quarter of 2023.) To maximize your protection against cyberthreats, we offer this simple step-by-step guide to transitioning to Kaspersky security solutions. All three versions of our protection — Kaspersky Standard, Kaspersky Plus, and Kaspersky Premium— use the same stack of security technologies, meaning users of any of these solutions can be confident theyre using the Product of the Year 2023. Kaspersky is Product of the Year 2023 according to AV-Comparatives How to switch to Kaspersky Its very simple: just choose one of the three subscription options on our website based on your needs after easily comparing the features of each version. For maximum protection, we recommend subscribing to Kaspersky Premium. In addition to the standard computer protection and optimization tools, it includes: secure encrypted storage of personal documents smart home monitoring online payment protection data leak checker identity protection unlimited super-fast VPN premium version of our password manager one-year free use of Kaspersky Safe Kids other additional features In addition, Kaspersky Premium ensures maximum protection of your digital identity. We check for leaks (including on the dark web) of your accounts, linked not only to email addresses as in other subscription versions but also to phone numbers — for example, used with online banks and social networks — and we advise on what to do if such a leak occurs. You can add the email addresses and phone numbers of everyone in your family to be checked. When choosing a subscription, you can also specify the number of devices to protect and whether its for one or several years: the latter, of course, comes at a discount. Upon purchase, well automatically create a My Kaspersky account for you to activate and manage the subscription on different devices running Windows, macOS, Android, or iOS, and send instructions to the email you provided when purchasing. Preparing for installation Follow the link in the email to the My Kaspersky website, complete account creation, and log in. In the subscription information window, click Download to download the application to your device. For mobile devices, you can also download our applications from one of the app stores — App Store, Google Play, Huawei AppGallery, and others. Before installing the Kaspersky application, make sure that your device meets the software and hardware requirements (for Windows, macOS, Android, iOS), and remove any other vendors incompatible security solutions (Windows and macOS). Many people think that having multiple protection tools on one computer strengthens security, but this is not the case — on the contrary, different programs start conflicting with each other and competing for computer resources, leading to slowdowns and freezes. So, there can only be one — and our protection, according to tests, is 100% percent effective against malware. Its best to clean up your computer using special utilities, which can be found on the website of the manufacturer of the security solution youre removing. If you remove it with the built-in tools of the operating system, some traces may remain, leading to conflicts. The easiest way to find the necessary utility is to search the internet for name_of_removed_program uninstall tool (for example, here are the uninstallers for Avast, Bitdefender, ESET, McAfee, and Norton). Installing the application Youre almost there. Installing the application is straightforward: on a computer, the process takes place in the form of a chat, familiar to anyone who uses messengers. By the way, this allows you to spend the installation time productively — exploring the most interesting Kaspersky features and installing the application on your smartphone using the QR code that will appear on your computer screen. For those who like to study the installation details in advance, here are the links to Kaspersky installation instructions for Windows, macOS, Android, and iOS. If you downloaded the application for your computer from your My Kaspersky account or for your smartphone using the QR code, after installation it will be automatically activated by the subscription. In very rare cases, you may need to activate the application yourself by logging in to your My Kaspersky account, or by following these simple instructions for Windows, macOS, Android, or iOS. Dealing with passwords Among other benefits, owners of Kaspersky Plus and Kaspersky Premium also receive a premium subscription to our password manager. In its personal encrypted storage, you can keep all your passwords, important documents, and tokens for two-factor authentication, synchronizing them across all your devices. Rest assured that no one — not even Kaspersky employees — will have access to them: the AES-encrypted vault is protected by a master password known only to you. You can install Kaspersky Password Manager on your computer during the installation of Kaspersky Plus or Kaspersky Premium, or separately by downloading it from My Kaspersky or app stores. You wont have to remember and manually enter all your passwords into Kaspersky Password Manager — weve developed a mechanism to transfer passwords from browsers and other password managers. Brief instructions for importing data for the most popular OS — Windows — are provided below, and detailed ones for all operating systems are available on the support website (for Windows, macOS, Android, and iOS). Importing passwords from browsers Open the main window of Kaspersky Password Manager and click the gear icon at the bottom of the window. Go to Settings, then to Import and export. In the Import from browser block, select the browser you want to import data from, and click Import. Importing passwords from browsers to Kaspersky Password Manager Importing passwords from other password managers First, youll need to export data from another password manager to a CSV file. Instructions for this can be found on the manufacturers website (for example, here are the instructions for Avast Passwords, KeePass, LastPass, and 1Password). Open the main window of Kaspersky Password Manager and click the gear icon at the bottom of the window. Go to Settings, then to Import and export. Click Import in the Import from password managers block, and specify the CSV file you want to import data from. Importing passwords from other password managers to Kaspersky Password Manager In addition to passwords, you can also transfer all your two-factor authentication tokens from Google Authenticator (Android, iOS) to Kaspersky Password Manager. To do this, simply export all your tokens from Google Authenticator into one big QR code and scan it with Kaspersky Password Manager on your mobile device. The tokens are synchronized across all your devices, so you wont have to look for your smartphone every time you need to enter a 2FA code on your computer — you can generate it right in the desktop version of Kaspersky Password Manager. And even if something happens to your smartphone, you wont lose access to sites protected by two-factor authentication — you can always generate the code on your computer or restore the tokens from the cloud. Checklist for switching to Kaspersky Choose one of the three solutions for home use: Kaspersky Standard, Kaspersky Plus, or Kaspersky Premium. Count how many devices you need to protect, and purchase the corresponding subscription from the Kaspersky website, a partner, or an app store. Remove old security solutions using tools from the respective manufacturer. Install the Kaspersky application and Kaspersky Password Manager, as well as any other applications you want from the subscription. Make sure the applications are activated automatically, or activate them manually (Windows, macOS, Android, iOS). Import passwords from other programs. Explore your My Kaspersky account to find plenty of useful and interesting features there. Enjoy your life with peace of mind.

image for Why are You Interest ...

 What is

A 0% unemployment rate may catch your eye, but it’s just the tip of the iceberg when it comes to reasons for pursuing a career in cybersecurity. While job stability is a plus, the real allure lies in the field’s growing importance and diverse opportunities. Even without being an expert, it’s evident   show more ...  

that cybersecurity is booming. With cyber threats constantly making headlines, businesses are realizing the necessity of investing in cybersecurity professionals to safeguard their operations. According to U.S. News & World Report, the role of an information security analyst is highly regarded, ranking as the fourth-best technology job, the tenth-best STEM job, and the fifteenth among the top 100 overall jobs. Recent findings from the Burning Glass “The State of Cybersecurity Hiring” report reveal that the rate of new cybersecurity job positions is three times higher than that of general IT positions. In today’s digital landscape, virtually every IT role involves cybersecurity in some capacity. Specializing in security opens doors to various career paths, including security operations, risk assessment, application security, investigations, compliance, and education. Despite occasional negative publicity, cybersecurity continues to advance as a profession. For every high-profile breach like Equifax, countless successful online transactions occur daily, showcasing the progress we’re making collectively. Why Are You Interested In Cyber Security Cybersecurity, often referred to simply as “security,” encompasses practices, technologies, and processes designed to protect digital systems, networks, devices, and data from unauthorized access, cyberattacks, and other malicious activities. Its primary goal is to ensure the confidentiality, integrity, and availability of information and resources in cyberspace. Cybersecurity involves safeguarding digital assets against a wide range of threats, including malware, phishing, ransomware, data breaches, hacking, and insider threats. It encompasses various layers of defense, such as network security, endpoint security, application security, data security, and cloud security. Cybersecurity measures include implementing robust access controls, encryption techniques, intrusion detection systems, firewalls, antivirus software, and security policies and procedures. It also involves proactive measures like security awareness training, vulnerability assessments, penetration testing, and incident response planning. Reasons to Consider a Cybersecurity Career Here are the key reasons to consider a cybersecurity career: 1) You already possess a foundation Understanding cybersecurity involves grasping how systems operate, identifying their vulnerabilities, anticipating potential exploits, and implementing safeguards against compromise. If you work with computer technology in any capacity, you likely have a grasp of these concepts. You’re aware of the importance of keeping systems up-to-date with the latest software versions, securing devices, and staying vigilant against suspicious communications. These fundamentals, instilled through education or experience, form the bedrock of cybersecurity. Stay updated Prevent unauthorized access Be vigilant against attacks Cybersecurity professionals have dedicated time and effort to delve deeper into these fundamentals, learning to adapt and apply them across various scenarios. Whether securing a home network or fortifying a corporate infrastructure, the core principles remain constant. Transitioning your education or career path into cybersecurity isn’t as daunting as it may seem initially. 2) Many Options Available Cybersecurity isn’t confined to a single realm; it encompasses any role within an organization that intersects with computer technology and asset protection. It entails understanding asset value, identifying vulnerabilities, anticipating potential attacks, and executing appropriate responses to mitigate risks. The domain of cybersecurity extends far beyond major tech companies. Virtually every organization, regardless of size or industry, interacts with technology in some capacity. Whether managing operations via smartphones or handling vast data networks, cybersecurity expertise is indispensable. Across all sectors, diverse opportunities await cybersecurity professionals. Whether you aspire to be a generalist or a specialist, there’s a niche tailored to your interests and skills. 3) Diverse Specializations Await You  Embarking on a cybersecurity career doesn’t limit you to mundane tasks like cable management or router configurations. There’s a vast array of specialization options within the field, with one often overlooked area being cybersecurity design. Cybersecurity design involves conceptualizing new security mechanisms, devising innovative filtering schemes, crafting bespoke security protocols, architecting access control logic, configuring back-end systems, developing APIs, writing code, designing user interfaces, and ensuring that security measures align with business objectives. Effective security isn’t just about dictating what’s permissible and what’s not; it’s about understanding how security protocols impact business processes, workflows, and user experience. Successful security initiatives hinge on meticulous design, strategic architecture, and comprehensive planning. 3) Security Professionals at every level A cybersecurity expert’s role transcends the stereotypical image of someone toiling away in a dimly lit basement, grappling with cables and computer hardware. These professionals occupy roles at every echelon of an organization, from entry-level interns to top-tier executives. The greater an organization’s reliance on technology, the more imperative it becomes to have adept security professionals overseeing every facet of its digital infrastructure. From general cybersecurity practitioners to security team leaders, from cybersecurity managers to device-specific administrators, and even C-suite executives, cybersecurity expertise permeates all levels of organizational hierarchy. Furthermore, starting your cybersecurity journey at a lower organizational rung doesn’t preclude upward mobility. As you demonstrate proficiency, expertise, and leadership potential, opportunities for advancement abound. According to PwC’s 2021 Global Digital Trust Insights report and their 2021 Cyber-Ready CEO Survey, organizations worldwide are ramping up their investments in cybersecurity, signaling an unprecedented demand for skilled professionals in the field. With technology poised for further advancements in the decades ahead, the role of a cybersecurity professional will remain in a perpetual state of evolution. 4) Constant Challenges and New Horizons  A career in cybersecurity promises anything but monotony. The ever-evolving landscape guarantees a steady stream of challenges and opportunities for growth. Expect to confront novel problems and unexpected setbacks, alongside remarkable discoveries and triumphs. The threat landscape is in constant flux, with adversaries perpetually devising new exploits and tactics. Your role may involve evaluating emerging threats to fortify your organization’s defenses and stay one step ahead of potential breaches. As business operations evolve, you’ll find yourself tasked with adapting IT infrastructures to accommodate new processes, functions, or capabilities. Rapid shifts in demand or unforeseen surges in popularity may necessitate scaling up capacity at lightning speed, putting your problem-solving skills to the test. Expanding into new markets, venturing into international territories, or embracing novel business strategies will call for IT adjustments and support to maintain stability, availability, and security. As a cybersecurity professional, you’ll tackle new puzzles, thwart adversaries, and support evolving initiatives with unwavering resolve and adaptability. Future Trends in Cybersecurity to Watch Out in 2024 As we step into 2024, the realm of cybersecurity continues to evolve at a rapid pace, driven by technological advancements, shifting threat landscapes, and emerging regulatory frameworks. Staying ahead of the curve requires a keen understanding of the trends and developments shaping the cybersecurity landscape. Here are some key future trends to watch out for in 2024: 1) Artificial Intelligence and Machine Learning Integration:  The integration of artificial intelligence (AI) and machine learning (ML) technologies into cybersecurity operations is set to revolutionize threat detection and response.  AI-powered tools can analyze vast amounts of data in real-time, identifying patterns and anomalies that may indicate potential security threats. ML algorithms can adapt and learn from new data, enhancing the efficiency and accuracy of cybersecurity systems. 2) Zero Trust Architecture:  With the proliferation of remote work and cloud-based services, traditional perimeter-based security models are becoming increasingly obsolete.  Zero Trust Architecture (ZTA) is gaining traction as a more effective approach to cybersecurity, emphasizing strict identity verification and continuous monitoring of network activity. ZTA assumes that every user, device, and application is a potential threat, requiring authentication and authorization for every access attempt. 3) Rise of Quantum Computing Threats:  While quantum computing holds immense promise for advancing technology, it also poses significant security risks. Quantum computers have the potential to break conventional encryption algorithms, rendering many current cybersecurity protocols obsolete.  As quantum computing capabilities continue to advance, organizations must prepare for the emergence of quantum-resistant encryption methods and protocols. 4) Expansion of Cybersecurity Regulations:  Governments and regulatory bodies worldwide are ramping up efforts to enforce cybersecurity regulations and standards. In 2024, we can expect to see stricter compliance requirements across various industries, particularly in sectors handling sensitive data such as finance, healthcare, and critical infrastructure.  Compliance with regulations such as GDPR, CCPA, and emerging frameworks like the Cybersecurity Maturity Model Certification (CMMC) will be paramount for organizations. 5) Focus on Supply Chain Security:  The recent spate of high-profile supply chain attacks has underscored the importance of supply chain security in the cybersecurity landscape.  In 2024, organizations will prioritize assessing and mitigating risks within their supply chains, implementing measures to detect and prevent supply chain attacks. Collaborative efforts between vendors, suppliers, and partners will be essential to bolstering supply chain resilience. 6) Cybersecurity Skills Shortage Mitigation:  The global shortage of cybersecurity professionals continues to pose a significant challenge for organizations worldwide. In 2024, we can expect to see increased investment in cybersecurity education and training programs, as well as initiatives aimed at diversifying the cybersecurity workforce. Automation and AI-driven solutions may also help alleviate the burden on human resources, enabling security teams to focus on more strategic tasks. 7) Emphasis on Privacy-Preserving Technologies:  With growing concerns over data privacy and protection, there will be a heightened emphasis on privacy-preserving technologies in 2024. Innovations such as homomorphic encryption, differential privacy, and decentralized identity management will play a crucial role in safeguarding sensitive information while enabling secure data sharing and analysis. 8) Continued Evolution of Threat Landscape:  Cybercriminals are becoming increasingly sophisticated in their tactics, techniques, and procedures (TTPs), posing a constant challenge for cybersecurity professionals.  In 2024, we can expect to see the continued evolution of threats such as ransomware, phishing, and supply chain attacks, as well as emerging threats targeting emerging technologies like AI, IoT, and 5G networks. Proactive threat intelligence gathering and threat hunting will be essential for staying ahead of cyber adversaries. Career Prospects & Job Opportunities in Cybersecurity Field in 2024 The cybersecurity field offers an array of promising career prospects and abundant job opportunities for individuals with the right skills and expertise. Let’s explore the dynamic landscape of cybersecurity careers in 2024: Cybersecurity Analysts: Cybersecurity analysts play a pivotal role in safeguarding organizations against cyber threats by monitoring networks, analyzing security incidents, and implementing defensive measures. In 2024, the demand for cybersecurity analysts is expected to remain robust, with organizations seeking professionals capable of detecting and mitigating security risks in real-time. Security Engineers: Security engineers are responsible for designing, implementing, and maintaining robust security solutions to protect against cyber threats. In 2024, security engineers will be in high demand to develop and deploy advanced security architectures, conduct vulnerability assessments, and ensure compliance with industry standards and regulations. Incident Responders: Incident responders play a critical role in managing and mitigating security incidents, such as data breaches, ransomware attacks, and network intrusions. As cyber threats continue to evolve, the demand for incident responders skilled in forensic analysis, threat containment, and incident response planning will remain strong in 2024. Ethical Hackers/Penetration Testers: Ethical hackers, also known as penetration testers or white-hat hackers, are tasked with identifying vulnerabilities in systems, applications, and networks through authorized security testing. In 2024, organizations will rely on ethical hackers to conduct penetration testing, red team exercises, and vulnerability assessments to proactively identify and remediate security weaknesses. Security Architects: Security architects design and implement comprehensive security architectures that align with business objectives while mitigating cyber risks. In 2024, security architects will play a crucial role in developing cloud security strategies, securing IoT devices, and integrating emerging technologies such as AI and blockchain into security frameworks. Compliance Specialists: Compliance specialists ensure that organizations adhere to relevant cybersecurity regulations, standards, and frameworks, such as GDPR, HIPAA, PCI DSS, and ISO 27001. With the increasing emphasis on regulatory compliance, the demand for compliance specialists with expertise in data privacy, risk management, and audit processes will continue to grow in 2024. Security Consultants: Security consultants provide strategic guidance and advisory services to organizations seeking to enhance their cybersecurity posture. In 2024, security consultants will assist businesses in assessing cyber risks, developing security policies and procedures, and implementing best practices to mitigate threats and vulnerabilities. Cybersecurity Managers/Directors: Cybersecurity managers and directors oversee the overall security operations of an organization, including risk management, incident response, and security policy enforcement. In 2024, experienced cybersecurity leaders will be in high demand to develop and execute comprehensive security strategies, manage security budgets, and align security initiatives with business objectives. Real-world Applications of Cyber Security in the Future As we look ahead to the future, the applications of cybersecurity are poised to expand across numerous domains, offering protection, resilience, and trust in an increasingly interconnected world. Here are some real-world applications of cybersecurity in the future: 1) Smart Cities:  With the proliferation of IoT devices and connected infrastructure in urban environments, cybersecurity will be instrumental in ensuring the security and privacy of smart city systems.  From traffic management and energy grids to public safety and healthcare services, robust cybersecurity measures will be essential to protect against cyber threats and safeguard critical infrastructure. 2) Healthcare:  The healthcare sector is undergoing digital transformation, with the adoption of electronic health records (EHRs), telemedicine, and IoT medical devices.  Cybersecurity will be paramount in protecting patient data privacy, securing medical devices from cyber attacks, and ensuring the integrity of healthcare systems against ransomware and other threats. 3) Autonomous Vehicles:  The advent of autonomous vehicles promises to revolutionize transportation and mobility.  However, ensuring the cybersecurity of connected and self-driving cars will be crucial to prevent potential cyber attacks that could compromise vehicle safety, navigation systems, and passenger privacy. Cybersecurity measures will need to be integrated into the design and operation of autonomous vehicles to mitigate risks effectively. 4) Financial Services:  The financial services industry faces constant cyber threats, including data breaches, phishing attacks, and financial fraud. In the future, cybersecurity will play a vital role in protecting banking systems, digital payments, and online transactions from cybercriminals.  Advanced technologies such as blockchain and AI will be leveraged to enhance the security and resilience of financial networks and digital assets. 5) Critical Infrastructure:  Critical infrastructure sectors such as energy, water, and transportation are prime targets for cyber attacks due to their essential role in society. Cybersecurity will be essential for safeguarding critical infrastructure from cyber threats, including sophisticated attacks aimed at disrupting essential services, causing physical damage, or compromising national security.  Collaboration between government agencies, private sector stakeholders, and cybersecurity experts will be crucial to enhance the resilience of critical infrastructure against cyber threats. 6) Supply Chain Security:  As global supply chains become increasingly interconnected and digitized, cybersecurity will be paramount in protecting supply chain networks from cyber attacks and supply chain disruptions.  Organizations will need to implement robust cybersecurity measures to secure their supply chain operations, detect and mitigate supply chain risks, and ensure the integrity and authenticity of goods and services throughout the supply chain lifecycle. 7) Digital Identity Management:  With the proliferation of online services and digital transactions, effective cybersecurity measures will be essential to protect digital identities and personal data from identity theft, account takeover, and unauthorized access.  Technologies such as biometrics, encryption, and multi-factor authentication will be employed to strengthen digital identity management and enhance user authentication and authorization processes. 8) Cybersecurity Education and Awareness:  In an era of increasing cyber threats and attacks, cybersecurity education and awareness will be critical to empower individuals, organizations, and communities to protect themselves against cyber risks.  Cybersecurity training programs, awareness campaigns, and initiatives will play a crucial role in promoting cybersecurity best practices, raising awareness about emerging threats, and fostering a culture of cybersecurity vigilance and resilience. How Cyber Security Future Trends Impact Our Life & World Cybersecurity future trends are poised to have a profound impact on our lives and the world as a whole, shaping the way we interact, conduct business, and safeguard our digital assets. These trends not only reflect the evolving nature of cyber threats but also the innovative strategies and technologies developed to address them. Here’s how cybersecurity future trends will impact our lives and the world: 1) Protection of Personal Data:  As individuals increasingly rely on digital platforms and services for communication, finance, and entertainment, the protection of personal data becomes paramount.  Future trends in cybersecurity will focus on enhancing data privacy measures, implementing robust encryption techniques, and empowering users with greater control over their personal information. This will ensure that individuals can trust the digital ecosystem and safeguard their privacy in an increasingly connected world. 2) Securing Critical Infrastructure:  The growing digitization of critical infrastructure, including energy, transportation, and healthcare systems, underscores the importance of cybersecurity in safeguarding essential services.  Future trends will prioritize the protection of critical infrastructure from cyber threats such as ransomware, malware, and sophisticated cyber attacks. Enhanced cybersecurity measures will be implemented to detect, prevent, and respond to threats, ensuring the reliability and resilience of critical infrastructure systems. 3) Emergence of AI-Powered Security Solutions:  Artificial intelligence (AI) and machine learning (ML) technologies will play a central role in future cybersecurity strategies, enabling proactive threat detection, automated incident response, and predictive analytics.  AI-powered security solutions will enhance threat intelligence capabilities, identify anomalous behavior patterns, and adapt to evolving cyber threats in real-time. This will enable organizations to stay ahead of cyber attackers and mitigate risks more effectively. 4) Protection of Digital Assets:  With the rise of digital currencies, digital assets, and online transactions, the protection of digital assets becomes increasingly important. Future cybersecurity trends will focus on securing blockchain networks, cryptocurrency exchanges, and digital wallets from cyber attacks and fraud.  Enhanced security measures such as multi-factor authentication, cryptographic techniques, and decentralized security protocols will be implemented to safeguard digital assets and ensure trust in digital transactions. 5) Cybersecurity in the Internet of Things (IoT):  The proliferation of IoT devices in homes, businesses, and industrial settings presents new cybersecurity challenges and risks. Future trends will prioritize the security of IoT devices and networks, including the implementation of robust authentication mechanisms, encryption protocols, and firmware updates.  Secure-by-design principles will be adopted to ensure that IoT devices are built with cybersecurity in mind, minimizing vulnerabilities and protecting against cyber threats. Wrapping Up! Cyber security is a fascinating and ever-evolving field that is crucial in today’s digital age. Through this blog post, we have explored the various reasons why individuals may be interested in cyber security. From protecting personal information to the thrill of detecting and defeating cyber attacks, there are plenty of factors that draw people towards this field.  Furthermore, the growing demand for cybersecurity professionals and the potential for lucrative career opportunities only adds to its allure. As we continue to witness frequent and sophisticated cyber attacks, it has become increasingly evident that we all need to be aware of the importance of cybersecurity. It is not only a career path but also a necessary life skill in our digitally interconnected world. Key Highlights Cybersecurity is dynamic and with new challenges and threats increasing constantly, making it intellectually stimulating and rewarding. With the increasing digitization of society, cybersecurity plays a critical role in protecting people, organizations, and nations from cyber threats. Working in cybersecurity enables individuals to make a tangible difference by safeguarding data, privacy, and critical infrastructure from cyber attacks. Cybersecurity experts are constantly learning and adapting to new technologies, techniques, and threats, fostering personal and professional growth. FAQ’s 1) Why should I consider a career in cybersecurity? A career in cybersecurity offers diverse opportunities, competitive salaries, job security, and the chance to make a meaningful impact by protecting individuals and organizations from cyber threats. 2) What makes cybersecurity an exciting field to work in? The ever-evolving nature of cybersecurity, constant learning opportunities, and the global significance of protecting digital assets make it an exciting and dynamic field to work in. 3) Are there growth prospects in the cybersecurity industry? Yes, the cybersecurity industry is experiencing rapid growth, with increasing demand for skilled professionals across various sectors, ensuring ample opportunities for career advancement and development. 4) What skills are required to succeed in cybersecurity? Success in cybersecurity requires a blend of technical skills such as network security, cryptography, and programming, as well as soft skills like problem-solving, communication, and critical thinking. 5) How can I get started in a career in cybersecurity? To start a career in cybersecurity, you can pursue relevant education and certifications, gain hands-on experience through internships or entry-level positions, participate in cybersecurity competitions and events, and continuously update your skills to stay abreast of industry trends.

image for Microsoft Beefs Up D ...

 Feed

Microsoft adds tools to protect Azure AI from threats such as prompt injection, as well as give developers the capabilities to ensure generative AI apps are more resilient to model and content manipulation attacks.

 Companies to Watch

Skyflow, a Palo Alto, CA-based data privacy vault company, raised $30M in Extended Series B funding. The round was led by Khosla Ventures with participation from Mouro Capital, Foundation Capital, and Canvas Ventures.

 Malware and Vulnerabilities

Fox-IT warned that a new, evasive version of Vultur spreads to victims through a hybrid attack that relies on SMS phishing and phone calls that trick the targets into installing a version of the malware that masquerades as the McAfee Security app.

 Trends, Reports, Analysis

Companies demonstrating advanced cybersecurity performance generate a shareholder return that is 372% higher than their peers with basic cybersecurity performance, according to a new report from Diligent and Bitsight.

 Expert Blogs and Opinion

Armed forces have always utilized war-gaming exercises for battlefield training to prepare for times of conflict. With today’s digital transformation, the same concept is being applied in the form of cybersecurity exercises.

 Breaches and Incidents

In late February 2024, the Foundation received a few support requests and became aware of a misconfiguration of OWASP’s old Wiki web server. The misconfiguration led to a data breach involving old member resumes.

 Feed

Ubuntu Security Notice 6720-1 - Kentaro Kawane discovered that Cacti incorrectly handled user provided input sent through request parameters to the graph_view.php script. A remote authenticated attacker could use this issue to perform SQL injection attacks.

 Feed

Red Hat Security Advisory 2024-1607-03 - An update for kernel is now available for Red Hat Enterprise Linux 8. Issues addressed include code execution, null pointer, privilege escalation, and use-after-free vulnerabilities.

 Feed

The threat actor known as TA558 has been attributed to a new massive phishing campaign that targets a wide range of sectors in Latin America with the goal of deploying Venom RAT. The attacks primarily singled out hotel, travel, trading, financial, manufacturing, industrial, and government verticals in Spain, Mexico, United States, Colombia, Portugal, Brazil, Dominican Republic, and

 Feed

Google has agreed to purge billions of data records reflecting users' browsing activities to settle a class action lawsuit that claimed the search giant tracked them without their knowledge or consent in its Chrome browser. The class action, filed in 2020, alleged the company misled users by tracking their internet browsing activity who thought that it remained private when using the "

 Feed

The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis has revealed. The audacious supply chain compromise, tracked as CVE-2024-3094 (CVSS score: 10.0), came to light last week when Microsoft engineer and PostgreSQL developer Andres Freund

 Feed

Cloud solutions are more mainstream – and therefore more exposed – than ever before. In 2023 alone, a staggering 82% of data breaches were against public, private, or hybrid cloud environments. What’s more, nearly 40% of breaches spanned multiple cloud environments. The average cost of a cloud breach was above the overall average, at $4.75 million. In a time where cloud has become the de facto

 Feed

A threat activity cluster tracked as Earth Freybug has been observed using a new malware called UNAPIMON to fly under the radar. "Earth Freybug is a cyberthreat group that has been active since at least 2012 that focuses on espionage and financially motivated activities," Trend Micro security researcher Christopher So said in a report published today. "It has been observed to

 Threat Lab

Brute force attacks illustrate how persistence can pay off. Unfortunately, in this context, it’s for bad actors. Let’s dive into the mechanics of brute force attacks, unraveling their methodology, and focusing on their application. Whether it’s Remote Desktop Protocol (RDP), or direct finance theft,   show more ...  

brute force attacks are a prime tactic in the current cybersecurity landscape. What is a Brute Force Attack? A brute force attack is a cyber attack where the attacker attempts to gain unauthorized access to a system or data by systematically trying every possible combination of passwords or keys. This method relies on the sheer power of repetition and the computational capacity to try thousands, if not millions, of combinations in a short time span. Think of it as trying every key on a keyring until finding the one that unlocks a door. Types of Brute Force Attacks Simple brute force attacks: This basic approach involves trying all possible combinations of characters until the correct one is found. Dictionary attacks: A more refined method that uses a list of pre-existing passwords, phrases, or commonly used combinations instead of random permutations. There are many already leaked password lists that are commonly used, and they grow after every breach. Hybrid attacks: Combining elements of both the simple and dictionary approaches, often tweaking common passwords slightly to guess more complex passwords. The Role of GPUs in Brute Force Attacks Graphic Processing Units (GPUs) have revolutionized not just gaming and graphic design, but also the world of cybersecurity. Their powerful parallel processing capabilities make them particularly adept at handling the computational demands of brute force attacks. Unlike Central Processing Units (CPUs) that process tasks sequentially, GPUs can perform thousands of operations simultaneously, drastically reducing the time required to crack passwords or encryption keys. Accelerating Brute Force Techniques Cybercriminals exploit GPUs to accelerate the brute force process, enabling them to try billions of password combinations in seconds. This brute force capability poses a significant threat to systems protected by weak or commonly used passwords. It underscores the necessity for robust password policies and advanced security measures like Multi-Factor Authentication (MFA) and encryption methods resilient against GPU-powered attacks. Financial Applications of Brute Force Attacks The financial implications of brute force attacks can be profound, ranging from direct financial theft to substantial reputational damage leading to loss of business. Direct Financial Theft In some cases, attackers aim to gain unauthorized access to financial systems or payment platforms. By cracking login credentials through brute force, they can transfer funds, manipulate transactions, or steal sensitive financial information, leading to direct monetary losses. The Role of RDP in Brute Force Attacks Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft that allows a user to connect to another computer over a network connection with a graphical interface. While RDP is a powerful tool for remote administration and support, it has also become a favored vector for brute force attacks for several reasons: Widespread use: RDP is commonly used in businesses to enable remote work and system administration. Open ports: RDP typically requires port 3389 to be open, making it a visible entry point for attackers scanning for vulnerabilities. Direct access: Successfully breaching an RDP session can give attackers direct control over a victim’s computer, allowing for the deployment of malware, ransomware, or theft of sensitive information. Real-World Examples of Brute Force Attacks via RDP Ransomware Deployment: One of the most nefarious uses of brute force attacks on RDP is for the deployment of ransomware. Once access is gained, attackers can encrypt the victim’s files, demanding a ransom for their release. The WannaCry and Ryuk ransomware attacks are notable examples where such tactics were likely utilized. Credential Stuffing: In some cases, attackers use brute force tactics to validate stolen username and password combinations against accessible RDP servers. This method relies on the assumption that many users reuse their credentials across different services. Network Infiltration: Upon gaining access via RDP, cybercriminals can use the compromised system as a foothold to explore and exploit further vulnerabilities within a network, aiming for more valuable data or systems. Mitigating the Risk Protecting against brute force attacks, especially on RDP, involves a multi-faceted approach: Strong Password Policies: Enforce complex, unique passwords and consider the use of multi-factor authentication (MFA) to add an extra layer of security. Account Lockout Policies: Implement policies that lock user accounts after a certain number of failed login attempts to hinder brute force efforts. Network Level Authentication (NLA): NLA requires users to authenticate before establishing an RDP session, significantly reducing the risk of brute force attacks. VPN Usage: Restrict RDP access to users connected through a Virtual Private Network (VPN), reducing the exposure of RDP to the open internet. Monitoring and Alerts: Use security tools to monitor for repeated failed login attempts and configure alerts to notify administrators of potential brute force activities. The post Understanding Brute Force Attacks: The Persistent Threat in Cybersecurity appeared first on Webroot Blog.

 API security

Source: securityboulevard.com – Author: Riddika Grover The internet that we use today is a massive network of interconnected devices and services. Application Programming Interfaces (APIs) are an essential but sometimes invisible technology layer that underpins services ranging from social media to online   show more ...  

banking. APIs serve as messengers between apps, allowing them to communicate data and […] La entrada  71% Website Vulnerable: API Security Becomes Prime Target for Hackers – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Marc Handelman *** This is a Security Bloggers Network syndicated blog from Infosecurity.US authored by Marc Handelman. Read the original post at: https://www.infosecurity.us/blog/2024/4/1/on-hiatus Original Post URL: https://securityboulevard.com/2024/04/on-hiatus/   show more ...  

Category & Tags: Security Bloggers Network – Security Bloggers Network La entrada On Hiatus – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Threat Overview On March 19, 2024, CISA, along with other participating agencies, released a joint Fact Sheet warning executive leaders in the critical infrastructure sector that Volt Typhoon has strategically pre-positioned itself to conduct cyber attacks against US   show more ...  

infrastructure. In the event of escalating tension between the US and China, leaders […] La entrada Volt Typhoon Threat Report – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Blog

Source: securityboulevard.com – Author: Tony Bradley Organizations must navigate through a tumultuous sea of cybersecurity threats today. As businesses increasingly transition to the cloud and embrace remote work, the complexity of managing digital identities has exponentially grown, unveiling a myriad of   show more ...  

vulnerabilities that cybercriminals are keen […] The post Unearthing Identity Threat Exposures appeared first […] La entrada Unearthing Identity Threat Exposures – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AppSec & Supply Chain Security

Source: securityboulevard.com – Author: Paul Roberts Security experts are sounding alarms about what some are calling the most sophisticated supply chain attack ever carried out on an open source project: a malicious backdoor planted in xz/liblzma (part of the xz-utils package), a popular open source   show more ...  

compression tool. A months-long campaign of tampering and social engineering […] La entrada A software supply chain meltdown: What we know about the XZ Trojan – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: securityboulevard.com – Author: Kevin Smith Predicting the future of cybersecurity is an impossible task, but getting some expert advice doesn’t hurt.  Way back in February, Coro hosted a webinar—as part of our Cybersphere series—featuring our Co-Founder and Chief Marketing Officer, Dror Liwer.   show more ...  

Joining Dror to discuss trends in 2024 was cybersecurity consultant Joseph Steinberg. […] La entrada Webinar Recap: Cybersecurity Trends to Watch in 2024 – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: David Brunsdon Weekly Threat Intelligence Report Date: April 1, 2024 Prepared by: David Brunsdon, Threat Intelligence – Security Engineer, HYAS Each week, we are sharing what we are seeing in our HYAS Insight threat intelligence and investigation platform, specifically   show more ...  

a summary of the top autonomous system numbers (ASNs) and malware origins, […] La entrada HYAS Threat Intel Report April 1 2024 – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Jeffrey Burt The open source community, federal agencies and cybersecurity researchers are busy trying to get their hands around the security near-miss of the backdoor found in versions of the popular XZ Utils data compression library. The malicious code apparently was   show more ...  

methodically put together by bad actors over more than two […] La entrada The Cybersecurity Industry Starts Picking Through Malicious XZ Utils Code – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Enzoic The White House put out an official letter to governors (March 2024) warning of severe cyberattacks directed at water and wastewater infrastructure across the country. The threats described in the referenced CISA reports should be a strident warning and wake-up   show more ...  

call, even to seasoned cybersecurity practitioners. The vulnerabilities and poor […] La entrada Strong Passwords: A Keystone of Cybersecurity for Water and Wastewater Infrastructure – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.databreachtoday.com – Author: 1 Governance & Risk Management , Network Detection & Response , Network Firewalls, Network Access Control CEO Sanjay Beri on What Distinguishes Genuine Integration From Mere Aggregation Michael Novinson (MichaelNovinson) • April 1, 2024     Sanjay Beri,   show more ...  

founder and CEO, Netskope (Image: Netskope) An integrated platform must be more than […] La entrada Netskope CEO on What Platformization Means for Cybersecurity – Source: www.databreachtoday.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 claims

Source: go.theregister.com – Author: Team Register The cyber skids at INC Ransom are claiming responsbility for the ongoing cybersecurity incident at Leicester City Council, according to a post caught by eagle-eyed infosec watchers. A post made to INC Ransom’s leak blog in the late hours of April 1   show more ...  

mentioned Leicester City Council as a victim […] La entrada INC Ransom claims to be behind ‘cyber incident’ at UK city council – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Team Register It was 20 years ago on Monday that Google unleashed Gmail on the world, and the chocolate factory is celebrating with new rules that just might, hopefully, cut down on the amount of spam users receive. Sure, it may have seemed like an April Fool’s joke in   show more ...  

2004, but […] La entrada Happy 20th birthday Gmail, you’re mostly grown up – now fix the spam – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Apple's

Source: go.theregister.com – Author: Team Register Opinion Apple is good at security. It’s good at processors. Thus GoFetch, a major security flaw in its processor architecture, is a double whammy. What makes it worse is that GoFetch is a class of vulnerability known about years before the launch of Apple   show more ...  

Silicon processors. How did Apple’s […] La entrada Apple’s GoFetch silicon security fail was down to an obsession with speed – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 banks

Source: go.theregister.com – Author: Team Register ASIA IN BRIEF Singapore’s Monetary Authority on Monday launched an application, intuitively named “COllaborative Sharing of Money Laundering/TF Information & Cases” (COSMIC for short, obviously) to target money laundering and terrorism   show more ...  

financing. COSMIC was co-developed by MAS and six major commercial banks in Singapore: DBS, OCBC, UOB, Citibank, HSBC […] La entrada Six banks share customer info to help Singapore fight money laundering – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Team Register Staff working at the US House Of Representatives have been barred from using Microsoft’s Copilot chatbot and AI productivity tools, pending the launch of a version tailored to the needs of government users. According to documents obtained by Axios, the   show more ...  

chief administrative officer (CAO) for the House, Catherine Szpindor, […] La entrada US House of Reps tells staff: No Microsoft Copilot for you! – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 backdoor

Source: go.theregister.com – Author: Team Register Analysis The discovery last week of a backdoor in a widely used open source compression library called xz could have been a security disaster had it not been caught by luck and atypical curiosity about latency from a Microsoft engineer. Yet the fortunate find   show more ...  

has led industry observers to […] La entrada Malicious xz backdoor reveals fragility of open source – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Team Register Infosec in brief Nearly a year on from the discovery of a massive data theft at healthcare biz Harvard Pilgrim, and the number of victims has now risen to nearly 2.9 million people in all US states. Pilgrim’s problems were first admitted last year after a   show more ...  

March ransomware infection […] La entrada Nearly 3M people hit in Harvard Pilgrim healthcare data theft – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Alicia Buller, Contributing Writer 3 Min Read Source: MQ Naufal via Alamy Stock Photo The holy month of Ramadan is a period where Middle East-based companies step up cybersecurity with extra vigilance and outsourced support amid shortened working hours and increased   show more ...  

e-commerce activity. The ninth month of the Muslim calendar is […] La entrada Cybersecurity Threats Intensify in the Middle East During Ramadan – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Jennifer Lawinski Dark Reading is part of the Informa Tech Division of Informa PLC Informa PLC|ABOUT US|INVESTOR RELATIONS|TALENT This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC’s   show more ...  

registered office is 5 Howick Place, London SW1P 1WG. Registered in England […] La entrada Funding the Organizations Securing the Internet – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Jai Vijayan, Contributing Writer Source: Tada Images via Shutterstock Microsoft announced several new capabilities in Azure AI Studio that the company says should help developers build generative AI apps that are more reliable and resilient against malicious model   show more ...  

manipulation and other emerging threats. In a March 29 blog post, Microsoft’s chief […] La entrada Microsoft Beefs Up Defenses in Azure AI – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Certifications

Source: www.cybertalk.org – Author: slandau EXECUTIVE SUMMARY: On the fence about pursuing CISO certifications? For cyber security leaders, the job market is becoming increasingly competitive, a trend that’s forecast to continue across the next several years. Due to new levels of digital complexity,   show more ...  

organizations are demanding higher-caliber cyber security talent. For both aspiring CISOs and […] La entrada Top 10 advantages of the CISO certification path – Source: www.cybertalk.org se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.lastwatchdog.com – Author: bacohido By Byron V. Acohido It’s a digital swindle as old as the internet itself, and yet, as the data tells us, the vast majority of security incidents are still rooted in the low-tech art of social engineering. Related: AI makes scam email look real Fresh evidence   show more ...  

comes from  Mimecast’s “The […] La entrada MY TAKE: Why email security desperately needs retooling in this post-Covid 19, GenAI era – Source: www.lastwatchdog.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Best Practices

Source: www.lastwatchdog.com – Author: bacohido By Byron V. Acohido The technology and best practices for treating cybersecurity as a business enabler, instead of an onerous cost-center, have long been readily available. Related: Data privacy vs data security However, this remains a novel concept at most   show more ...  

companies. Now comes a Forrester Research report that vividly highlights […] La entrada Best Practices Q&A: The importance of articulating how cybersecurity can be a business enabler – Source: www.lastwatchdog.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . Apr 02, 2024NewsroomFirmware Security / Vulnerability The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis has revealed. The   show more ...  

audacious supply chain compromise, tracked as CVE-2024-3094 (CVSS score: 10.0), came […] La entrada Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . Cloud solutions are more mainstream – and therefore more exposed – than ever before. In 2023 alone, a staggering 82% of data breaches were against public, private, or hybrid cloud environments. What’s more, nearly 40% of breaches spanned multiple cloud   show more ...  

environments. The average cost of a cloud breach was above […] La entrada Harnessing the Power of CTEM for Cloud Security – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 China-Linked

Source: thehackernews.com – Author: . Apr 02, 2024NewsroomCyber Espionage / Threat Intelligence A threat activity cluster tracked as Earth Freybug has been observed using a new malware called UNAPIMON to fly under the radar. “Earth Freybug is a cyberthreat group that has been active since at least   show more ...  

2012 that focuses on espionage and financially motivated […] La entrada China-linked Hackers Deploy New ‘UNAPIMON’ Malware for Stealthy Operations – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . Apr 02, 2024NewsroomBrowser Security / Data Security Google has agreed to purge billions of data records reflecting users’ browsing activities to settle a class action lawsuit that claimed the search giant tracked them without their knowledge or consent in its   show more ...  

Chrome browser. The class action, filed in 2020, alleged the […] La entrada Google to Delete Billions of Browsing Records in ‘Incognito Mode’ Privacy Lawsuit Settlement – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BLEEPINGCOMPUTER

Source: www.bleepingcomputer.com – Author: Bill Toulas Russia’s Prosecutor General’s Office has announced the indictment of six suspected “hacking group” members for using malware to steal credit card and payment information from foreign online stores. These attacks are known as card   show more ...  

skimming, which involves infecting e-commerce websites with malicious code that either steals customers’ input on order checkout […] La entrada Russia charges suspects behind theft of 160,000 credit cards – Source: www.bleepingcomputer.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BLEEPINGCOMPUTER

Source: www.bleepingcomputer.com – Author: Bill Toulas Firmware security firm Binarly has released a free online scanner to detect Linux executables impacted by the XZ Utils supply chain attack, tracked as CVE-2024-3094. CVE-2024-3094 is a supply chain compromise in XZ Utils, a set of data compression tools and   show more ...  

libraries used in many major Linux distributions. Late […] La entrada New XZ backdoor scanner detects implant in any Linux binary – Source: www.bleepingcomputer.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BLEEPINGCOMPUTER

Source: www.bleepingcomputer.com – Author: Bill Toulas The Indian government says it rescued and repatriated 250 citizens who sought jobs in Cambodia, only to be forced into conducting cybercrime once they arrived. The government explains that these people were tricked into believing that lucrative job   show more ...  

opportunities were waiting for them in the Southeast Asian nation, yet they […] La entrada India rescues 250 citizens enslaved by Cambodian cybercrime gang – Source: www.bleepingcomputer.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2024-04
Aggregator history
Tuesday, April 02
MON
TUE
WED
THU
FRI
SAT
SUN
AprilMayJune