Category: Technology
-
How can developers ensure their software stands strong against the barrage of cyber threats today? The key lies in secure coding practices, which are crucial for building software that is not only functional but also resilient to potential security breaches. This article examines secure coding’s importance and unfolds through practical strategies like code minification, obfuscation,…
-
In the rapidly expanding world of the Internet of Things (IoT), our lives are increasingly interconnected with smart devices that promise to make daily tasks more efficient. From smart thermostats regulating our homes to wearables monitoring our health, the IoT era is reshaping how we interact with technology. Yet, this convenience comes with a price…
-
The Cybersecurity and Infrastructure Security Agency (CISA) is taking a strategic step forward by integrating its various zero trust security initiatives under one roof, according to Sean Connelly, CISA’s senior cybersecurity architect and trusted internet connections program manager, last Thursday at CyberScoop’s Zero Trust Summit. Connelly has been instrumental in shaping the agency’s zero trust…
-
Data disposal, a critical component of information lifecycle management, involves the processes and methods used to permanently remove or delete data from digital storage devices. This practice is essential in managing data securely, ensuring that once data is no longer required, it cannot be recovered or misused. Data disposal works by overwriting the original data…
-
In a recent SEC filing, Clorox, the American manufacturing giant known for its consumer and professional cleaning products, has disclosed the financial aftermath of a cyberattack that struck the company in August 2023. This cyber incident, which commenced on August 11, led to the company identifying unauthorized activities within its systems, prompting immediate action to…
-
The Federal Trade Commission’s (FTC) January 18th enforcement actions signal a significant shift in the regulatory landscape concerning consumer privacy and data protection. One of the most striking instances of this change is the proposed settlement with InMarket Media, a Texas-based data aggregator. This case is noteworthy not only for its direct implications for InMarket…
-
The year 2023 marked a significant surge in phishing attacks targeting cryptocurrency wallets, highlighting the increasing sophistication of cybercriminal activities in the blockchain space. These attacks, impacting a wide range of networks including Ethereum, Binance Smart Chain, Polygon, Avalanche, and nearly 20 others, have led to substantial financial losses, totaling nearly $295 million stolen from…
-
In a significant cybersecurity development, ESET, a leading Slovak cybersecurity firm, has unearthed a deceptive network of 18 malicious loan apps, collectively known as “SpyLoan.” These apps, designed to exploit users seeking financial services, have been downloaded over 12 million times. Primarily targeting regions in Southeast Asia, Africa, and Latin America, SpyLoan apps masquerade as…
-
AI training data poisoning is a form of cybersecurity threat that targets the integrity of machine learning models by deliberately inserting misleading or harmful data into the training set. This tactic can compromise the model’s accuracy, leading to incorrect or manipulated outputs. Nightshade, a tool developed by Ben Zhao’s team at the University of Chicago,…
-
On Thursday, the Office of Foreign Assets Control (OFAC) under the U.S. Department of the Treasury announced sanctions against the North Korean-affiliated group Kimsuky, along with eight international agents accused of aiding in evading sanctions. These sanctions, imposed against the North Korean cyberespionage group, (which is also known as APT43) mark a significant step in…
Netizen Blog and News 