NSA Publishes Guidance on Adoption of Zero Trust Security

NSA Publishes Guidance on Adoption of Zero Trust Security

The U.S. National Security Agency (NSA) has published guidance on how security professionals can secure enterprise networks and sensitive data by adopting a Zero Trust security model. Titled “Embracing a Zero Trust Security Model,” the document details the benefits and challenges of the security model, and also provides a series of recommendations on the implementation…

Vendor Quickly Patches Serious Vulnerability in NATO-Approved Firewall

Vendor Quickly Patches Serious Vulnerability in NATO-Approved Firewall

A critical vulnerability discovered in a firewall appliance made by Germany-based cybersecurity company Genua could be useful to threat actors once they’ve gained access to an organization’s network, according to Austrian cybersecurity consultancy SEC Consult. Genua Genugate is a firewall designed for protecting internal networks against external threats, segmenting internal networks, and protecting machine-to-machine communications….

SolarWinds Blames Intern for ‘solarwinds123’ Password Lapse

SolarWinds Blames Intern for ‘solarwinds123’ Password Lapse

As cybersecurity researchers continue to piece together the sprawling SolarWinds supply chain attack, top executives of the Texas-based software services firm blamed an intern for a critical password lapse that went unnoticed for several years. The said password “solarwinds123” was originally believed to have been publicly accessible via a GitHub repository since June 17, 2018,…

Social media bots related to the sale of GameStop shares and other meme stocks

Social media bots related to the sale of GameStop shares and other meme stocks

Cybersecurity experts at PiiQ Media report detecting a social media bot campaign that has been promoting “meme stocks” like GameStop Corp, suggesting that a hacking group might be behind the recent purchase frenzy powered by Reddit. After a group of users organized through Reddit forums, the price of GameStop shares skyrocketed, in an attempt to…

Google Pixel Phones Get March 2021 Update With Latest Android Security Patch, New Features, Fixes

Google Pixel Phones Get March 2021 Update With Latest Android Security Patch, New Features, Fixes

Google Pixel phones have started receiving the March 2021 Pixel update along with the latest Android security patch. The update brings new share audio recordings feature, improved integration for an accessory that allows using the camera underwater, and more. The feature drop is available for Google Pixel 3 phones and newer models. Along with the…

Parler-like site Gab was hacked, 70 GB of data is now in the hands of an activist group

Parler-like site Gab was hacked, 70 GB of data is now in the hands of an activist group

What just happened? After Parler was shut down, many of its users flocked to a similar platform called Gab, which was recently hacked. The treasure trove includes both public and private data on 15,000 Gab users, which will provide journalists and researchers with an important sociological resource. Earlier this year, it was revealed that social…

Chinese cyber-attack threat raises head again, PowerMin accepts past cases

Chinese cyber-attack threat raises head again, PowerMin accepts past cases

Accusations of sabotage by Chinese malware agencies on India’s power grid started flying again with a report by Somerville-based Recorded Future citing the same and Maharashtra government ordering an investigation into whether or not the Mumbai outage in October 2020 was due to any Chinese sabotage. Cyber intelligence firm, Recorded…

Chinese Hackers Targeted India’s Power Grid Amid Geopolitical Tensions

Chinese Hackers Targeted India’s Power Grid Amid Geopolitical Tensions

Amid heightened border tensions between India and China, cybersecurity researchers have revealed a concerted campaign against India’s critical infrastructure, including the nation’s power grid, from Chinese state-sponsored groups. The attacks, which coincided with the standoff between the two nations in May 2020, targeted a total of 12 organizations, 10 of which are in the power…

Chinese hackers target Indian vaccine makers SII, Bharat Biotech, says security firm, IT News, ET CIO

Chinese hackers target Indian vaccine makers SII, Bharat Biotech, says security firm, IT News, ET CIO

A Chinese state-backed hacking group has in recent weeks targeted the IT systems of two Indian vaccine makers whose coronavirus shots are being used in the country’s immunisation campaign, cyber intelligence firm Cyfirma told Reuters. Rivals China and India have both sold or gifted COVID-19 shots to many countries. India produces more than 60% of…