The NSA and CISA have released their findings on the “Top Ten Cyber Security Misconfigurations” to enhance national cybersecurity. The report, released on October 5, 2023, highlights security mistakes that organizations need to be aware of. The report is important for public and private organizations that want to improve their …
Read More »Zero-days for hacking WhatsApp are now worth millions
Thanks to improvements in security mechanisms and mitigations, hacking cell phones — both running iOS and Android — has become an expensive endeavor. That’s why hacking techniques for apps like WhatsApp are now worth millions of dollars, TechCrunch has learned. Last week, a Russian company that buys zero-days — flaws …
Read More »Dual ransomware attack: The Next Generation of Cybercrime
The FBI has identified dual ransomware attacks as an increasing cybercrime trend. These attacks involve targeting a company twice within a short period of time. The attackers use two different types of ransomware to cause maximum harm, resulting in data encryption, data theft, and financial losses from ransom payments. AvosLocker, …
Read More »“Take over” and “flag Hunt”: Powered by Bangladesh Army
Take over (Elite research gathering) and flag hunt is going to be held on 16 October-2023 at MIST powered by IT Directorate, Bangladesh Army. The event is divided into two parts. The first one is “take over” Elite research gathering, a cybersecurity research-based conference and a platform to inspire local …
Read More »Bangladesh-India “CYBER MAITREE-2023” start tomorrow
Bangladesh-India is jointly going to celebrate “CYBER MAITREE-2023” from 02-04 October 2023 arranged by Enhancing Digital Government and Economy (EDGE) project. In this three days cyber security training and exercises, Shri SS Sarma, Senior Director, CERT-IN, Shri Ashutosh Bahuguna, Senior Scientist, CERT-IN and Shri Gaurav Pathak, Scientist, CERT-IN will join …
Read More »Hackers Manipulate Font Size to Bypass Office 365 Security
ZeroFont Phishing is a new yet old technique for sending Phishing emails. It allows threat actors to bypass security mechanisms and successfully send phishing emails. Using this technique, attackers were able to evade Microsoft’s Natural Language Processing, which was serving as portion against phishing emails for Office users. Office 365 …
Read More »Palo Alto Networks talks to buy Talon and Dig in a $1B security sweep
Palo Alto Networks’ stock price has been increasing due to strong earnings and high demand for cybersecurity services. The company is now taking advantage of this positive momentum to make some strategic acquisitions. Palo Alto, an American company, is in talks to buy two Israeli security startups for about $1 …
Read More »Air Canada admits hack of employee data
Air Canada, the national airline of Canada, has acknowledged a “brief” breach in its security controls. Air Canada confirmed that an incident occurred, but they did not give details about when or how much personal information was accessed by the attacker. “An unauthorized group briefly obtained limited access to an …
Read More »Donald Trump Dead, Tweets Trump Jr’s Hacked Twitter(X) Account
Donald Trump Jr.’s account on X (formerly known as Twitter) was hacked after it started sharing strange and erratic posts, according to a spokesperson for former President Donald Trump. Andrew Surabian posted on X stating that Don’s account had been hacked. He further clarified that the recent post asserting the …
Read More »18 free Microsoft Azure cybersecurity resources
Azure is a complete package of more than 200 products and cloud services. It goes beyond a regular public cloud platform. It is designed to address current challenges and prepare for future needs. Azure offers a wide range of options for building, running, and managing applications. You can use Azure …
Read More »