News and Resources

CNIL, the Data Protection authority of France issued new guidelines on awareness for organizations on compliance with the GDPR.

The UK dismissed a $4 billion suit against Google

Data Privacy

The UK’s Apex Court dismissed a $4.3 billion lawsuit filed against Google for illegally tracking the personal data iPhone users.

‘OWASP’: A Way Forward For An Effective Cyber Security

Open Web Application Security Project is a Non Profit Foundation dedicated to improving the security of specific software.

A market for cyber lemons?

As per George Akerlof, cyber security market is simply a market for lemons. Sellers know what they’re selling, whether it’s a cyber security package or lemons, not the buyers.

Australian Privacy Legislation Amendment Bill

Federal government released an exposure draft for an Online Privacy Bill to enhance online privacy protections.

Pegasus Judgment: A New Framework For Democracy

Pegasus spyware was used on India’s top officials. India’s apex court has issued a verdict expressing points of views on this critical cyber issue.

India & Russia Ameliorating in Cyber Security

India and Russia to advance cyber security in order to reduce cyber attacks, and experience a secure cyber world.

Merger of 2 Tech Giants – McCafé AND FireEye

McAfee and FireEye’s highly skilled teams have joined forces, with an integrated security platform powered by AI and automation.

Social Media giants face hefty fines from Russia

Violation of the data localization rules laid down by Russia lands giant social media companies, Facebook and Twitter in troubled waters.

18 Indian states to establish cyber forensic labs

States create state-of-the-art cyber forensic-cum-training centres with the backing of the Ministry of Home Affairs to assist authorities.

Flaws Affects Realtek WiFi SDKs affecting IoTs

Vendors made 200 IoT devices using software development kits (SDKs) accompanied by Wi-Fi module, had atleast four security vulnerabilities.

E-commerce Platform for Women SHG Groups

Digital initiative for SHGs is taken by India’s present government by announced the establishment of an Platform for rural working women.

Delhi HC inquiries GOI’s plan to investigate data breaches

In response to a petition filed by FSMI, High Court requested the government’s plan of action to deal with rising data security breaches.

“Ficker Stealer” based on Rust used for Data Theft

Russian malware intended to circumvent security and steal user data is being marketed and spread on underground Russian forums.

IAMAI-BACC appoints a New Advisory Board member

Dr. Gulshan Rai (CISO PMO) has been appointed as an Advisory Board Member of the Blockchain and Crypto Assets Council (BACC).

LED Power Indicator used for Audio Spying

Using the new Glowworm attack, hackers snoop through a led power light by tapping LED power light and turning the signals into audio.

New Cybersecurity Policy implemented by Pakistan

Pakistan IT Ministry has introduced a new Cybersecurity Policy after it accused India for using Pegasus to spy on its President Imran Khan.

World’s biggest ever Cryptohack worth $600M

Claiming act to be with bona fide, white-hat intention, hackers claim to return the funds but not shown any interest in the bounty offered.

DNA Technology Bill 2019: A Cause for Concern

The DNA Technology (Use and Application) Bill, which is set to pass Parliament, still lacks the requisite privacy safeguards.

‘Friends’ Reunion: Popular sitcom cheated by swindling

As per ‘Kaspersky’, many fake sites appeared during the telecast of episode, offering the screening in lieu of a nominal subscription fee.

London High court orders to trace crypto hackers

Court ordered Binance, the largest cryptocurrency exchange, to track and freeze the accounts of hackers involved in the $2.6 million hack.

Bombay HC Questions Central’s new IT Rules

Petitioners representing digital media claims that the new rules violate India’s IT Act as well as Article 19(2)’s reasonable restrictions.

Unwanted BOT traffic costing up to 250$ a year

The Internet’s presence has become crucial for the retail industry’s survival. Hard-to-find bots are now targeting the vulnerable businesses.

Vultur: New Malware born to steal sensitive credentials

A malware has been discovered which uses new techniques to screen record the credentials. It is difficult to remove if entered through apps

Why Do Users Ignore Multi-Factor Authentication?

Adoption of 2FA is still low, posing a severe challenge for the entire sector. We’re left relying on powerful techniques to keep accounts secure.

REvil’s website becomes inaccessible

Ransomware gangs delete their past identity and come back with a new image, when they begin to get more attention from security agencies.

WhatsApp Messages Hold No Evidential Value: SCI

Indian apex court held that the author of WhatsApp messages cannot be traced back to them, particularly in business partnerships.

The Dark Web Economy

Dark Web Economy, emerged as a business operation for criminals which includes sell and trade of illegal data and products just like any other economy.

EU imposes privacy fine on Amazon Europe Core

European Union has imposed highest wver privacy fine for processing personal data violating the General Data Protection Regulations of EU.

New malware to target Indian govt officials

A cyber-espionage outfit has been detected targeting Indian officials as part of a broad campaign by a new group known as SideCopy.

Indian govt. to launch a new cybersecurity strategy

The Indian government to launch a new strategy in 2021 with the vision to ensure safe, secure, resilient, vibrant, and trusted cyberspace.

India’s Ex MLA filed a complaint as his clubhouse chat got leaked

Digvijaya Singh informed reporters that he filed a case under the IT Act with the MP police’s cyber unit.

Data over 3M Windows devices stolen: REPORTS

NordLocker researchers say they found another 1.2 TB data breach of stolen data on computers running Windows OS.

‘Epsilon Red’ – A New Ransomware Variant

A new ransomware is discovered by Sophos security experts. This variant appears to be dependent on sluggish Microsoft Exchange servers.

Joker Malware ALERT!!

The Joker malware enters the user’s device through applications and collects data and subscribes these users at a premium subscription without the user’s knowledge.

Cl0p-affiliated hackers were exposed

In the United States and South Korea, a group of hackers utilized ransomware to extort money from a foreign corporation.

How to get rid of WhatsApp Web’s persistent notification

WhatsApp Web: Here’s how you can disable persistent notification in your phone if you don’t need it pinned at the top of your notifications panel.

Indian origin man Hacked into system of U.S. Hospital

Cyber Security, Uncategorized

Atlanta’s Federal Grand Jury, has summoned Vikas Singla, an Indian-origin man and an inhabitant of Marietta, Georgia on June 08, 2021.

Global Internet Outage – 2021

Several of the major websites all around the world went down about 50 minutes on Tuesday (8th JUNE) due to an issues with a CDN.

Ryuk Ransomware Operator’s new Techniques

Ryuk Ransomware’s leaders are focusing on high-demand infrastructures in order to extort a large sum of money from its victims.

Automatic HTTPS mode added in Microsoft Edge

Microsoft Edge is now able to switch users to a secure HTTPS connection when visiting websites via HTTP.

50,000 IPs compromised in Kubernetes clusters

On May 28, it was announced that the TeamTNT Threat Actors had compromised over 50K IPs.

Security Flaw in Apple’s ‘AirDrop’

The security flaw found in Apple’s Airdrops has a risk of a major data breach of user’s data.

Air India Cyber Attack

Air India reported a massive security breach that involved the compromising of sensitive customer data from the last 10 years. No evidence of misuse of the data found

It’s Time for teachers to learn cyber-security

A student in the U.K. successfully hacks into their teacher’s computer system to change grades.

FragAttack

On 14 May, ‘FragAttack’ was discovered, it is a collection of flaws in WiFi’s basic architecture including a long-standing and broadly used threat vector.

The worst cyberattack in U.S.A. history

The attack that forced the closure of an important U.S. pipeline was carried out by a group of criminals known as ‘DarkSide’.

UNC2529 Hacking Group

On May 7, 2021, a New Financially Motivated UNC2529 Hacking Group Targets U.S. Organizations with their 3 new Malwares that are Doubledrag, Doubledrop, and Doubleback.

Tesla car can be hacked Remotely: Proved

Two investigators have shown how Tesla – and perhaps other vehicles – can be hacked remotely without user communication.

Delhi High Court rejects pleas against CCI probe

The competitive nature of technological giants is now openly seen to be acting beyond the well-being of their professed top priority i.e., their customers

PINK WHATSAPP?

With the increasing dependence on social networking applications, there is also the difficulty in differentiating the real and fake messages propagated through them.

DOMINO’S DATA BREACH

Despite their massive technological outputs Indian companies are now active victims of cyber threats & hence the need for their growth into an secure network is important.

500 MILLION LINKEDIN USER’S DATA LEAKED ONLINE

Rapid advancements in tech have duly failed in administering adequate dosage of legal & ethical frameworks.

FACEBOOK DATA BREACH

Technological giants racing towards forming global establishments are now being tormented from the roots questioning their individual agendas as well.

On March 30, MobiKwik underwent a major data breach which exposed private information of more than 10 legitimate primary users. The data that has been violated is the user’s name, e-mail addresses, KYC details.

Malware Attacks on Business Accounts

Facebook and Instagram business accounts got hacked by a Malware called CopperStealer. It used the user’s information for illegal activities .

SalcusCare targeted by phisher

SalusCare believes it ran through malware, likely phishing. The company was targeted by phishers and all staff and patient data were violated

Linux Kernel Vulnerability

The Security researcher Alexander Popov discovered vulnerabilities in the core of Linux operating systems that could allow an attacker to increase local privileges .

GoldMax, GoldFinder, and Sibot, are new Malwares