Guide: The Ultimate Pentest Checklist for Full-Stack Security https://firewall.firm.in/wp-content/uploads/2024/10/breacklock.jpg Oct 21, 2024The Hacker NewsPenetration Testing / API Security Pentest Checklists Are More Important Than Ever Given the expanding attack surface coupled with the increasing sophistication of attacker tactics and techniques, penetration testing checklists have become essential for ensuring thorough assessments across an organization’s attack surface, both internal and external. By ...
Read More »Author Archives: firewallfirmadmin
Fake Apple products worth more than Rs 1.4 crore seized in Ireland – ET CISO
Fake Apple products worth more than Rs 1.4 crore seized in Ireland – ET CISO https://etimg.etb2bimg.com/thumb/msid-114416492,imgsize-12644,width-1200,height=765,overlay-etciso/corporate/fake-apple-products-worth-more-than-rs-1-4-crore-seized-in-ireland.jpg 800 counterfeit Apple devices have been reportedly seized in Ireland. According to a report by Irish radio station Newstalk, the country’s police have claimed that these devices, including AirPods and iPhone accessories, worth an estimated $173,904 (more than 1.4 crores) were reportedly seized in ...
Read More »Hackers target India’s biggest brands, IT Security News, ET CISO
Hackers target India’s biggest brands, IT Security News, ET CISO Earlier this year, a leading finance company found itself in the middle of a major cybersecurity breach due to a password compromise, leading to leakage of sensitive financial information. However, the case was handled internally and hushed up, according to a person with knowledge of the matter, who did not ...
Read More »Major security breach? ‘Pentagon documents’ leaked online – ET CISO
Major security breach? ‘Pentagon documents’ leaked online – ET CISO https://etimg.etb2bimg.com/thumb/msid-114416419,imgsize-896964,width-1200,height=765,overlay-etciso/data-breaches/major-security-breach-pentagon-documents-leaked-online.jpg A pro-Iranian Telegram account has leaked alleged classified Pentagon documents that detail Israel’s preparations for a potential military strike against Tehran. The documents, published by a pro-Iran Telegram account called “Middle East Spectator,” claim to provide insights into US intelligence observations of Israeli military activities conducted on October 15-16. ...
Read More »Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain
Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain https://firewall.firm.in/wp-content/uploads/2024/10/gambling-hacker.png The prolific Chinese nation-state actor known as APT41 (aka Brass Typhoon, Earth Baku, Wicked Panda, or Winnti) has been attributed to a sophisticated cyber attack targeting the gambling and gaming industry. “Over a period of at least six months, the attackers stealthily gathered valuable information from the targeted company ...
Read More »India Cybersecurity Leadership Report 2024 – ET CISO
India Cybersecurity Leadership Report 2024 – ET CISO https://etimg.etb2bimg.com/thumb/msid-114420687,imgsize-58112,width-1200,height=765,overlay-etciso/research/india-cybersecurity-leadership-report-2024.jpg Organizations now view cybersecurity investments as strategic imperatives. C-suite executives recognize that effective cybersecurity measures preserve customer trust, protect brand reputation, and ensure operational continuity. As a result, funding for cybersecurity initiatives is increasingly prioritized, with some companies allocating substantial portions of their IT budgets to cybersecurity solutions. India Cybersecurity Leadership ...
Read More »Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials
Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials https://firewall.firm.in/wp-content/uploads/2024/10/roundcube.png Oct 20, 2024Ravie LakshmananVulnerability / Email Security Unknown threat actors have been observed attempting to exploit a now-patched security flaw in the open-source Roundcube webmail software as part of a phishing attack designed to steal user credentials. Russian cybersecurity company Positive Technologies said it discovered last month that an ...
Read More »First cyber policy dialogue held between India and Singapore – ET CISO
First cyber policy dialogue held between India and Singapore – ET CISO https://etimg.etb2bimg.com/thumb/msid-114367171,imgsize-13032,width-1200,height=765,overlay-etciso/grc/first-cyber-policy-dialogue-held-between-india-and-singapore.jpg The first Cyber Policy Dialogue between India and Singapore was held here on Thursday to exchange views on cyber threat landscape and asses strategies and policies. The dialogue was co-chaired by Amit A Shukla, Joint Secretary, Cyber Diplomacy, Ministry of External Affairs of India and David Koh, ...
Read More »U’khand cyber attack: Initial probe points to breach at B’luru backup centre – ET CISO
U’khand cyber attack: Initial probe points to breach at B’luru backup centre – ET CISO https://etimg.etb2bimg.com/thumb/msid-114367216,imgsize-7858,width-1200,height=765,overlay-etciso/data-breaches/ukhand-cyber-attack-initial-probe-points-to-breach-at-bluru-backup-centre.jpg As the probe into the recent ransomware attack that forced the shutdown of 192 govt websites in the state continues, preliminary findings suggest the attackers first breached security at the disaster recovery (DR) centre in Bengaluru. The DR centre is managed by a private ...
Read More »Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks
Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks https://firewall.firm.in/wp-content/uploads/2024/10/russia.png Oct 19, 2024Ravie LakshmananNetwork Security / Data Breach A nascent threat actor known as Crypt Ghouls has been linked to a set of cyber attacks targeting Russian businesses and government agencies with ransomware with the twin goals of disrupting business operations and financial gain. “The group under ...
Read More »