Smart devices: using them safely in your home
<div>Many everyday items are now connected to the internet: we explain how to use them safely.</div>
Cyber Security News
Are you hungry? A two-part blog about risk appetites
<div>Risk appetites; what are they, what’s their purpose, how do organisations go about defining them?</div>
'WannaCry' ransomware: guidance updates
<div>Jon L provides an update on the NCSC's guidance on the 'WannaCry' ransomware.</div>
Please stop saying 'it depends'!
<div>Why I'm trying desperately to stop saying 'it depends' when it comes to simple cyber security questions...</div>
Brightening the outlook for security in the cloud
<div>The NCSC's Cloud Security Research Lead suggests some approaches to help you get confidence in cloud services.</div>
NCSC IT: Installing software updates without breaking things
<div>Andy P explains how the NCSC rolls out software updates without delays.</div>
Cyber Threat Report: UK Legal Sector
<div>An updated report from the NCSC explaining how UK law firms - of all sizes - can protect themselves from common cyber threats.</div>
Using TLS to protect data
<div>Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.</div>
Setting up 2-Step Verification (2SV)
<div>How setting up 2SV can help protect your online accounts, even if your password is stolen.</div>
Serving up some server advice
<div>Highlighting guidance which will help you secure your servers</div>
Biden Signs New Cybersecurity Order
President Biden has signed a new cybersecurity order. It has a bunch of provisions, most notably using the US governments procurement power to improve cybersecurity practices industry-wide. Some details: The core of the executive order is an array of mandates for protecting government networks based on lessons learned from recent major incidents—namely, the security failures of federal contractors. The order requires software vendors to submit proof that they follow secure development pra
Hackers Deploy Malicious npm Packages to Steal Solana Wallet Keys via Gmail SMTP
Cybersecurity researchers have identified three sets of malicious packages across the npm and Python Package Index (PyPI) repository that come with capabilities to steal data and even delete sensitive data from infected systems. The list of identified packages is below - @async-mutex/mutex, a typosquat of async-mute (npm) dexscreener, which masquerades as a library for accessing liquidity pool
From Dark Web to Jackpot: How Cybercriminals Exploit Stolen Credentials in iGaming
It is essential to address credential stuffing directly and collaborate with the broader iGaming community to mitigate its risks. The post From Dark Web to Jackpot: How Cybercriminals Exploit Stolen Credentials in iGaming appeared first on Security Boulevard.
Pumakit – Sophisticated Linux Rootkit That Persist Even After Reboots
Pumakit is a sophisticated rootkit that leverages system call interception to manipulate file and network activity. It ensures persistence through kernel-level embedding that allows for continued operation after reboots.  By tampering with logs and employing anti-detection techniques that include disabling security tools, it hinders forensic investigations and maintains stealthy operations. This rootkit facilitates data exfiltration […] The post Pumakit – Sophisticated Linux Roo
FunkSec Ransomware Dominating Ransomware Attacks, Compromised 85 Victims In December
FunkSec is a RaaS operator that makes use of artificial intelligence and demonstrates how threat actor strategies are constantly evolving. The analysis reveals that artificial intelligence has limited sophistication, even though it enables rapid operations scaling and the generation of ransomware. Claims that have been recycled or fabricated undermine credibility and suggest that there may […] The post FunkSec Ransomware Dominating Ransomware Attacks, Compromised 85 Victims In December ap
Threat Actor IntelBroker Allegedly Claiming Breach of Hewlett Packard Enterprise Data
A threat actor known as IntelBroker has taken to a prominent dark web forum to claim a significant data breach at Hewlett Packard Enterprise (HPE). The alleged breach reportedly includes a vast array of sensitive information, raising concerns about the security of HPE’s data infrastructure and the potential implications for its customers and partners. Details […] The post Threat Actor IntelBroker Allegedly Claiming Breach of Hewlett Packard Enterprise Data appeared first on GBHackers Secur
Malicious npm and PyPI Packages Steal Solana Private Keys and Delete Sensitive Data
Malicious npm and PyPI Packages Steal Solana Private Keys and Delete Sensitive Data Post Views: 12 (adsbygoogle = window.adsbygoogle || []).push({});
Massive NBI Data Breach Exposes Millions of Users Records Online
The National Bureau of Investigation (NBI), the Philippines’ top investigative agency, has reportedly been compromised, exposing the sensitive data of millions of Filipinos. A dark web user operating under the pseudonym “Zodiac Killer” has taken responsibility for the attack, claiming to have leaked extensive personal and financial records. The breach involves a staggering 3.6 GB […] The post Massive NBI Data Breach Exposes Millions of Users Records Online appeared first
Rhino Linux 2025.1 Released – Update Now!
Rhino Linux is roaring into the new year with the exciting release of Rhino Linux 2025.1! After a brief pause to refine the system, this latest snapshot introduces an array of updates and improvements, solidifying Rhino Linux as a reliable and forward-thinking distribution. Here’s everything you need to know about this release and other thrilling announcements […] The post Rhino Linux 2025.1 Released – Update Now! appeared first on GBHackers Security | #1 Globally Trusted Cyber Secur
Considerations for Selecting the Best API Authentication Option
Implementing API authentication is one of the most critical stages of API design and development. Properly implemented authentication protects data, user privacy, and other resources while streamlining compliance, preventing fraud, and establishing accountability. In fact, broken authentication is one of the leading causes of API-related breaches. Ultimately, by applying robust authentication mechanisms, organizations can dramatically [...] The post Considerations for Selecting the Best API Aut