Akash Deshmukh

Understanding CERT-In: India’s Cybersecurity Guardian In today’s digital age, cyber threats are a constant challenge. CERT-In (Computer Emergency Response Team - India) is at the forefront of protecting India’s cyberspace. From managing cybersecurity incidents to issuing best practices, CERT-In plays a crucial role in safeguarding businesses and individuals alike. Explore how this framework ensures resilience against cyber threats in our detailed article. Click the link below! https://lnkd.in/g39ZxUjg #CyberSecurityIndia #CERTIn #LawAndTech #DigitalSafety #CyberLaws #LawFirmInsights #CyberCrime Shiju Pv K P Sreejith Vinod P Veettil Shrishail Kittad Adv Nidhi Singh Abdullah Qureshi Shyam Mohite Ashwin R Anneppanavar Suresh Palav Aaushi Shah Doshi G.P. Yash Vardhan Pranava Charan Tannya Baranwal Nim Dem Dorjee Rahul Sundaram

6

🚨 Tata Informasi Asia (TIA) Data Breach Alert 🚨 A threat actor has claimed to expose a database containing 68,235 user records on a dark web forum. The incident involves Tata Informasi Asia (TIA)—a company recognized for delivering dynamic business solutions across HR, training, and digital transformation. 📊 Key Breach Details: Total Records Leaked: 68,235 Users File Size: 87,793 Lines Leak Date: Today 🔍 Why This Matters: Sensitive User Data: Personal information can be exploited for identity theft, fraud, and phishing attacks. Reputation Damage: Such breaches undermine trust and can trigger legal or regulatory consequences. Cyber Threat Escalation: Exposed data can fuel further targeted cyberattacks. 🚨 Action Required: Protect Your Data! 🚨 At DMonitor,we specialize in real-time data breach monitoring and exposure prevention. With tools like dMonitor, we help businesses and individuals proactively track compromised data, ensuring you're alerted before threats escalate. 👉 Visit dmonitor.io for 24/7 monitoring and protection! #CyberSecurity #DataBreach #DarkWeb #PrivacyProtection #TIABreach #InfoSec

2

Honoured to participate in a stimulating panel discussion at the NASSCOM - Data Security Council of India Annual Information Security Summit (AISS) 2024 on "Digital Forensics at the Crossroads – The Automation Mandate in the Modern DFIR( Digital Forensics and Incident Response)," held on 5th December 2024 at Hotel Pullman, Aerocity, Delhi. As the complexities of cybercrime evolve, the integration of automation into Digital Forensics and Incident Response (DFIR) is not just an option but a necessity. During the discussion, we explored the transformative power of automation in enhancing the efficiency and accuracy of forensic investigations, while also addressing challenges such as ethical concerns and maintaining the integrity of evidence. I extend my gratitude to Mr. Venkatesh Murthy. K Senior Director, Data Security Council of India for inviting me to such an exciting forum. I am all praise for the deep insight and invaluable knowledge shared by my co-panelists Dr. Gaurav Gupta Scientist, Ministry of Electronics and Information Technology and Niels Renken, Solution Consultant Magnet Forensics on this evolving field. It’s clear that the future of digital forensics lies in striking a right balance between human expertise and automation driven by technological advancements such as AI & ML. Together, we can shape a more efficient, scalable, and secure future for digital investigation. #CyberSecurity #AI #DigitalSafety #ForensicScience #LawEnforcementInnovation #SmartPolicing #PublicSafety #BShankerJaiswalIPS #DelhiPolice #AISS2024

120

8 Comments

Comprehensive Vulnerability and Risk Management for Total Security Kunal Bajaj Sachin Kumar Kaustubh Aradhye Gopesh Mehrotra Sachin Bahl Ashima Kataria Saurabh Seth Mohit Mittal PMP® Deep Shankar Yadav Vaibhav Sakhare CFE, ACE, EnCE Rajesh Kumar NxSAM - Security Audit and Management #vulnerabilitymanagement #cybersecurity #auditlifecycle #risk #nxsam #esecforte

48

#Reporting #cyber fraud to the police is vital, as seen with Mumbai Police's recovery of Rs 100 crore and their resolution of 35,918 complaints. The #helpline #1930 has been instrumental, demonstrating that "prompt reporting empowers authorities to take swift action and protect victims." Read complete article below: https://lnkd.in/gNgYgeiU

18

Cybercrooks are no tech geeks, but most are smart storytellers: DCP Cyber Crime. Read more at: https://lnkd.in/dQW5ZbhJ by Deccan Herald. Facing issues with #CyberCrime storytellers? RTIwala can guide you on how to stay protected. Visit https://cc.rti.link/lic for more information. #RTIwala #Legaltech #FraudPrevention #StaySafeOnline #CyberSecurity

1

1 Comment

Exemplary service by Hyderabad Cyber Crime Cops and prompt reporting by the victim within the golden hour of cyber crime incident occurance helped preventing the fraudulent financial transaction. Hopefully the fraudsters will be traced soon. #cyberincident #ekycfrauds #incidentresponse #securityawareness

6

 💡#Didyouknow that the CIS Controls are a prioritized set of 20 best practices that can significantly reduce the likelihood of a successful cyberattack. Deep Chanda Salil Sankaran Saikat Das (Sam) Prajwal Gowda Nikhil Raj Singh Jaideep Patil #ampcuscyber #didyouknowfacts #cybersecuritytraining #securitytraining #phishingattacks #vulnerabilities #cyberattack #security #cybercrimes #dataprotection #dataprivacy #cybersecurity #complaince #cyberdefense #cybersecurityawareness #didyouknow

16

🚨 Data Breach attack in the Telecom Industry : BSNL 🚨 Bharat Sanchar Nigam Limited (BSNL), India’s state-owned telecommunications provider, has suffered a major data breach orchestrated by a threat actor known as “kiberphant0m”. Compromised around 278GB of sensitive data, putting millions of users at risk of SIM card cloning, identity theft, and financial fraud. Compromised data includes International mobile subscriber identity (IMSI) numbers, SIM card details, home location register (HLR) data, and critical security keys. Data Breach not only exploited BSNL but also interconnected systems and networks, posing significant national security risks. Data being sold on the dark web for around $5,000 due to its sensitive nature and broad scope. 💡 Potential Risks: SIM Cloning and Identity Theft: Attackers can create duplicate SIM cards to intercept communications, access bank accounts, and commit fraud. Financial Losses: Security breaches on financial accounts could lead to significant user losses. Service Disruptions: Unauthorized access to telecom operations may cause outages and degrade performance. National Security Threats: The breach could undermine infrastructure stability and set a precedent for attacks on critical systems. This breach raises serious concerns about BSNL’s data security practices and the potential consequences for its users and national security. Prompt action and enhanced security measures are essential to mitigate the risks. To get services related to penetration testing, security auditing, and security assessment contact DigiSec360°. #Digisec360 #CyberSecurity #DataBreach #BSNL #IdentityTheft #NationalSecurity #DigitalRisk #TechNews #InfoSec #SIMCloning #FraudPrevention #TelecomSecurity

3

Securing India's Financial Sector: The SEBI Cybersecurity Framework Explore how SEBI’s comprehensive Cybersecurity and Cyber Resilience Framework (CSCRF) strengthens the defenses of regulated entities against evolving threats. From mandatory WAF and API security deployment to continuous monitoring, this framework is essential for resilience and compliance for all REs. #PageNTRA #SiteWALL #CyberSecurity #SEBI #FinancialSector #Resilience #Compliance #SiteWALL #WebApplicationFirewall #CyberResilience #ThreatPrevention #DigitalSecurity #InfoSec #RiskManagement #CIO #CIOS #CISO #CISOS #VAPT #IncidentResponse

20

1 Comment

A security vulnerability in McDonald's India's delivery system allegedly exposed the personal data of its customers and delivery drivers The flaws discovered by security researcher Eaton Zveare of Traceable Al were found in the company's API used for order placement and tracking. The development was first reported by TechCrunch. Zveare claimed to have reported the issue to McDonald's India in July, after which he said the company fixed the vulnerability by late September. The incident happened in McDonald's 'West & South India' franchisee, which is operated by Hardcastle Restaurants Private Limited (HRPL), Zveare said in a blog post. However, McDonald's India told TechCrunch that its internal checks found no breach of customer data. "We conduct regular audits and assessments to continuously strengthen our security measures, and have all the necessary enhancements implemented, ensuring all our systems are up to date and secure," the company told the publication. #news #mcdonalds #data

2

One cyber incident or data breach can lead to data loss of millions of data and people records. And, also have a strong impact on organisations financial and reputation loss. Cyber Security plays a very important part in the current threat landscape to protect the business and people from hackers. Understanding the importance of cyber security and business resilience, I have penned down some thoughts on "Why Cyber Recovery is Important"! #dataprotection #cyberresilience #datadriven #Privacymatters

16

1 Comment

Cybersecurity is not just - don't share password and OTP It's a career ISC2 Mumbai Chapter Chartering has partnered with ISC2 and Center for Cyber Safety and Education in their One Million Certified in Cybersecurity workforce initiative Free course in Cybersecurity for a limited time This course is for job ready candidates This course is for those candidates who are looking for a change in their career (industry) This course is for those interested in Cybersecurity University of Mumbai

23

1 Comment

The Cyber Security Association of India (CSAI) has appointed Vijayant Gaur as Director General. With over 20 years of expertise in cyber risk management, AI, ML, and Blockchain, Gaur holds certifications in CISM and CISA. His leadership aims to address India’s evolving digital challenges and enhance cybersecurity initiatives. #CSAI #VijayantGaur #NewAppointment Shubham garg | The Viral Vault, India

5

1 Comment

Message Recieved at date: May 14, 2024, 5:12 PM Letter CPV/2024/05/14-03-Revised        Dated 14.05.2024 To: CTO, Employees, Interns, Volunteers, Cyber Privilege Pvt. Ltd. Subject: Immediate Compliance Required for Status Report Submissions Dear Team, It has come to our attention that there have been significant lapses in the submission of daily and weekly status reports by employees, interns, and volunteers. This is unacceptable and will no longer be tolerated. Effective immediately, all employees, interns, and volunteers are required to submit their Daily Status Reports and Weekly Status Reports without fail. These reports must be ready for review during the weekend meetings. This directive follows the instructions laid out in our CEO's letter and the Board of Resolution Letter CPV/2024/05/14-01 dated 14.05.2024. Furthermore, you must follow up on any client assignments promptly. This applies to tasks assigned by the CEO, CTO, or HR. The CTO will also receive directives from the CEO and HR. Failure to comply with these instructions will have serious consequences. For employees, this could mean the withholding of your salary, which will otherwise be released on time by May 31st. For interns, any instances of poor performance or non-compliance will be reported to the respective Head of Department at your college or university. This could lead to the cancellation of your internship and the withholding of your internship certificate and incentives. Volunteers will face similar consequences, including the withholding of volunteer certificates and perks. We expect all team members to perform their duties diligently. Ensure that your work is thoroughly reviewed before submission. Any instance of poor performance or failure to meet the required standards will be reported directly to the CEO and his instructions to HR [email protected] and the Accounts Department, Mr. K. Satya [email protected], which could result in severe repercussions. We have high expectations for everyone associated with Cyber Privilege Pvt. Ltd. Do not take this lightly. This is a final warning. Take your responsibilities seriously and ensure compliance immediately. With Warm Regards, Smt. K. Jaya Naidu | श्रीमती के जया नायडू HR Manager | मानव संसाधन प्रबंधक, Cyber Privilege Pvt. Ltd | साइबर प्रिविलेज प्रा. लि. Hyderabad, Telangana, India. हैदराबाद, तेलंगाना, भारत. Email : [email protected] Website: www.cyberprivilege.com

3

This shortage of skills would prove fatal as India surges ahead as one of the fastest-growing economies in the world. @fnCyber - we contribute whatever we can and do our part by deriving cost-effective and robust cybersecurity solutions suited to different business needs. #CybersecurityisSimplified https://lnkd.in/gD-FCtg2

2

"Cybercrime Crisis" At the ISACA Annual Cyber Security Conference in Hyderabad, Bhavesh Mishra, Deputy Secretary of Telangana IT and Electronics Department, revealed that Indians are losing between ₹1.3 to ₹1.5 lakh to cyber criminals every minute. With the recovery rate below 20%, the urgency to enhance cyber security measures is paramount. Here are five steps businesses can take to protect themselves: 1. Implement Strong Authentication: Use multi-factor authentication (MFA) to add an extra layer of security to your accounts. This makes it harder for cyber criminals to gain unauthorized access. 2. Regular Security Audits: Conduct regular security audits and vulnerability assessments to identify and fix potential weaknesses in your systems. 3. Employee Training: Educate employees about cyber threats and safe practices. Regular training can help prevent phishing attacks and other common cyber threats. 4. Data Encryption: Encrypt sensitive data both in transit and at rest. This ensures that even if data is intercepted, it cannot be read without the decryption key. 5. Resilient Incident Response Plan: Develop and maintain a comprehensive incident response plan. This will help your organization respond quickly and effectively to any cyber incidents. By taking these proactive steps, businesses can significantly reduce their risk of falling victim to cybercrime and protect their valuable assets. At fnCyber, we specialize in providing holistic cybersecurity solutions designed for all kinds of organizations. Don’t wait until it’s too late - prioritize cybersecurity today. Contact us now for a personalized consultation and take the first step towards unmatched protection. Contact us at www.fncyber.com

5

1 Comment

Message Recieved at date: May 14, 2024, 5:12 PM Letter CPV/2024/05/14-03-Revised        Dated 14.05.2024 To: CTO, Employees, Interns, Volunteers, Cyber Privilege Pvt. Ltd. Subject: Immediate Compliance Required for Status Report Submissions Dear Team, It has come to our attention that there have been significant lapses in the submission of daily and weekly status reports by employees, interns, and volunteers. This is unacceptable and will no longer be tolerated. Effective immediately, all employees, interns, and volunteers are required to submit their Daily Status Reports and Weekly Status Reports without fail. These reports must be ready for review during the weekend meetings. This directive follows the instructions laid out in our CEO's letter and the Board of Resolution Letter CPV/2024/05/14-01 dated 14.05.2024. Furthermore, you must follow up on any client assignments promptly. This applies to tasks assigned by the CEO, CTO, or HR. The CTO will also receive directives from the CEO and HR. Failure to comply with these instructions will have serious consequences. For employees, this could mean the withholding of your salary, which will otherwise be released on time by May 31st. For interns, any instances of poor performance or non-compliance will be reported to the respective Head of Department at your college or university. This could lead to the cancellation of your internship and the withholding of your internship certificate and incentives. Volunteers will face similar consequences, including the withholding of volunteer certificates and perks. We expect all team members to perform their duties diligently. Ensure that your work is thoroughly reviewed before submission. Any instance of poor performance or failure to meet the required standards will be reported directly to the CEO and his instructions to HR [email protected] and the Accounts Department, Mr. K. Satya [email protected], which could result in severe repercussions. We have high expectations for everyone associated with Cyber Privilege Pvt. Ltd. Do not take this lightly. This is a final warning. Take your responsibilities seriously and ensure compliance immediately. With Warm Regards, Smt. K. Jaya Naidu | श्रीमती के जया नायडू HR Manager | मानव संसाधन प्रबंधक, Cyber Privilege Pvt. Ltd | साइबर प्रिविलेज प्रा. लि. Hyderabad, Telangana, India. हैदराबाद, तेलंगाना, भारत. Email : [email protected] Website: www.cyberprivilege.com

1

Addressing Concerns on Recent Fraud Incidents ⚠️ Under strict security controls prescribed by the Reserve Bank of India (RBI), including 𝐞𝐧𝐝-𝐭𝐨-𝐞𝐧𝐝 𝐞𝐧𝐜𝐫𝐲𝐩𝐭𝐢𝐨𝐧, customers can share their data with financial institutions of their choice and view it on their personal devices. The AAs are 𝐝𝐚𝐭𝐚-𝐛𝐥𝐢𝐧𝐝 consent managers and 𝐜𝐚𝐧𝐧𝐨𝐭 𝐬𝐭𝐨𝐫𝐞 𝐨𝐫 𝐝𝐞𝐜𝐫𝐲𝐩𝐭 this data on the server side. Additionally, they 𝐜𝐚𝐧𝐧𝐨𝐭 𝐢𝐧𝐢𝐭𝐢𝐚𝐭𝐞 𝐨𝐫 𝐜𝐚𝐫𝐫𝐲 𝐨𝐮𝐭 any financial transactions for the customer or anyone else. A few isolated incidents of fraud involving the use of compromised SIMs & devices to access customer financial information through Account Aggregators (AAs) were brought to our attention. We would like to clarify that fraudsters exploited 𝐜𝐨𝐦𝐩𝐫𝐨𝐦𝐢𝐬𝐞𝐝 𝐒𝐈𝐌𝐬 𝐚𝐧𝐝 𝐝𝐞𝐯𝐢𝐜𝐞𝐬 to use an AA application to access customer data for targeted phishing attacks. It is important to note that this was not a breach of any Account Aggregator systems but a result of a compromised SIM. 🔗 Read the complete response from Sahamati and the Account Aggregator (AA) Steering Committee of the ecosystem here: https://lnkd.in/geTCs2U7 #accountaggregator #digitalpublicinfrastructure #dataprotection #security #safety

60

1 Comment