Urmila K.

In light of SEBI's recent release of a comprehensive cybersecurity framework, which mandates all registered entities to establish Security Operation Centres by April 1, 2025, it's clear that cybersecurity is not just a regulatory requirement but a critical pillar for the success of Digital India. At Social & Media Matters, we believe that safeguarding our digital infrastructure is essential to achieving the dream of a connected and secure India. We also urge that similar robust actions be taken to ensure online safety, particularly as we navigate the complexities of a rapidly digitizing world. It's time we prioritize both cybersecurity and online safety to protect every citizen in our digital journey. #CyberSecurity #DigitalIndia #OnlineSafety #SocialAndMediaMatters https://lnkd.in/dMRhs76f

2

2 Comments

#DPDPA implementation rules are expected to be available for consultation soon. Its much awaited as it would bring some clarity around enforcement of data privacy in Indian landscape. Though these rules alone may not bring the necessary transformation. Privacy is an individual centric concept at the core and can’t be implemented without security controls. For any privacy program to succeed 1.   Data fiduciaries must adhere to data processing guidelines by maintaining CIA of personal information. 2.   The individuals must be educated about importance of PII and the rights available to protect privacy under legal framework. They must know how to exercise the rights. #2 is above is the key – as unless individuals start exercising their rights, the true implementation and effectiveness of protection of PII can’t be guaranteed. What this means is that, -      Individuals start reading consents / question grounds for processing -      Know when to withdraw the consent -      Know all available data subject rights -      Know how PII is shared Hopefully , #DPDPA brings the much needed awareness in India, given the pace at which digitization has been taking place in the country. While below success factors apply in general to all privacy framework .. #DPDPA can’t be really compared to GDPR or any other framework – due to unique cultural set up in India and how ‘privacy as a fundamental right’ is perceived here. #dataprivacy #privacy #InformationSecurityInsights CYTAD RiVedix

136

8 Comments

Understanding CERT-In: India’s Cybersecurity Guardian In today’s digital age, cyber threats are a constant challenge. CERT-In (Computer Emergency Response Team - India) is at the forefront of protecting India’s cyberspace. From managing cybersecurity incidents to issuing best practices, CERT-In plays a crucial role in safeguarding businesses and individuals alike. Explore how this framework ensures resilience against cyber threats in our detailed article. Click the link below! https://lnkd.in/g39ZxUjg #CyberSecurityIndia #CERTIn #LawAndTech #DigitalSafety #CyberLaws #LawFirmInsights #CyberCrime Shiju Pv K P Sreejith Vinod P Veettil Shrishail Kittad Adv Nidhi Singh Abdullah Qureshi Shyam Mohite Ashwin R Anneppanavar Suresh Palav Aaushi Shah Doshi G.P. Yash Vardhan Pranava Charan Tannya Baranwal Nim Dem Dorjee Rahul Sundaram

6

Vulnerabilities in web applications have resulted in victim organisations incurring significant remediation expenses. S Kumar Subramania discusses the top 5 vulnerabilities discovered by K7’s VAPT team across numerous assessments of web applications, with mitigation measures. https://lnkd.in/dex_TkEj #vapt #vaptteam #webapplication #k7 #cybersecurity #brokenauthentication #paymenttampering #sqlinjection #crosssitescripting #xxs #middleeast

9

Honoured to participate in a stimulating panel discussion at the NASSCOM - Data Security Council of India Annual Information Security Summit (AISS) 2024 on "Digital Forensics at the Crossroads – The Automation Mandate in the Modern DFIR( Digital Forensics and Incident Response)," held on 5th December 2024 at Hotel Pullman, Aerocity, Delhi. As the complexities of cybercrime evolve, the integration of automation into Digital Forensics and Incident Response (DFIR) is not just an option but a necessity. During the discussion, we explored the transformative power of automation in enhancing the efficiency and accuracy of forensic investigations, while also addressing challenges such as ethical concerns and maintaining the integrity of evidence. I extend my gratitude to Mr. Venkatesh Murthy. K Senior Director, Data Security Council of India for inviting me to such an exciting forum. I am all praise for the deep insight and invaluable knowledge shared by my co-panelists Dr. Gaurav Gupta Scientist, Ministry of Electronics and Information Technology and Niels Renken, Solution Consultant Magnet Forensics on this evolving field. It’s clear that the future of digital forensics lies in striking a right balance between human expertise and automation driven by technological advancements such as AI & ML. Together, we can shape a more efficient, scalable, and secure future for digital investigation. #CyberSecurity #AI #DigitalSafety #ForensicScience #LawEnforcementInnovation #SmartPolicing #PublicSafety #BShankerJaiswalIPS #DelhiPolice #AISS2024

120

8 Comments

#Reporting #cyber fraud to the police is vital, as seen with Mumbai Police's recovery of Rs 100 crore and their resolution of 35,918 complaints. The #helpline #1930 has been instrumental, demonstrating that "prompt reporting empowers authorities to take swift action and protect victims." Read complete article below: https://lnkd.in/gNgYgeiU

18

Massive BSNL data breach exposes millions to SIM card cloning BSNL, India's state-owned telecom giant, has suffered a major data breach exposing millions to serious risks of SIM card cloning and financial fraud. According to a recent Threat Intelligence Report by Athenian Tech, the breach orchestrated by 'kiberphant0m' includes sensitive details like IMSI numbers, SIM data, and more. Over 278GB of critical information has been compromised, with the hacker offering stolen data for $5,000. This breach not only jeopardizes user privacy but also threatens national security. BSNL users should monitor accounts closely and enable 2FA immediately. Stay vigilant against potential scams and phishing attacks. #Cybersecurity #DataBreach #BSNL #2FA #PrivacyProtection #CyberThreats #SecurityTrends #fraud #digitalfraud #security #fraudprevention

3

Message Recieved at date: May 14, 2024, 5:12 PM Letter CPV/2024/05/14-03-Revised        Dated 14.05.2024 To: CTO, Employees, Interns, Volunteers, Cyber Privilege Pvt. Ltd. Subject: Immediate Compliance Required for Status Report Submissions Dear Team, It has come to our attention that there have been significant lapses in the submission of daily and weekly status reports by employees, interns, and volunteers. This is unacceptable and will no longer be tolerated. Effective immediately, all employees, interns, and volunteers are required to submit their Daily Status Reports and Weekly Status Reports without fail. These reports must be ready for review during the weekend meetings. This directive follows the instructions laid out in our CEO's letter and the Board of Resolution Letter CPV/2024/05/14-01 dated 14.05.2024. Furthermore, you must follow up on any client assignments promptly. This applies to tasks assigned by the CEO, CTO, or HR. The CTO will also receive directives from the CEO and HR. Failure to comply with these instructions will have serious consequences. For employees, this could mean the withholding of your salary, which will otherwise be released on time by May 31st. For interns, any instances of poor performance or non-compliance will be reported to the respective Head of Department at your college or university. This could lead to the cancellation of your internship and the withholding of your internship certificate and incentives. Volunteers will face similar consequences, including the withholding of volunteer certificates and perks. We expect all team members to perform their duties diligently. Ensure that your work is thoroughly reviewed before submission. Any instance of poor performance or failure to meet the required standards will be reported directly to the CEO and his instructions to HR [email protected] and the Accounts Department, Mr. K. Satya [email protected], which could result in severe repercussions. We have high expectations for everyone associated with Cyber Privilege Pvt. Ltd. Do not take this lightly. This is a final warning. Take your responsibilities seriously and ensure compliance immediately. With Warm Regards, Smt. K. Jaya Naidu | श्रीमती के जया नायडू HR Manager | मानव संसाधन प्रबंधक, Cyber Privilege Pvt. Ltd | साइबर प्रिविलेज प्रा. लि. Hyderabad, Telangana, India. हैदराबाद, तेलंगाना, भारत. Email : [email protected] Website: www.cyberprivilege.com

3

𝐁𝐚𝐫𝐫𝐚𝐜𝐮𝐝𝐚 𝐏𝐫𝐞𝐝𝐢𝐜𝐭𝐬 𝐄𝐯𝐨𝐥𝐯𝐢𝐧𝐠 𝐏𝐡𝐢𝐬𝐡𝐢𝐧𝐠 𝐓𝐞𝐜𝐡𝐧𝐢𝐪𝐮𝐞𝐬 𝐭𝐨 𝐖𝐚𝐭𝐜𝐡 𝐟𝐨𝐫 𝐢𝐧 𝟐𝟎𝟐𝟓 Barracuda Networks, Inc has published its predictions for how phishing techniques will evolve in 2025. The predictions are based on innovations in phishing techniques observed in 2024 by Barracuda’s India-based threat analysis team. They show how phishing remains a dangerous and adaptable threat to businesses in India and the growing importance of robust and multilayered cybersecurity strategies. According to the threat analysts, credential theft will remain the primary goal of phishing scams over the coming year, with around 50% of such attacks relying on Phishing-as-a-Service (PhaaS) kits, up from 30% in 2024. 𝐑𝐞𝐚𝐝 𝐌𝐨𝐫𝐞👉https://lnkd.in/gqFf7UNa #CyberSecurity #BarracudaNetworks #PhishingAttacks #phishingtechniques #Digitalterminal Barracuda |Ashok Sakthivel | Jyoti Janda |Rajeev Ranjan

6

A security vulnerability in McDonald's India's delivery system allegedly exposed the personal data of its customers and delivery drivers The flaws discovered by security researcher Eaton Zveare of Traceable Al were found in the company's API used for order placement and tracking. The development was first reported by TechCrunch. Zveare claimed to have reported the issue to McDonald's India in July, after which he said the company fixed the vulnerability by late September. The incident happened in McDonald's 'West & South India' franchisee, which is operated by Hardcastle Restaurants Private Limited (HRPL), Zveare said in a blog post. However, McDonald's India told TechCrunch that its internal checks found no breach of customer data. "We conduct regular audits and assessments to continuously strengthen our security measures, and have all the necessary enhancements implemented, ensuring all our systems are up to date and secure," the company told the publication. #news #mcdonalds #data

2

Sattrix Information Security files draft papers with BSE SME for IPO, targets listing by mid-May | Mint - Mint: Sattrix Information Security files draft papers with BSE SME for IPO, targets listing by mid-May | Mint  Mint #CyberSecurity #InfoSec #SecurityInsights

1

#DiyakoSecureBow ———————————— CISO as A Service (vCISO) DFIR Analytics Cybersecurity incident disclosures: A 13-year review October 2024. Special Thanks❤️😇👍🏽🙏 Ideagen -Secure Business Continuity- 2024.10.30 —————————————————— #CWE #Incident #CyberSecurity #vCISO #SecureBusinessContinuity

22

𝐑𝐢𝐬𝐞 𝐨𝐟 𝐂𝐲𝐛𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐭𝐚𝐫𝐭-𝐔𝐩𝐬 𝐢𝐧 𝐈𝐧𝐝𝐢𝐚 The recent acquisition of Peak XV Partners backed PingSafe (Now a Part of SentinelOne) by SentinelOne for USD 100 mn validates the important role that cyber security start-ups are going to play in the next decade. According to CERT-In, India witnessed 1.39 mn cyber security breaches in 2022. Hence, thereis a boom in cyber security start-ups finding innovative solutions to protect businesses online. Here are some of the most prominent cyber security start-ups in India. CloudSEK Prophaze WiJungle Secuneus Technologies Safe Security TAC Security SecureDen #startups #investments #venturecapital #cybersecurity #funding #india

8

Star Health Data Leak: Allegations of a significant data breach have surfaced involving personal information of around 3.1 crore customers of Star Health Insurance. The breach, orchestrated by a hacker known as xenZen, reportedly exposed sensitive details such as mobile numbers, PAN, addresses, and pre-existing medical conditions. The hacker claimed that Star Health's Chief Information Security Officer (CISO) was involved in selling the compromised data, leading to a contentious situation where the terms of the deal were subsequently altered. In response to these allegations, Star Health Insurance has initiated a thorough forensic investigation, collaborating with cybersecurity experts and regulatory authorities. The company has taken legal action, securing a directive from the Madras High Court to disable access to the leaked information. The company has emphasized the illegality of unauthorized data acquisition and dissemination, urging swift action from all relevant parties to curb such activities and comply with legal orders. The Madras High Court has acknowledged the severity of the breach, highlighting the importance of protecting sensitive data and has scheduled a follow-up hearing on October 25 to address the matter. The hacker, xenZen, has reportedly accessed data of over 31 million customers and millions of insurance claims through Telegram bots. The hacker also released an email conversation video detailing an alleged negotiation where the price for the leaked data surged from USD 28,000 to USD 150,000. For more details, refer to the article: [Star Health Data Leak - 3 crore customers affected, CISO allegedly involved](https://lnkd.in/dRVDcYBN)

4

🚨 Tata Informasi Asia (TIA) Data Breach Alert 🚨 A threat actor has claimed to expose a database containing 68,235 user records on a dark web forum. The incident involves Tata Informasi Asia (TIA)—a company recognized for delivering dynamic business solutions across HR, training, and digital transformation. 📊 Key Breach Details: Total Records Leaked: 68,235 Users File Size: 87,793 Lines Leak Date: Today 🔍 Why This Matters: Sensitive User Data: Personal information can be exploited for identity theft, fraud, and phishing attacks. Reputation Damage: Such breaches undermine trust and can trigger legal or regulatory consequences. Cyber Threat Escalation: Exposed data can fuel further targeted cyberattacks. 🚨 Action Required: Protect Your Data! 🚨 At DMonitor,we specialize in real-time data breach monitoring and exposure prevention. With tools like dMonitor, we help businesses and individuals proactively track compromised data, ensuring you're alerted before threats escalate. 👉 Visit dmonitor.io for 24/7 monitoring and protection! #CyberSecurity #DataBreach #DarkWeb #PrivacyProtection #TIABreach #InfoSec

2

This shortage of skills would prove fatal as India surges ahead as one of the fastest-growing economies in the world. @fnCyber - we contribute whatever we can and do our part by deriving cost-effective and robust cybersecurity solutions suited to different business needs. #CybersecurityisSimplified https://lnkd.in/gD-FCtg2

2

🚀 SEBI's New Cyber Resiliency Framework is Here! 🚀 On June 27, SEBI introduced a comprehensive Cyber Resiliency framework (CSCRF), setting a new standard for regulated entities. With the deadline set for January 1, 2025, it's crucial for organizations to adopt and implement these guidelines swiftly and efficiently. At Seconize, we understand the complexities of regulatory compliance and the challenges it brings. Our Compliance Audit Automation feature is designed to help you seamlessly integrate SEBI’s new framework into your operations, ensuring you're ready well before the deadline. How Can Seconize Help? 🔍 Automated Compliance Audits: Simplify your compliance processes with our automated solution, reducing manual effort and minimizing errors. 🛡️ Real-Time Monitoring: Stay ahead of potential cyber threats with continuous monitoring and real-time alerts, ensuring proactive defense against vulnerabilities. 📊 Comprehensive Reporting: Generate detailed reports and dashboards to track your compliance status, making it easy to demonstrate adherence to SEBI’s guidelines. 🤝 Expert Support: Our team of compliance experts is here to guide you through the entire process, from initial setup to ongoing maintenance. Why Act Now? By starting your compliance journey today with Seconize, you can: Ensure full compliance by the January 1, 2025 deadline. Protect your organization from cyber threats with a robust, resilient framework. Gain peace of mind knowing you have a trusted partner in your compliance efforts. Ready to get started? Visit our website or contact us today to learn how Seconize can help your organization meet SEBI’s Cyber Resiliency requirements. Stay compliant. Stay secure. Stay ahead. #CyberResilience #ComplianceAutomation #SEBI #CyberSecurity #Seconize #RegulatoryCompliance #CyberThreats #FinancialSecurity Chethan Anand Sashank Dara, Ph.D

8