Anthropic’s advanced AI system “Claude Mythos Preview” is triggering serious cybersecurity concerns across governments, regulators and major technology firms worldwide. The unreleased model reportedly demonstrated the ability to discover critical vulnerabilities in operating systems, browsers and core internet infrastructure: capabilities experts warn could redefine the future of cyber warfare and digital defence. While Anthropic says the project is designed to strengthen cybersecurity through “Project Glasswing,” fears are growing over misuse, AI-driven exploits and a widening global cyber gap.


AI Cyber Model Raises Security Fears 

Frenche authorities are investigating a massive cybersecurity breach after millions of sensitive records, including IDs, passports, and driver’s licence data, were allegedly posted on the dark web. The case is linked to a database known as “Ants,” while investigators are probing the role of a suspect tied to the online alias “Breach3D.” A 15-year-old has reportedly been detained and questioned as police work to trace the full extent of the leak and potential victims.


France Data Breach Shock: Teen Held Over Sale Of Stolen Data Online

Xu Zewei has been extradited from Italy to the United States over allegations linked to major cyberattacks. US prosecutors accuse him of involvement in hacking operations targeting sensitive systems. Xu has pleaded not guilty and remains in US custody as legal proceedings begin. If convicted, he could face years behind bars, adding to growing tensions over global cybercrime and digital espionage.


Chinese Cyber Suspect Extradited, Faces Years in US Prison

Germany has issued a warning about malicious router hacks targeting critical infrastructure systems, urging businesses and citizens to strengthen cybersecurity defenses. Officials caution that compromised home and corporate routers could be exploited to disrupt essential services and sensitive networks.


Germany Warns of Router Hacks Targeting Critical Systems

A major cybersecurity scare has emerged after hackers linked to North Korea allegedly targeted widely used Axios software, raising fears of a large-scale supply chain attack. According to Google, the breach is believed to be connected to a North Korea-linked group known as UNC1069.


North Korea-Linked Hack Targets Popular Internet Software 'Axios'

A new wave of cyber threats is targeting Android users through fake IPTV apps carrying the ‘Perseus’ malware. Once installed, the malicious software can access sensitive data, including information stored in personal notes apps. Experts warn that users are being tricked into downloading these apps, highlighting the growing risks in unofficial app ecosystems.


‘Perseus’ Malware Hits Android Users Via Fake IPTV Apps

A whistleblower has raised alarm over a major data breach involving sensitive records from the Social Security Administration in the United States. According to the complaint, a former employee allegedly copied confidential agency data onto a personal thumb drive while having full system access.


Whistleblower Alleges Massive Social Security Data Breach Involving Millions Of Records

A major cyber operation struck Iran during joint US–Israeli military strikes, with hackers targeting popular digital services and a widely used religious calendar app. The BadeSaba prayer app, downloaded by millions, was reportedly hacked to spread anti-government and defection messages to users, including security forces, amid the chaos. Internet connectivity in Iran dropped sharply twice during the incident, according to network analysts. Cybersecurity experts warn that this marks an escalation in the digital dimension of the conflict, with the possibility of further retaliatory cyberattacks against US, Israeli, and allied targets as tensions continue to rise.


Israel-Iran Strike: Experts Warn of Escalating Cyber Conflict

A growing wave of scams is exploiting artificial intelligence tools to craft convincing emails, advertisements, and even fake legal notices. Investigations reveal how fraudsters are misusing AI platforms, including those linked to OpenAI, to deceive victims at scale. Experts warn that AI-powered phishing and deepfake messaging are becoming more sophisticated, raising serious concerns over digital security, online fraud, and the urgent need for stronger safeguards.


Open AI Scams: Accounts Used AI to Write Emails, Ads & Fake Legal Messages

India’s cybersecurity authority, CERT-In, has warned of a dangerous WhatsApp vulnerability called GhostPairing. The flaw in the device-linking feature allows hackers to take complete control of user accounts, accessing messages, images, and videos on WhatsApp Web without passwords or SIM authentication. CERT-In issued an advisory highlighting the exploit and urging caution.

Indian Cyber Agency Flags WhatsApp ‘Hijack’ Threat 

The UK government has announced plans to strengthen cybersecurity laws to protect public services from the growing threat of cyberattacks.
This move comes amid rising concerns over data breaches and ransomware attacks targeting healthcare, transport, and government systems.

UK Plans Tougher Cyber Security Laws | Govt Moves to Protect Public Services from Cyberattacks 

A major cybersecurity alert has been issued in the U.S and Europe over concerns tied to Chinese solar power inventors. The U.S is investigating on the cellular radios found in batteries from Chinese suppliers.

Cyber security alarm in US and Europe, Chinese solar power inventors under radar

In its fight against online financial fraud, Indian government initiatives have helped prevent losses of $208 million in just 90 days since the launch of an online &lsquo;suspect registry.&rsquo; The registry is part of the nationwide effort to tackle cybercrime, averting more than 600,000 fraudulent transactions. The initiative is an important step in enhancing India&rsquo;s cyber defences and protecting its financial systems.
<h2 dir="ltr">How India's 'suspect registry' works&nbsp;</h2>
The suspect registry was launched by Union Home Minister Amit Shah on 10 September 2024 and created by the Indian Cyber Crime Coordination Centre (I4C). It is accessible to both state and central agencies holding data on 1.4 million cybercriminals linked to financial fraud and other cybercrimes.
It has been integrated with the National Cybercrime Reporting Portal (NCRP) and works in close collaboration with banks and financial institutions to identify and prevent fraud.
The registry helps financial institutions spot potential threats and prevent cybercrimes in real time by bringing together the data on cybercrime suspects in one central database. Reports citing Home Ministry sources&nbsp;said that around $7,054 fraudulent transactions were declined, which has resulted in saving around $208 million until December 1.
<blockquote class="twitter-tweet publive-iframes-block publive-Twitter-block" contenteditable="false" width="600" height="400" id="PL_blockquote_block-m5xh05vf-iz059g82-vi8lb83p">
VIDEO | "If states establish cyber suspect registries, it will have its limitations, but there is no limit to the reach of cyber criminals. Therefore, there is a need for a national-level suspect registry that includes all states. This will help in preventing crimes in the&hellip; <a href="https://t.co/1oRJxdagFt">pic.twitter.com/1oRJxdagFt</a>
&mdash; Press Trust of India (@PTI_News) <a href="https://twitter.com/PTI_News/status/1833402907229573246?ref_src=twsrc%5Etfw">September 10, 2024</a></blockquote>
Also Read: <a href="https://www.wionews.com/india-news/india-haryana-has-saved-312-million-from-cyber-criminals-what-you-need-to-know-8606872" rel="dofollow">This state in India has saved $31.2 million from cyber criminals</a>
<h2 dir="ltr">Key achievements:&nbsp;</h2>
&gt; Banks have frozen 867,000 'mule accounts', blocked 700,000 SIM cards, and disabled 140,000 mobile phones used in cyber frauds.
&gt; The Cyber Fraud Mitigation Centre (CFMC) has brought together representatives from major banks, telecom companies and law enforcement agencies.&nbsp; &gt; The CFMC aims to enhance cooperation in addressing online financial crimes, representing a model of "Cooperative Federalism."
Also Read: <a href="https://www.wionews.com/india-news/indian-police-bust-07-million-fake-call-centre-scam-in-noida-8611618" rel="dofollow">Indian police bust $0.7 million fake call centre scam in UP's Noida</a>
<h2 dir="ltr">RBI&rsquo;s role</h2>
To make the country&rsquo;s financial defences strong, the Reserve Bank of India (RBI) has instructed all banks to join this initiative and integrate the suspect registry into their systems. 
This will help banks manage fraud risks more effectively and prevent financial losses.
Also Read: <a href="https://www.wionews.com/science-technology/you-are-under-digital-arrest-the-2024-cyber-scam-that-shook-india-8581607" rel="dofollow">'You are under digital arrest': The cyber scam that shook India in 2024</a>
<h2 dir="ltr">A national effort</h2>
The Citizen Financial Cyber Frauds Reporting and Management System, launched in 2021, has also contributed to the fight against cybercrime. 
By 1 Dec 2024, it had received over 1.5 million complaints and helped prevent transactions amounting to $445 million.
Under the powers granted by the Information Technology Act 2000, the Indian government has also blocked 1,03,151 pieces of suspicious online content, further enhancing its cyber defences.
(With inputs from agencies)&nbsp;
&nbsp;

India News: To make the country’s financial defences strong, the Reserve Bank of India (RBI) has instructed all banks to join this initiative. 

In its fight against online financial fraud, Indian government initiatives have helped prevent losses of $208 million in just 90 days since the launch of an online ‘suspect registry.’ The registry is part of the nationwide effort to tackle cybercrime, averting more than 600,000 fraudulent transactions. The initiative is an important step in enhancing India’s cyber defences and protecting its financial systems. How India's 'suspect registry' works The suspect registry was launched by Union Home Minister Amit Shah on 10 September 2024 and created by the Indian Cyber Crime Coordination Centre (I4C). It is accessible to both state and central agencies holding data on 1.4 million cybercriminals linked to financial fraud and other cybercrimes. It has been integrated with the National Cybercrime Reporting Portal (NCRP) and works in close collaboration with banks and financial institutions to identify and prevent fraud. The registry helps financial institutions spot potential threats and prevent cybercrimes in real time by bringing together the data on cybercrime suspects in one central database. Reports citing Home Ministry sources said that around $7,054 fraudulent transactions were declined, which has resulted in saving around $208 million until December 1. VIDEO | "If states establish cyber suspect registries, it will have its limitations, but there is no limit to the reach of cyber criminals. Therefore, there is a need for a national-level suspect registry that includes all states. This will help in preventing crimes in the… pic.twitter.com/1oRJxdagFt — Press Trust of India (@PTI_News) September 10, 2024 Also Read: This state in India has saved $31.2 million from cyber criminals Key achievements: > Banks have frozen 867,000 'mule accounts', blocked 700,000 SIM cards, and disabled 140,000 mobile phones used in cyber frauds. > The Cyber Fraud Mitigation Centre (CFMC) has brought together representatives from major banks, telecom companies and law enforcement agencies. > The CFMC aims to enhance cooperation in addressing online financial crimes, representing a model of "Cooperative Federalism." Also Read: Indian police bust $0.7 million fake call centre scam in UP's Noida RBI’s role To make the country’s financial defences strong, the Reserve Bank of India (RBI) has instructed all banks to join this initiative and integrate the suspect registry into their systems. This will help banks manage fraud risks more effectively and prevent financial losses. Also Read: 'You are under digital arrest': The cyber scam that shook India in 2024 A national effort The Citizen Financial Cyber Frauds Reporting and Management System, launched in 2021, has also contributed to the fight against cybercrime. By 1 Dec 2024, it had received over 1.5 million complaints and helped prevent transactions amounting to $445 million. Under the powers granted by the Information Technology Act 2000, the Indian government has also blocked 1,03,151 pieces of suspicious online content, further enhancing its cyber defences. (With inputs from agencies)

India fights cyber crime:  Suspect registry prevents $208 million in online fraud in 90 days

Noida police, in a big operation, busted a fake call centre operating out of Sector 2, Noida, and arrested eight people for duping victims off $0.7 million. The accused pretended to work for well-established banks and financial institutions, offering fake promises of easy loans, insurance policy renewals, and attractive investment schemes.
<h2 dir="ltr">How did this take place?</h2>
The call centre was operating from plot A-44 in Sector 2, targeting people from multiple states by getting their details from online local search platforms. "They collected 10-15% of the loan amount upfront as fees, but the promised loans never materialised," said Deputy Commissioner of Police (Noida) Ram Badan Singh.
A victim was defrauded and lost $0.1 million, police said. The wicked gang targeted people from different states outside Uttar Pradesh, aware of the fact that it would be harder for them to file complaints or pursue legal action due to distance.&nbsp;
"A few days ago, Sector 18's Raghunandan Jewellers filed a complaint alleging that a man named Naresh, who was also a custodian at the shop, had stolen jewellery. During interrogation, Naresh admitted to the crime and told police that he sold the jewellery and invested the money obtained from it. It was while tracing this money that the call centre&mdash;Investors'&mdash;was busted from Sector 2," said DCP Rambadan Singh.
During the investigation, it was found that the suspects acquired people's phone numbers online or from vendor sites like Justdial and called or sent them WhatsApp messages, posing as representatives of various banks.
<h2 dir="ltr">Who was involved? How did they operate?</h2>
The accused, aged between 25 and 35, were identified as Ganesh Thakur, Prabhash Jha, Manish Kumar Jha, Parvez Alam, Shubham Yadav, Gyanendra, Shabnam, and Aradhana. They belong to West Bengal, Bihar, and Uttar Pradesh.
The gang used easily available online templates to fabricate documents, including fake RBI and government certifications, to appear legitimate. When refunds were demanded by the victims, they sent fake documents to confuse and mislead them further.&nbsp;
&ldquo;They exploited the trust of people by presenting convincing fake credentials. It&rsquo;s a well-organised scam,&rdquo; said DCP Singh.
Also Read: <a href="https://www.wionews.com/india-news/four-fake-delhi-police-officers-raid-fake-call-centre-get-arrested-784976" rel="dofollow">Four fake Delhi police officers raid &lsquo;fake call centre&rsquo;, get arrested</a>
<h2 dir="ltr">What was recovered?</h2>
The police seized 17 mobile phones, a CPU, 21 ATM cards, five voter ID cards, six Aadhaar cards, three PAN cards, a driving license, a GST certificate, a registration certificate, a rent agreement, and ₹2,660 in cash from the accused.
Also Read: <a href="https://www.wionews.com/world/100k-victims-50-nations-1mn-daily-revenue-russia-raids-massive-scam-centre-watch-video-782877" rel="dofollow">100k victims; 50 nations, $1mn daily revenue: Russia raids massive scam centre, watch video</a>
<h2 dir="ltr">Legal action: What&rsquo;s next?&nbsp;</h2>
The accused have been booked under sections of the Bharatiya Nyaya Sanhita (BNS), including 316(4) (criminal breach of trust), 61(2) (criminal conspiracy), and the IT Act.
Police are investigating to identify more victims and recover their money. &ldquo;We urge people to verify the authenticity of such offers before making any payments. Our teams are working tirelessly to trace their network and recover the stolen amount,&rdquo; added DCP Singh.
(With inputs from agencies)
&nbsp;

Trending | India News: "They collected 10-15% of the loan amount upfront as fees, but the promised loans never materialised," said DCP (Noida) Ram Badan Singh.

Noida police, in a big operation, busted a fake call centre operating out of Sector 2, Noida, and arrested eight people for duping victims off $0.7 million. The accused pretended to work for well-established banks and financial institutions, offering fake promises of easy loans, insurance policy renewals, and attractive investment schemes. How did this take place? The call centre was operating from plot A-44 in Sector 2, targeting people from multiple states by getting their details from online local search platforms. "They collected 10-15% of the loan amount upfront as fees, but the promised loans never materialised," said Deputy Commissioner of Police (Noida) Ram Badan Singh. A victim was defrauded and lost $0.1 million, police said. The wicked gang targeted people from different states outside Uttar Pradesh, aware of the fact that it would be harder for them to file complaints or pursue legal action due to distance. "A few days ago, Sector 18's Raghunandan Jewellers filed a complaint alleging that a man named Naresh, who was also a custodian at the shop, had stolen jewellery. During interrogation, Naresh admitted to the crime and told police that he sold the jewellery and invested the money obtained from it. It was while tracing this money that the call centre—Investors'—was busted from Sector 2," said DCP Rambadan Singh. During the investigation, it was found that the suspects acquired people's phone numbers online or from vendor sites like Justdial and called or sent them WhatsApp messages, posing as representatives of various banks. Who was involved? How did they operate? The accused, aged between 25 and 35, were identified as Ganesh Thakur, Prabhash Jha, Manish Kumar Jha, Parvez Alam, Shubham Yadav, Gyanendra, Shabnam, and Aradhana. They belong to West Bengal, Bihar, and Uttar Pradesh. The gang used easily available online templates to fabricate documents, including fake RBI and government certifications, to appear legitimate. When refunds were demanded by the victims, they sent fake documents to confuse and mislead them further. “They exploited the trust of people by presenting convincing fake credentials. It’s a well-organised scam,” said DCP Singh. Also Read: Four fake Delhi police officers raid ‘fake call centre’, get arrested What was recovered? The police seized 17 mobile phones, a CPU, 21 ATM cards, five voter ID cards, six Aadhaar cards, three PAN cards, a driving license, a GST certificate, a registration certificate, a rent agreement, and ₹2,660 in cash from the accused. Also Read: 100k victims; 50 nations, $1mn daily revenue: Russia raids massive scam centre, watch video Legal action: What’s next? The accused have been booked under sections of the Bharatiya Nyaya Sanhita (BNS), including 316(4) (criminal breach of trust), 61(2) (criminal conspiracy), and the IT Act. Police are investigating to identify more victims and recover their money. “We urge people to verify the authenticity of such offers before making any payments. Our teams are working tirelessly to trace their network and recover the stolen amount,” added DCP Singh. (With inputs from agencies)

Indian police bust $0.7 million fake call centre scam in UP's Noida

The Chinese hacker group 'Mirrorface' has launched a cyber attack targeting Japan's cybersecurity infrastructure, raising concerns about the growing threat of cyber warfare. Authorities are investigating the breach and enhancing security measures to protect sensitive data.

Chinese hacker group 'Mirrorface' targets Japan's cyber security

A ninth telecom company has been preyed upon, breached in a large Chinese spying campaign that gave Beijing officials access to private texts and phone calls of some Americans, a top White House official said on Friday (Dec 27).&nbsp;
According to the Biden administration officials, at least eight telecommunications companies, as well as dozens of nations, had been affected by the Chinese hacking blitz known as Salt Typhoon earlier this month. Deputy National Security Adviser Anne Neuberger announced on Friday that a ninth company was found as a victim after the administration released guidance to companies about how to hunt for Chinese perpetrators in their networks.&nbsp;
Also Read: <a href="https://www.wionews.com/world/chinese-hackers-targeted-phone-data-of-trump-harris-jd-vance-report-770812" rel="dofollow">Chinese hackers targeted phone data of Trump, Harris &amp; JD Vance: Report</a>
This update from Neuberger is the latest update of the massive hacking operation, which further raised serious concerns among national security experts, revealing cybersecurity vulnerabilities in the private sector and showing the advanced hacking tactic skills of China.&nbsp;
Also Read:<a href="https://www.wionews.com/world/internet-archive-went-offline-following-major-cyberattack-766513" rel="dofollow"> Internet Archive went offline following major cyberattack</a>
<h2 dir="ltr">Hacker&rsquo;s ploy: Officials probe into the matter&nbsp;</h2>
The hackers endangered the networks of telecommunication to steal the call records of customers and access the private conversations of some individuals. The officials believe that US government officials and renowned political figures are among those whose communications were obtained, although the FBI has not publicly identified the victims.&nbsp;
As reported by ABC, Neuberger said on Friday that the officials are unaware of the Americans who were affected by the Salt Typhoon hacking campaign. She also said that some heedful techniques are used by Chinese hackers, but a "large number" of victims were in the Washington-Virginia area.
The hackers&rsquo; goal, according to officials, was to figure out who owned the phones and, if they were "government targets of interest," to spy on their texts and phone calls.
Also Read: <a href="https://www.wionews.com/world/russia-says-us-planning-to-launch-cyber-attacks-during-countrys-presidential-elections-699341" rel="dofollow">Russian intel agency says US planning cyber attacks to influence country&rsquo;s presidential elections</a>
<h2 dir="ltr">Neuberger&rsquo;s advice to strengthen cybersecurity measures&nbsp;</h2>
Anne suggested a dire need to strengthen cybersecurity measures in the telecommunications industry. The Federal Communications Commission is planning to discuss the issue in Jan. She also mentioned that the government is preparing additional actions to respond to the hacking campaign, but she did not provide details.
Also Read: <a href="https://www.wionews.com/videos/chinese-scientists-develop-cyberattack-using-quantum-computers-report-766828" rel="dofollow">Chinese Scientists Develop Cyberattack Using Quantum Computers: Report</a>
&ldquo;We know that voluntary cybersecurity practices are inadequate to protect against China, Russia, and Iran hacking of our critical infrastructure,&rdquo; she said. The Chinese government has dismissed any involvement in the hacking.
(With inputs from agencies)&nbsp;
&nbsp;

Trending | SCIENCE & TECH: The Deputy National Security Adviser, Anne Neuberger, revealed that a ninth company fell victim to cyber attacks, despite guidance issued to combat Chinese cyber threats.

A ninth telecom company has been preyed upon, breached in a large Chinese spying campaign that gave Beijing officials access to private texts and phone calls of some Americans, a top White House official said on Friday (Dec 27). According to the Biden administration officials, at least eight telecommunications companies, as well as dozens of nations, had been affected by the Chinese hacking blitz known as Salt Typhoon earlier this month. Deputy National Security Adviser Anne Neuberger announced on Friday that a ninth company was found as a victim after the administration released guidance to companies about how to hunt for Chinese perpetrators in their networks. Also Read: Chinese hackers targeted phone data of Trump, Harris & JD Vance: Report This update from Neuberger is the latest update of the massive hacking operation, which further raised serious concerns among national security experts, revealing cybersecurity vulnerabilities in the private sector and showing the advanced hacking tactic skills of China. Also Read: Internet Archive went offline following major cyberattack Hacker’s ploy: Officials probe into the matter The hackers endangered the networks of telecommunication to steal the call records of customers and access the private conversations of some individuals. The officials believe that US government officials and renowned political figures are among those whose communications were obtained, although the FBI has not publicly identified the victims. As reported by ABC, Neuberger said on Friday that the officials are unaware of the Americans who were affected by the Salt Typhoon hacking campaign. She also said that some heedful techniques are used by Chinese hackers, but a "large number" of victims were in the Washington-Virginia area. The hackers’ goal, according to officials, was to figure out who owned the phones and, if they were "government targets of interest," to spy on their texts and phone calls. Also Read: Russian intel agency says US planning cyber attacks to influence country’s presidential elections Neuberger’s advice to strengthen cybersecurity measures Anne suggested a dire need to strengthen cybersecurity measures in the telecommunications industry. The Federal Communications Commission is planning to discuss the issue in Jan. She also mentioned that the government is preparing additional actions to respond to the hacking campaign, but she did not provide details. Also Read: Chinese Scientists Develop Cyberattack Using Quantum Computers: Report “We know that voluntary cybersecurity practices are inadequate to protect against China, Russia, and Iran hacking of our critical infrastructure,” she said. The Chinese government has dismissed any involvement in the hacking. (With inputs from agencies)

The White House confirms a new breach in a Chinese cyber campaign.

When you think of a school, what comes to mind? A place where children are being nurtured, where laughter fills the halls, and young minds are being shaped for the future, a place they consider a second home. But now, it is grappling with a chilling wave of bomb threats, turning these spaces of learning into battlegrounds of uncertainty.

In today’s digital age, a plethora of cybercrime has taken over, spreading fear across the globe, including the Indian national capital.&nbsp;

Since early 2024, more than 40 schools across Delhi have received bomb threat emails, causing panic among students, parents, and staff, serving as a clear warning sign of cyber terrorism.

These threats have triggered and caused mass evacuations and emergency responses across schools. While no explosives have been found, these incidents show a chilling truth: cyberterrorism is no longer a distant threat but an escalating reality we can no longer ignore.

<h2 dir="ltr">Hoaxes or a coordinated campaign?&nbsp;</h2>

The growing cyber threats have been like a wildfire waiting to be ignited, with consequences we are not yet prepared for. Some experts warn about a coordinated campaign to spread fear.

&gt; Around 30 private schools across&nbsp;New Delhi received bomb threat emails on Friday (Dec 13), following a similar incident on December 9 when 44 schools were targeted. The emails warned of potential explosions on December 13 and 14, claiming explosives on school premises powerful enough to "destroy buildings and harm people".

&gt; In November, a private school in Rohini received a bomb threat via email, which was later declared a hoax. A Delhi fire services team, along with police, bomb disposal, and dog squads, quickly arrived and searched the entire school.

&gt; In October, several schools run by the Central Reserve Police Force (CRPF) across India received hoax bomb threats, sparking panic. Among the targeted institutions, two schools were located in the national capital, while one was in Hyderabad. The threats were communicated via email at night, as reported by ANI.

&gt; In May, over 60 schools in Delhi-NCR were evacuated after receiving bomb threats, triggering widespread concern. 
 
Authorities, including the Delhi Police and cybercrime units, have launched investigations, yet the perpetrators remain untraceable. Some experts believe the threats could be coming from local pranksters or international hackers using advanced methods to hide their identities online.

<h2 dir="ltr">Need for a proactive response</h2>

It is crucial to implement strong cybersecurity measures and create a proactive governance framework. Below are steps that can help mitigate risks and prepare for defences for what lies ahead:

<h2 dir="ltr">1. Strengthening cybersecurity measures</h2>

&gt; Email filtering systems: Schools should deploy advanced email filtering systems to identify and block suspicious messages before they reach inboxes. 
 
&gt; Continuous monitoring: IT personnel should monitor school email accounts in real-time to&nbsp;flag&nbsp;anomalies and ensure a swift response. An incident response plan should also be in place to handle threats without causing panic.

&gt; Encryption and audits: End-to-end encryption for email communications should be implemented, alongside regular cybersecurity audits to identify vulnerabilities.

<h2 dir="ltr">2. Emergency preparedness in schools</h2>

Preparedness is critical to ensure student safety during such emergencies:

&gt; Regular drills: Conduct evacuation and lockdown drills in coordination with local police to prepare students and staff for emergencies.

&gt; Communication channels: Establish clear communication channels to keep parents informed during crises and reduce panic.

&gt; Crisis response teams: Schools should create dedicated teams trained to handle emergencies and liaise with law enforcement effectively.

&gt; Training Staff: Regular training for school staff on recognising and reporting potential phishing or threatening emails can improve response times.&nbsp;

<h2 dir="ltr">3. Strong legal frameworks</h2>

&gt; Tougher cyber laws: Legislators must introduce stricter penalties for issuing hoax threats to act as a deterrent.

&gt; Improved digital surveillance: Enhance the capabilities of India’s cyber cells to track down anonymised threat actors using technologies like VPNs and TOR networks.

<h2 dir="ltr">4. Swift action from government needed</h2>

The Delhi High Court has instructed the government to finalise Standard Operating Procedures (SOPs) for managing emergencies, outlining clear roles for all parties involved. Schools are advised to monitor emails carefully and report any suspicious messages to authorities immediately. The court has also directed that drills should be held to educate staff, students, and parents on emergency procedures. A centralised platform should be set up to help law enforcement respond more quickly, said the Delhi HC.

<h2 dir="ltr">5. Insights from a graduate&nbsp;in&nbsp;cybersecurity</h2>

In a discussion with Kabeer Rai Chhabra, an M.Sc. cybersecurity graduate from the University of Birmingham and GPCSSI 2024 Intern with Gurugram Police, he highlighted&nbsp;the key role of ISPs (Internet service providers) in tracking individuals behind bomb threats to schools.&nbsp;

How ISPs can detect malicious content: 
 
&gt; ISP Role: ISPs should focus on spotting suspicious traffic and work with law enforcement by sharing information about threats, like identifying harmful IP addresses and websites.

&gt; Deep Packet Investigation (DPI): It helps analyse metadata and unencrypted data to find harmful patterns, but it can be resource-heavy and may raise privacy issues.

&gt; Alternative tools: Social media platforms and communication tools are better suited for monitoring targeted keywords rather than relying solely on ISPs.

&gt; CERT’s role: A combined approach of metadata analysis and DPI, in collaboration with organisations like (India's Computer Emergency Response Team) CERTs, can improve threat detection while maintaining privacy.

&gt; Onion routing monitoring: Monitoring entry and exit nodes for timing and size of traffic can help identify the source, but it requires significant resources and is not foolproof.

<h2 dir="ltr">Looking ahead</h2>

This is a wake-up call that demands immediate action from the Indian government and concerned authorities, as well as the cyber cell and special cell units, to ensure that the perpetrators do not succeed in causing panic across schools. While these threats have, so far, proven to be hoaxes, the psychological toll on children and their families is undeniable.&nbsp;

Now is the time to combat blackmail threats by strengthening cybersecurity and staying vigilant. By enhancing preparedness and encouraging cooperation between schools, law enforcement, and the government, Delhi can lead the way in effectively tackling these threats.&nbsp;

For obvious reasons, Delhi’s got nerves of steel.

When you think of a school, what comes to mind? A place where children are being nurtured, where laughter fills the halls, and young minds are being shaped for the future, a place they consider a second home.

When you think of a school, what comes to mind? A place where children are being nurtured, where laughter fills the halls, and young minds are being shaped for the future, a place they consider a second home. But now, it is grappling with a chilling wave of bomb threats, turning these spaces of learning into battlegrounds of uncertainty. In today’s digital age, a plethora of cybercrime has taken over, spreading fear across the globe, including the Indian national capital. Since early 2024, more than 40 schools across Delhi have received bomb threat emails, causing panic among students, parents, and staff, serving as a clear warning sign of cyber terrorism. These threats have triggered and caused mass evacuations and emergency responses across schools. While no explosives have been found, these incidents show a chilling truth: cyberterrorism is no longer a distant threat but an escalating reality we can no longer ignore. Hoaxes or a coordinated campaign? The growing cyber threats have been like a wildfire waiting to be ignited, with consequences we are not yet prepared for. Some experts warn about a coordinated campaign to spread fear. > Around 30 private schools across New Delhi received bomb threat emails on Friday (Dec 13), following a similar incident on December 9 when 44 schools were targeted. The emails warned of potential explosions on December 13 and 14, claiming explosives on school premises powerful enough to "destroy buildings and harm people". > In November, a private school in Rohini received a bomb threat via email, which was later declared a hoax. A Delhi fire services team, along with police, bomb disposal, and dog squads, quickly arrived and searched the entire school. > In October, several schools run by the Central Reserve Police Force (CRPF) across India received hoax bomb threats, sparking panic. Among the targeted institutions, two schools were located in the national capital, while one was in Hyderabad. The threats were communicated via email at night, as reported by ANI. > In May, over 60 schools in Delhi-NCR were evacuated after receiving bomb threats, triggering widespread concern. Authorities, including the Delhi Police and cybercrime units, have launched investigations, yet the perpetrators remain untraceable. Some experts believe the threats could be coming from local pranksters or international hackers using advanced methods to hide their identities online. Need for a proactive response It is crucial to implement strong cybersecurity measures and create a proactive governance framework. Below are steps that can help mitigate risks and prepare for defences for what lies ahead: 1. Strengthening cybersecurity measures > Email filtering systems: Schools should deploy advanced email filtering systems to identify and block suspicious messages before they reach inboxes. > Continuous monitoring: IT personnel should monitor school email accounts in real-time to flag anomalies and ensure a swift response. An incident response plan should also be in place to handle threats without causing panic. > Encryption and audits: End-to-end encryption for email communications should be implemented, alongside regular cybersecurity audits to identify vulnerabilities. 2. Emergency preparedness in schools Preparedness is critical to ensure student safety during such emergencies: > Regular drills: Conduct evacuation and lockdown drills in coordination with local police to prepare students and staff for emergencies. > Communication channels: Establish clear communication channels to keep parents informed during crises and reduce panic. > Crisis response teams: Schools should create dedicated teams trained to handle emergencies and liaise with law enforcement effectively. > Training Staff: Regular training for school staff on recognising and reporting potential phishing or threatening emails can improve response times. 3. Strong legal frameworks > Tougher cyber laws: Legislators must introduce stricter penalties for issuing hoax threats to act as a deterrent. > Improved digital surveillance: Enhance the capabilities of India’s cyber cells to track down anonymised threat actors using technologies like VPNs and TOR networks. 4. Swift action from government needed The Delhi High Court has instructed the government to finalise Standard Operating Procedures (SOPs) for managing emergencies, outlining clear roles for all parties involved. Schools are advised to monitor emails carefully and report any suspicious messages to authorities immediately. The court has also directed that drills should be held to educate staff, students, and parents on emergency procedures. A centralised platform should be set up to help law enforcement respond more quickly, said the Delhi HC. 5. Insights from a graduate in cybersecurity In a discussion with Kabeer Rai Chhabra, an M.Sc. cybersecurity graduate from the University of Birmingham and GPCSSI 2024 Intern with Gurugram Police, he highlighted the key role of ISPs (Internet service providers) in tracking individuals behind bomb threats to schools. How ISPs can detect malicious content: > ISP Role: ISPs should focus on spotting suspicious traffic and work with law enforcement by sharing information about threats, like identifying harmful IP addresses and websites. > Deep Packet Investigation (DPI): It helps analyse metadata and unencrypted data to find harmful patterns, but it can be resource-heavy and may raise privacy issues. > Alternative tools: Social media platforms and communication tools are better suited for monitoring targeted keywords rather than relying solely on ISPs. > CERT’s role: A combined approach of metadata analysis and DPI, in collaboration with organisations like (India's Computer Emergency Response Team) CERTs, can improve threat detection while maintaining privacy. > Onion routing monitoring: Monitoring entry and exit nodes for timing and size of traffic can help identify the source, but it requires significant resources and is not foolproof. Looking ahead This is a wake-up call that demands immediate action from the Indian government and concerned authorities, as well as the cyber cell and special cell units, to ensure that the perpetrators do not succeed in causing panic across schools. While these threats have, so far, proven to be hoaxes, the psychological toll on children and their families is undeniable. Now is the time to combat blackmail threats by strengthening cybersecurity and staying vigilant. By enhancing preparedness and encouraging cooperation between schools, law enforcement, and the government, Delhi can lead the way in effectively tackling these threats. For obvious reasons, Delhi’s got nerves of steel.

Bomb threat mails targeting Delhi schools: The rise of cyber terrorism. We must fight back!

In case of an attack by China on Taiwan's internet, the island nation will still be online, thanks to a satellite internet service it has developed.

It is similar to Elon Musk's Starlink satellite internet, which Taiwan had negotiated for before talks fell through. That happened because of Taiwan's insistence that a government entity must have a majority stake in any potential joint venture.

Taiwan has a war chest of $10 billion for developing a space industry that includes the satellite internet network. Part of that is for putting&nbsp;its first communications satellite into space, which is expected to happen&nbsp;by 2026.

Taiwan's satellite internet defence has been in the works for several years now and will be operational by the end of October.&nbsp;

Watch: China-Taiwan Tensions: What Happens If China Invades Taiwan?

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/china-taiwan-tensions-what-happens-if-china-invades-taiwan-766620/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

The democratic nation's main telecom firm Chunghwa said that the coverage will be provided in collaboration with a UK-European company Eutelsat OneWeb, for which a deal was signed in 2023, The Guardian reported.

The low earth orbit satellite or LEO internet service will be able to provide 24-hour coverage by the end of October and commercial access is expected to follow soon, according to Chungwa co-president Alex Chien cited in the report.

Taiwan, a democratically governed island, is seen by China as a breakaway region that should be annexed back to the mainland, by force if needed.

<a href="https://www.wionews.com/world/taiwan-spots-more-chinese-balloons-over-strait-accuses-beijing-of-psychological-warfare-ahead-of-elections-677750">Also read: Taiwan spots more Chinese balloons over strait, accuses Beijing of 'psychological warfare' ahead of elections</a>

A technology powerhouse, Taiwan has faced intense and consistent cyber attacks from China.

This is in addition to other threatening actions from China&nbsp;including its fighter jets violating Taiwan air space.

According to official data released on Tuesday (Oct 15), Taiwan spotted 153 Chinese military aircraft around its skies after China held military drills near the island.

The intimidation follows warnings from Beijing that it would crush any attempts at independence after Taiwan's new President Lai Ching-te vowed to resist annexation attempts.&nbsp;

<a href="https://www.wionews.com/world/taiwan-president-lai-vows-to-resist-annexation-amid-chinas-growing-pressure-766370">Also read: &nbsp;Taiwan President Lai vows to resist annexation amid China's growing pressure</a>

The satellite internet service will utilise low earth orbit satellites, which are above the Earth in a range of 200 and 2,000 kilometres.&nbsp;

There are thousands of LEO satellites, more than half of which are operated by Musk's Starlink.

(With inputs from agencies)

In case of an attack by China on Taiwan's internet, the island nation will still be online, thanks to a satellite internet service it has developed. It is similar to Elon Musk's Starlink satellite internet, which Taiwan had negotiated for before talks fell through.

In case of an attack by China on Taiwan's internet, the island nation will still be online, thanks to a satellite internet service it has developed. It is similar to Elon Musk's Starlink satellite internet, which Taiwan had negotiated for before talks fell through. That happened because of Taiwan's insistence that a government entity must have a majority stake in any potential joint venture. Taiwan has a war chest of $10 billion for developing a space industry that includes the satellite internet network. Part of that is for putting its first communications satellite into space, which is expected to happen by 2026. Taiwan's satellite internet defence has been in the works for several years now and will be operational by the end of October. Watch: China-Taiwan Tensions: What Happens If China Invades Taiwan? × The democratic nation's main telecom firm Chunghwa said that the coverage will be provided in collaboration with a UK-European company Eutelsat OneWeb, for which a deal was signed in 2023, The Guardian reported. The low earth orbit satellite or LEO internet service will be able to provide 24-hour coverage by the end of October and commercial access is expected to follow soon, according to Chungwa co-president Alex Chien cited in the report. Taiwan, a democratically governed island, is seen by China as a breakaway region that should be annexed back to the mainland, by force if needed. Also read: Taiwan spots more Chinese balloons over strait, accuses Beijing of 'psychological warfare' ahead of elections A technology powerhouse, Taiwan has faced intense and consistent cyber attacks from China. This is in addition to other threatening actions from China including its fighter jets violating Taiwan air space. According to official data released on Tuesday (Oct 15), Taiwan spotted 153 Chinese military aircraft around its skies after China held military drills near the island. The intimidation follows warnings from Beijing that it would crush any attempts at independence after Taiwan's new President Lai Ching-te vowed to resist annexation attempts. Also read: Taiwan President Lai vows to resist annexation amid China's growing pressure The satellite internet service will utilise low earth orbit satellites, which are above the Earth in a range of 200 and 2,000 kilometres. There are thousands of LEO satellites, more than half of which are operated by Musk's Starlink. (With inputs from agencies)

China might kill Taiwan's internet in case of an attack, but Taipei has a plan B. Here it is

There has been a disturbing 400 per cent rise in 'GPS spoofing', and even more concerning is that&nbsp;hackers can use this malicious activity to change the clocks on airlines, which means they can 'hack time'.

<h2>What is GPS spoofing?</h2>

GPS stands for Global Positioning System, a modern satellite-based navigation system used by multiple industries across the world, including aviation and defence. According to an article in antivirus maker McAfee's website, GPS spoofing "is a malicious technique that manipulates" the GPS data, thereby misleading a GPS receiver about its actual location.&nbsp;

"This could potentially cause significant disruptions, as it can misdirect navigation systems, mislead delivery vehicles, or even trick smartphone apps," it noted.&nbsp;

GPS signals are&nbsp;easy to block or distort, and GPS spoofing has been used to throw missiles and drones off course.

Now, this mode of digital attack has been used against commercial airliners, which has seen a 400 per cent rise according to aviation advisory body&nbsp;OPSGROUP.

These attacks were carried around conflict zones too.

<h2>Recent examples of GPS spoofing</h2>

“We're starting to see reports of the clocks on board airplanes during spoofing events start to do weird things," a Reuters report quoted security expert Ken Munro as saying.

In April, Finnair temporarily paused flights to the eastern Estonian city of Tartu due to GPS spoofing. Estonia blamed Russia for the attack.

Munro said clock&nbsp;on board a Western airline's plane was moved forward by years in a GPS spoofing attack, "causing the plane to lose access to its digitally-encrypted communication systems."

Munro, founder of British cybersecurity company Pen Test Partners, said the plane was grounded for weeks while engineers manually reset its onboard systems, Reuters reported.

Munro, who was speaking at the Def Con cybersecurity conference in Las Vegas this past weekend, declined to identify the airline or aircraft.

“We think too much about GPS being a source of position, but it's actually a source of time,” &nbsp;Munro told the convention on Saturday (Aug 10).

<h2>Will GPS spoofing cause a plane crash?</h2>

While Munro said it is not going to make a plane crash, GPS spoofing can lead to a chain reaction of events that could end up being serious.

“What it does is, it just creates a little confusion. And you run the risk of starting what we call a cascade of events, where something minor happens, something else minor happens, and then something serious happens," the Reuters report&nbsp;quoted him as saying.

(With inputs from agencies)

 
&nbsp;

There has been a disturbing 400 per cent rise in 'GPS spoofing', and even more concerning is that hackers can use this malicious activity to change the clocks on airlines, which means they can 'hack time'.

There has been a disturbing 400 per cent rise in 'GPS spoofing', and even more concerning is that hackers can use this malicious activity to change the clocks on airlines, which means they can 'hack time'. What is GPS spoofing? GPS stands for Global Positioning System, a modern satellite-based navigation system used by multiple industries across the world, including aviation and defence. According to an article in antivirus maker McAfee's website, GPS spoofing "is a malicious technique that manipulates" the GPS data, thereby misleading a GPS receiver about its actual location. "This could potentially cause significant disruptions, as it can misdirect navigation systems, mislead delivery vehicles, or even trick smartphone apps," it noted. GPS signals are easy to block or distort, and GPS spoofing has been used to throw missiles and drones off course. Now, this mode of digital attack has been used against commercial airliners, which has seen a 400 per cent rise according to aviation advisory body OPSGROUP. These attacks were carried around conflict zones too. Recent examples of GPS spoofing “We're starting to see reports of the clocks on board airplanes during spoofing events start to do weird things," a Reuters report quoted security expert Ken Munro as saying. In April, Finnair temporarily paused flights to the eastern Estonian city of Tartu due to GPS spoofing. Estonia blamed Russia for the attack. Munro said clock on board a Western airline's plane was moved forward by years in a GPS spoofing attack, "causing the plane to lose access to its digitally-encrypted communication systems." Munro, founder of British cybersecurity company Pen Test Partners, said the plane was grounded for weeks while engineers manually reset its onboard systems, Reuters reported. Munro, who was speaking at the Def Con cybersecurity conference in Las Vegas this past weekend, declined to identify the airline or aircraft. “We think too much about GPS being a source of position, but it's actually a source of time,” Munro told the convention on Saturday (Aug 10). Will GPS spoofing cause a plane crash? While Munro said it is not going to make a plane crash, GPS spoofing can lead to a chain reaction of events that could end up being serious. “What it does is, it just creates a little confusion. And you run the risk of starting what we call a cascade of events, where something minor happens, something else minor happens, and then something serious happens," the Reuters report quoted him as saying. (With inputs from agencies)

GPS spoofing that disrupts aircraft rose by 400 per cent. Will it cause a serious accident?

Cyber-security experts and agencies around the world are warning people about a wave of opportunistic hacking attempts linked to the global tech outage created by CrowdStrike. Watch in for more details!

Global tech outage created by CrowdStrike sparks rise in tech scams

Microsoft is currently facing a significant crisis due to a widespread outage caused by a faulty security software update from CrowdStrike, which has led to numerous Windows machines displaying the notorious "blue screen of death" (BSOD).

What is 'Blue screen of death' due to Crowdstrike error

A faulty software update from cybersecurity vendor Crowdstrike crippled countless Microsoft Windows computers across the globe today, disrupting everything from airline travel and financial institutions to hospitals and businesses online. Watch in for more details!

Microsoft says CrowdStrike behind the meltdown

Paris 2024 is getting ready to face an unprecedented challenge in terms of cybersecurity, with organisers expecting a huge pressure on the Games this summer. Organised crime, activists and states will be the main threats during the July 26-Aug. 11&nbsp;Olympics&nbsp;and the Aug. 28-Sept. 8 Paralympics. Paris 2024, who have been working hand in hand with the French national agency for information security (ANSSI), and cybersecurity companies Cisco and Eviden are looking to limit the impact of cyber attacks.

"We can't prevent all the attacks, there will not be Games without attacks but we have to limit their impacts on the&nbsp;Olympics," Vincent Strubel, the director general of ANSSI, told reporters. "There are 500 sites, competition venues and local collectives, and we've tested them all."

Strubel is confident that Paris 2024, who will operate from a cybersecurity operation centre in a location that is being kept secret, will be ready. "The Games are facing an unprecedented&nbsp;level of threat, but we've also done an unprecedented amount of preparation work so I think we're a step ahead of the attackers," he said.

To make sure they are in the game, Paris 2024 have been paying "ethical hackers" to stress test their systems and have been using artificial intelligence to help them do a triage of the threats.

"AI helps us make the difference between a nuisance and a catastrophe," said Franz Regul, managing director for IT at Paris 2024. "We're expecting the number of cyber security event to be multiplied by 10 compared to Tokyo (in 2021)." "In terms of cybersecurity, four years is the equivalent of a century," Eric Greffier, head of partnerships at CISCO, explained.

Also read:&nbsp;<a href="https://www.wionews.com/sports/world-athletics-relays-indian-mens-and-womens-4x400m-relay-teams-seal-paris-olympics-berth-718385">World Athletics Relays: Indian men’s and women’s 4x400m relay teams seal Paris Olympics berth</a>

In 2018, a computer virus dubbed "Olympic Destroyer" was used in an attack on the opening ceremony of the Pyeongchang Winter Games.

While Moscow denied any involvement, the U.S. Justice Department in 2020 said it has indicted six Russian intelligence agency hackers for a four-year long hacking spree that included attacks against the Pyeongchang Games. "We would like to have one opponent but we're looking into everything and everyone. Naming the potential attackers is not our role, it is the role of the state," Strubel said.

Last month, French president Emmanuel Macron said he had no doubt Russia would malevolently target the Paris&nbsp;Olympics. The Games will take place amid a complex global backdrop, including Russia's war in Ukraine and Israel's conflict with Hamas, which has been designated a terrorist organization by the United States and the European Union.

Paris 2024 is getting ready to face an unprecedented challenge in terms of cybersecurity, with organisers expecting a huge pressure on the Games this summer. Organised crime, activists and states will be the main threats during the July 26-Aug.

Paris 2024 is getting ready to face an unprecedented challenge in terms of cybersecurity, with organisers expecting a huge pressure on the Games this summer. Organised crime, activists and states will be the main threats during the July 26-Aug. 11 Olympics and the Aug. 28-Sept. 8 Paralympics. Paris 2024, who have been working hand in hand with the French national agency for information security (ANSSI), and cybersecurity companies Cisco and Eviden are looking to limit the impact of cyber attacks. "We can't prevent all the attacks, there will not be Games without attacks but we have to limit their impacts on the Olympics," Vincent Strubel, the director general of ANSSI, told reporters. "There are 500 sites, competition venues and local collectives, and we've tested them all." Strubel is confident that Paris 2024, who will operate from a cybersecurity operation centre in a location that is being kept secret, will be ready. "The Games are facing an unprecedented level of threat, but we've also done an unprecedented amount of preparation work so I think we're a step ahead of the attackers," he said. To make sure they are in the game, Paris 2024 have been paying "ethical hackers" to stress test their systems and have been using artificial intelligence to help them do a triage of the threats. "AI helps us make the difference between a nuisance and a catastrophe," said Franz Regul, managing director for IT at Paris 2024. "We're expecting the number of cyber security event to be multiplied by 10 compared to Tokyo (in 2021)." "In terms of cybersecurity, four years is the equivalent of a century," Eric Greffier, head of partnerships at CISCO, explained. Also read: World Athletics Relays: Indian men’s and women’s 4x400m relay teams seal Paris Olympics berth In 2018, a computer virus dubbed "Olympic Destroyer" was used in an attack on the opening ceremony of the Pyeongchang Winter Games. While Moscow denied any involvement, the U.S. Justice Department in 2020 said it has indicted six Russian intelligence agency hackers for a four-year long hacking spree that included attacks against the Pyeongchang Games. "We would like to have one opponent but we're looking into everything and everyone. Naming the potential attackers is not our role, it is the role of the state," Strubel said. Last month, French president Emmanuel Macron said he had no doubt Russia would malevolently target the Paris Olympics. The Games will take place amid a complex global backdrop, including Russia's war in Ukraine and Israel's conflict with Hamas, which has been designated a terrorist organization by the United States and the European Union.

Olympics: Paris 2024 getting ready to face an unprecedented challenge in terms of cybersecurity

An Indian parliamentary house panel has asked the government to strengthen the cyber security of central and state government websites after it was revealed that 373 websites were hacked between January 2018 and September 2023. This data was revealed by the Ministry of Electronics and Information Technology (MeitY) to the parliamentary committee on communications and information technology.

“As per the information reported to and tracked by CERT-In (Indian Computer Emergency Response Team), a total number of 110, 54, 59, 42, 50 and 58 website hacking incidents of Central Ministries/Departments and State Government organisations were observed during the years 2018, 2019, 2020, 2021, 2022 and 2023 (up to September), respectively,” MeitY told the committee.

Reacting to the statement, the house panel tabled a report in the parliament, titled, “Digital Payment and Online Security Measures for Data Protection,” on February 8 and asked the government to strengthen critical digital infrastructure.

The committee also pointed out that some government offices were using outdated software on laptops and computers, which made them vulnerable to cyber-attacks.

Watch:&nbsp;China continues to pose cyber security threats to India: Dr Ajai Chowdhry

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/china-continues-to-pose-cyber-security-threats-to-india-dr-ajai-chowdhry-the-india-story-684090/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

“Though MeitY has come up with regular guidelines regarding ensuring cyber security of Government cyber infrastructure, the Committee would emphasise on the adherence to these guidelines and recommend the Ministry to update entire government infrastructure regarding handling of cyber threats. The Committee would like to be apprised of the actions taken in this regard,” the report said.

Earlier, a report by Microsoft in October 2023 revealed that India was amongst the world’s major targets of cyber attacks by nation-state actors.

Also read:&nbsp;<a data-jsarwt="1" data-usg="AOvVaw31AhwB6ZZbGFvoylyVqRGh" data-ved="2ahUKEwi4lf6Tj6GEAxVC1jgGHfYfCT0QxfQBKAB6BAgHEAE" href="https://www.wionews.com/india-news/india-warns-apple-users-of-major-cyber-attack-heres-list-of-devices-at-highest-risk-686112" jsname="YKoRaf">India warns Apple users of major cyber attack. Here's the list of devices at highest risk</a>

India accounts for 13 per cent of cyber-attacks in the Asia-Pacific (APAC) region, making it one of the top three most attacked countries by nation-state actors, the report said.

Microsoft also warned that Artificial Intelligence was being deployed by hackers to carry out cyber attacks. “Microsoft is already seeing AI-powered cyber-defence reversing the tide of cyberattacks; in Ukraine, for example, AI has helped defend against Russia. As transformative AI reshapes many aspects of society, we must engage in Responsible AI practices crucial for maintaining user trust and privacy, and for creating long-term benefits,” the report advised. 
 
(With inputs from agencies)

An Indian parliamentary house panel has asked the government to strengthen the cyber security of central and state government websites after it was revealed that 373 websites were hacked between January 2018 and September 2023.

An Indian parliamentary house panel has asked the government to strengthen the cyber security of central and state government websites after it was revealed that 373 websites were hacked between January 2018 and September 2023. This data was revealed by the Ministry of Electronics and Information Technology (MeitY) to the parliamentary committee on communications and information technology. “As per the information reported to and tracked by CERT-In (Indian Computer Emergency Response Team), a total number of 110, 54, 59, 42, 50 and 58 website hacking incidents of Central Ministries/Departments and State Government organisations were observed during the years 2018, 2019, 2020, 2021, 2022 and 2023 (up to September), respectively,” MeitY told the committee. Reacting to the statement, the house panel tabled a report in the parliament, titled, “Digital Payment and Online Security Measures for Data Protection,” on February 8 and asked the government to strengthen critical digital infrastructure. The committee also pointed out that some government offices were using outdated software on laptops and computers, which made them vulnerable to cyber-attacks. Watch: China continues to pose cyber security threats to India: Dr Ajai Chowdhry × “Though MeitY has come up with regular guidelines regarding ensuring cyber security of Government cyber infrastructure, the Committee would emphasise on the adherence to these guidelines and recommend the Ministry to update entire government infrastructure regarding handling of cyber threats. The Committee would like to be apprised of the actions taken in this regard,” the report said. Earlier, a report by Microsoft in October 2023 revealed that India was amongst the world’s major targets of cyber attacks by nation-state actors. Also read: India warns Apple users of major cyber attack. Here's the list of devices at highest risk India accounts for 13 per cent of cyber-attacks in the Asia-Pacific (APAC) region, making it one of the top three most attacked countries by nation-state actors, the report said. Microsoft also warned that Artificial Intelligence was being deployed by hackers to carry out cyber attacks. “Microsoft is already seeing AI-powered cyber-defence reversing the tide of cyberattacks; in Ukraine, for example, AI has helped defend against Russia. As transformative AI reshapes many aspects of society, we must engage in Responsible AI practices crucial for maintaining user trust and privacy, and for creating long-term benefits,” the report advised. (With inputs from agencies)

India: 373 govt websites hacked in past 5 years; house panel calls for strengthening digital infrastructure

Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank. Canberra announced first-of-its-kind sanctions which include a travel ban and financial penalties.&nbsp;

<h2>About the sanctions</h2>

In late 2022, Medibank, Australia’s largest private health insurer, disclosed that a hacker had stolen the personal information of 9.7 million current and former customers, and released the data on the dark web.&nbsp;

The files published online included sensitive information about millions of Australians, including abortion records and treatment received for mental health or addiction.&nbsp;

WATCH |&nbsp;Australia sanctions Russian hacker for role in 2022 Medibank cyberattack

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/australia-sanctions-russian-hacker-for-role-in-2022-medibank-cyberattack-682809/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

Australia has recently witnessed a spike in the number of cyber attacks, prompting the government to overhaul its cyber security rules last year and set up an agency to help coordinate responses.

This is the first time that Australia has imposed its cyber sanctions following a framework which was legislated in 2021.&nbsp;

The sanctions against Ermakov, 33, also include financial sanctions and a travel ban, said Home Affairs Minister Clare O’Neil during a press briefing, describing the Medibank hack as “the single most devastating cyber-attack we have experienced as a nation”.&nbsp;

“Literally millions of people having personal data about themselves, their family members, taken from them and cruelly placed online for others to see,” said O’Neil.&nbsp;

She added, “These people are cowards and they’re scumbags. They hide behind technology and today, the Australian government is saying that when we put our minds to it, we’ll unveil who you are, and we’ll make sure you are accountable.”&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/medibank-data-leak-hackers-now-release-info-related-to-abortion-533115">Medibank data leak: Australian police blame Russian hackers</a>

The sanctions imposed make it a criminal offence, punishable by up to 10 years in jail and fines, to provide Ermakov with any assets, including cryptocurrency wallets or ransomware payments.

O'Neil also said that officials are still investigating the data breach and many more may face penalties. While not much is known about Ermakov, Australian intelligence authorities say he is part of the infamous Russian cyber-crime gang REvil.&nbsp;

<h2>‘Single most devastating cyber-attack’</h2>

A report by the Australian government, in November, showed that state-sponsored cyber groups and hackers had stepped up assaults on Australia's critical infrastructure, businesses and homes.&nbsp;

In the Medibank breach, hackers stole login details which granted them access to all of the insurers’ customer data which included athletes, prominent media figures and even Australian Prime Minister Anthony Albanese.

However, Medibank, with government support, refused to pay a multi-million dollar ransom after which the hackers published the data online.&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/australias-biggest-health-insurer-medibank-reports-huge-data-breach-527061">Australia's biggest health insurer Medibank reports huge data breach</a>

They first released files named “good-list” and “naughty-list” which included records of treatment for mental health, addiction, drug abuse and sexually transmitted infections. These files also contained people’s names, addresses, birthdates, and government ID numbers.&nbsp;

The hacker group which is said to be behind this breach also released a file named “abortions.csv” which comprised information about some customers’ end-of-pregnancy procedures.

(With inputs from agencies) 
&nbsp;

Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank.

Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank. Canberra announced first-of-its-kind sanctions which include a travel ban and financial penalties. About the sanctions In late 2022, Medibank, Australia’s largest private health insurer, disclosed that a hacker had stolen the personal information of 9.7 million current and former customers, and released the data on the dark web. The files published online included sensitive information about millions of Australians, including abortion records and treatment received for mental health or addiction. WATCH | Australia sanctions Russian hacker for role in 2022 Medibank cyberattack Australia has recently witnessed a spike in the number of cyber attacks, prompting the government to overhaul its cyber security rules last year and set up an agency to help coordinate responses. This is the first time that Australia has imposed its cyber sanctions following a framework which was legislated in 2021. The sanctions against Ermakov, 33, also include financial sanctions and a travel ban, said Home Affairs Minister Clare O’Neil during a press briefing, describing the Medibank hack as “the single most devastating cyber-attack we have experienced as a nation”. “Literally millions of people having personal data about themselves, their family members, taken from them and cruelly placed online for others to see,” said O’Neil. She added, “These people are cowards and they’re scumbags. They hide behind technology and today, the Australian government is saying that when we put our minds to it, we’ll unveil who you are, and we’ll make sure you are accountable.” ALSO READ | Medibank data leak: Australian police blame Russian hackers The sanctions imposed make it a criminal offence, punishable by up to 10 years in jail and fines, to provide Ermakov with any assets, including cryptocurrency wallets or ransomware payments. O'Neil also said that officials are still investigating the data breach and many more may face penalties. While not much is known about Ermakov, Australian intelligence authorities say he is part of the infamous Russian cyber-crime gang REvil. ‘Single most devastating cyber-attack’ A report by the Australian government, in November, showed that state-sponsored cyber groups and hackers had stepped up assaults on Australia's critical infrastructure, businesses and homes. In the Medibank breach, hackers stole login details which granted them access to all of the insurers’ customer data which included athletes, prominent media figures and even Australian Prime Minister Anthony Albanese. However, Medibank, with government support, refused to pay a multi-million dollar ransom after which the hackers published the data online. ALSO READ | Australia's biggest health insurer Medibank reports huge data breach They first released files named “good-list” and “naughty-list” which included records of treatment for mental health, addiction, drug abuse and sexually transmitted infections. These files also contained people’s names, addresses, birthdates, and government ID numbers. The hacker group which is said to be behind this breach also released a file named “abortions.csv” which comprised information about some customers’ end-of-pregnancy procedures. (With inputs from agencies)

Medibank breach: Russian hacker sanctioned for role in Australia’s biggest data theft

Google has deleted 17 SpyLoan apps from the Play Store with millions of downloads. According to a report by Slovak software company ESET on Tuesday (Dec 5), since the beginning of this year, the company observed an alarming growth of deceptive Android loan apps, which present themselves as legitimate personal loan services, promising quick and easy access to funds.

Google removes 17 'SpyLoan' apps. Delete these right away

Australia is breathing a sigh of relief after three days of heightened tensions. Several of its top ports have restarted operation after a major cyber security incident. That's good news for the country. these ports handle nearly 40% of the total trade.

Australia's ports restart operations | World Business Watch

A cybersecurity researcher has exposed&nbsp;a major vulnerability in the Central Intelligence Agency's (CIA) official X account. The flaw in the social media platform formerly known as Twitter allowed the ethical hacker to infiltrate a recruitment channel used by the CIA to connect with potential informants.&nbsp;

The CIA, which specialises in gathering covert intelligence, often relies on an extensive network of spies and tipsters worldwide. Many of them are recruited through the internet.

To maintain its presence and encourage people to contribute to US&nbsp;national security, the CIA operates its official X account, which boasts nearly 3.5 million followers. This platform serves as a promotional tool and an avenue for engaging with potential recruits.

Sometime after September 27, 2023, the CIA's X account included a link to a Telegram channel&nbsp;intended for people&nbsp;interested in contacting the agency via the dark net and other discreet methods.

<a href="https://www.wionews.com/technology/x-introduces-1-annual-subscription-for-basic-features-in-trial-648195">Also read |&nbsp;X introduces $1 annual subscription for basic features in trial</a>

<h2>Exploiting the glitch</h2>

However, an unforeseen glitch in how X&nbsp;displayed certain links led to the truncation of the web address.

Instead of directing users to the intended Telegram channel, the link appeared as https://t.me/securelycont, inadvertently creating an available Telegram username. Seizing this opportunity, cybersecurity researcher Kevin McSheehan&nbsp;registered the username.

McSheehan redirected users clicking on the truncated link to his own Telegram channel, where he issued a warning against sharing confidential or sensitive information.

<a href="https://www.wionews.com/world/us-releases-footage-of-incidents-of-chinese-jets-performing-coercive-and-risky-maneuvers-648201">Also read |&nbsp;US releases footage of incidents of Chinese jets performing 'coercive and risky' manoeuvres</a>

His actions were motivated by a concern for security and creating awareness about&nbsp;the recurring glitch that he had previously observed on X&nbsp;platform. The CIA appeared to have been oblivious to this vulnerability, a lapse that McSheehan found astonishing.

Within an hour of the inquiry, the error was rectified, and the link was corrected.&nbsp;

WATCH WION LIVE HERE:

<iframe allowfullscreen="" autoplay="1" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" width="560"></iframe>

A cybersecurity researcher has exposed a major vulnerability in the Central Intelligence Agency's (CIA) official X account. The flaw in the social media platform formerly known as Twitter allowed the ethical hacker to infiltrate a recruitment channel used by the CIA to connect with potential informants.

A cybersecurity researcher has exposed a major vulnerability in the Central Intelligence Agency's (CIA) official X account. The flaw in the social media platform formerly known as Twitter allowed the ethical hacker to infiltrate a recruitment channel used by the CIA to connect with potential informants. The CIA, which specialises in gathering covert intelligence, often relies on an extensive network of spies and tipsters worldwide. Many of them are recruited through the internet. To maintain its presence and encourage people to contribute to US national security, the CIA operates its official X account, which boasts nearly 3.5 million followers. This platform serves as a promotional tool and an avenue for engaging with potential recruits. Sometime after September 27, 2023, the CIA's X account included a link to a Telegram channel intended for people interested in contacting the agency via the dark net and other discreet methods. Also read | X introduces $1 annual subscription for basic features in trial Exploiting the glitch However, an unforeseen glitch in how X displayed certain links led to the truncation of the web address. Instead of directing users to the intended Telegram channel, the link appeared as https://t.me/securelycont, inadvertently creating an available Telegram username. Seizing this opportunity, cybersecurity researcher Kevin McSheehan registered the username. McSheehan redirected users clicking on the truncated link to his own Telegram channel, where he issued a warning against sharing confidential or sensitive information. Also read | US releases footage of incidents of Chinese jets performing 'coercive and risky' manoeuvres His actions were motivated by a concern for security and creating awareness about the recurring glitch that he had previously observed on X platform. The CIA appeared to have been oblivious to this vulnerability, a lapse that McSheehan found astonishing. Within an hour of the inquiry, the error was rectified, and the link was corrected. WATCH WION LIVE HERE:

This glitch in X enabled the hijacking of CIA informant channel. Here's how

In today's digital age, where cyber threats are becoming increasingly sophisticated, organisations face the daunting task of protecting their sensitive information and infrastructure from malicious actors. As the cyber landscape evolves, so must our defence strategies. 
 
One promising technology that has emerged as a game-changer in the field of cybersecurity is Artificial Intelligence (AI). With its ability to analyse vast amounts of data and learn from patterns, AI offers innovative solutions to bolster our defences. In this article, we delve into the fascinating world of AI, exploring its creative use cases and the challenges it faces in the realm of cybersecurity.

Creative AI use cases in cybersecurity

Malware detection and prevention: One of the most pressing challenges in cybersecurity is the rapid evolution of malware. AI algorithms can analyse large volumes of data, such as network traffic and system logs, to identify patterns and anomalies that may indicate the presence of malicious software. By continuously learning from new threats and attack techniques, AI systems can swiftly detect and prevent malware from infiltrating networks, saving organisations from significant damage and loss.

User behaviour analytics: Organisations often struggle to detect insider threats and unauthorised activities within their networks. AI can play a crucial role in monitoring and analysing user behaviour to identify unusual activities. By establishing baseline behaviours and comparing them with real-time data, AI algorithms can flag suspicious actions, such as unauthorised access attempts or data exfiltration. This proactive approach allows organisations to detect potential threats early and respond swiftly.

Threat intelligence and prediction: The cyber threat landscape is constantly evolving, making it challenging for organisations to keep up. AI systems can aggregate and analyse vast amounts of threat intelligence data from various sources, including forums, dark web, and cybersecurity feeds. By identifying patterns and correlations in this data, AI can generate valuable insights, helping security teams proactively respond to emerging threats and fortify their defenses.

Phishing and fraud detection: Phishing attacks continue to be a prevalent threat, targeting individuals and organisations alike. AI algorithms can analyse email content, URLs, and user behaviour to identify phishing attempts accurately. By leveraging machine learning techniques, AI systems can adapt and improve their detection capabilities as attackers evolve their tactics. This enables organisations to better protect their employees and systems from falling victim to phishing scams.

Incident response and automation: When a security incident occurs, rapid response is critical to minimising damage and reducing downtime. AI-powered systems can expedite incident response processes by automating routine tasks, such as gathering information, analysing logs, and identifying potential indicators of compromise. By rapidly triaging and categorising incidents, AI can enhance the efficiency of cybersecurity teams, allowing them to focus on more complex and critical tasks.

<a href="https://www.wionews.com/technology/ai-robots-make-bold-claim-at-un-conference-theyre-ready-to-run-the-world-613199">ALSO READ|&nbsp;AI robots make bold claim at UN conference: They're ready to 'run the world'</a> 
 
Challenges in harnessing AI for cybersecurity

Adversarial attacks: While AI can significantly enhance cybersecurity defenses, sophisticated adversaries can develop techniques to evade AI-powered security systems. Adversarial attacks involve manipulating input data to deceive AI models, leading to misclassifications or false negatives. Developing robust defenses against such attacks remains a significant challenge for researchers and practitioners in the field.

Data privacy and bias: To train AI models effectively, large datasets are required. However, ensuring the privacy and integrity of sensitive data poses ethical concerns. Organisations must find the right balance between using data to improve AI algorithms and protecting individuals' privacy. Moreover, biases in the training data can lead to biased AI algorithms, potentially impacting the fairness and effectiveness of cybersecurity solutions.

Explainability and trust: AI algorithms often operate as black boxes, making it difficult to understand their decision-making processes. This lack of transparency can hinder trust and limit adoption in critical cybersecurity domains where explainability is crucial for human decision-making and regulatory compliance. Efforts are underway to develop explainable AI models that can provide insights into their decision-making processes, allowing cybersecurity professionals to understand and validate their outputs.

Skill gap and workforce readiness: The rapid evolution of AI technology demands a skilled workforce capable of developing, implementing, and managing AI systems for cybersecurity. Bridging the skill gap and equipping cybersecurity professionals with the necessary knowledge and expertise in AI is essential. Organisations must invest in training programs and initiatives to ensure their workforce is ready to harness the power of AI in the fight against cyber threats.

Artificial Intelligence has emerged as a powerful ally in the ongoing battle against cyber threats. Its creative use cases, from malware detection to incident response automation, provide organisations with advanced capabilities to safeguard their digital assets. However, challenges such as adversarial attacks, data privacy concerns, and explainability limitations must be addressed to fully leverage the potential of AI in cybersecurity.&nbsp;

By embracing AI's benefits while mitigating its risks, we can build a resilient defence ecosystem that adapts to the evolving threat landscape and ensures the security of our digital future. With continued research, collaboration, and investment, AI has the potential to revolutionise the field of cybersecurity and help us stay one step ahead of cybercriminals. 
 
(Disclaimer: The views of the writer do not represent the views of WION or ZMCL. Nor does WION or ZMCL endorse the views of the writer) 
 
WATCH WION LIVE HERE

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

In today's digital age, where cyber threats are becoming increasingly sophisticated, organisations face the daunting task of protecting their sensitive information and infrastructure from malicious actors.

In today's digital age, where cyber threats are becoming increasingly sophisticated, organisations face the daunting task of protecting their sensitive information and infrastructure from malicious actors. As the cyber landscape evolves, so must our defence strategies. One promising technology that has emerged as a game-changer in the field of cybersecurity is Artificial Intelligence (AI). With its ability to analyse vast amounts of data and learn from patterns, AI offers innovative solutions to bolster our defences. In this article, we delve into the fascinating world of AI, exploring its creative use cases and the challenges it faces in the realm of cybersecurity. Creative AI use cases in cybersecurity Malware detection and prevention: One of the most pressing challenges in cybersecurity is the rapid evolution of malware. AI algorithms can analyse large volumes of data, such as network traffic and system logs, to identify patterns and anomalies that may indicate the presence of malicious software. By continuously learning from new threats and attack techniques, AI systems can swiftly detect and prevent malware from infiltrating networks, saving organisations from significant damage and loss. User behaviour analytics: Organisations often struggle to detect insider threats and unauthorised activities within their networks. AI can play a crucial role in monitoring and analysing user behaviour to identify unusual activities. By establishing baseline behaviours and comparing them with real-time data, AI algorithms can flag suspicious actions, such as unauthorised access attempts or data exfiltration. This proactive approach allows organisations to detect potential threats early and respond swiftly. Threat intelligence and prediction: The cyber threat landscape is constantly evolving, making it challenging for organisations to keep up. AI systems can aggregate and analyse vast amounts of threat intelligence data from various sources, including forums, dark web, and cybersecurity feeds. By identifying patterns and correlations in this data, AI can generate valuable insights, helping security teams proactively respond to emerging threats and fortify their defenses. Phishing and fraud detection: Phishing attacks continue to be a prevalent threat, targeting individuals and organisations alike. AI algorithms can analyse email content, URLs, and user behaviour to identify phishing attempts accurately. By leveraging machine learning techniques, AI systems can adapt and improve their detection capabilities as attackers evolve their tactics. This enables organisations to better protect their employees and systems from falling victim to phishing scams. Incident response and automation: When a security incident occurs, rapid response is critical to minimising damage and reducing downtime. AI-powered systems can expedite incident response processes by automating routine tasks, such as gathering information, analysing logs, and identifying potential indicators of compromise. By rapidly triaging and categorising incidents, AI can enhance the efficiency of cybersecurity teams, allowing them to focus on more complex and critical tasks. ALSO READ| AI robots make bold claim at UN conference: They're ready to 'run the world' Challenges in harnessing AI for cybersecurity Adversarial attacks: While AI can significantly enhance cybersecurity defenses, sophisticated adversaries can develop techniques to evade AI-powered security systems. Adversarial attacks involve manipulating input data to deceive AI models, leading to misclassifications or false negatives. Developing robust defenses against such attacks remains a significant challenge for researchers and practitioners in the field. Data privacy and bias: To train AI models effectively, large datasets are required. However, ensuring the privacy and integrity of sensitive data poses ethical concerns. Organisations must find the right balance between using data to improve AI algorithms and protecting individuals' privacy. Moreover, biases in the training data can lead to biased AI algorithms, potentially impacting the fairness and effectiveness of cybersecurity solutions. Explainability and trust: AI algorithms often operate as black boxes, making it difficult to understand their decision-making processes. This lack of transparency can hinder trust and limit adoption in critical cybersecurity domains where explainability is crucial for human decision-making and regulatory compliance. Efforts are underway to develop explainable AI models that can provide insights into their decision-making processes, allowing cybersecurity professionals to understand and validate their outputs. Skill gap and workforce readiness: The rapid evolution of AI technology demands a skilled workforce capable of developing, implementing, and managing AI systems for cybersecurity. Bridging the skill gap and equipping cybersecurity professionals with the necessary knowledge and expertise in AI is essential. Organisations must invest in training programs and initiatives to ensure their workforce is ready to harness the power of AI in the fight against cyber threats. Artificial Intelligence has emerged as a powerful ally in the ongoing battle against cyber threats. Its creative use cases, from malware detection to incident response automation, provide organisations with advanced capabilities to safeguard their digital assets. However, challenges such as adversarial attacks, data privacy concerns, and explainability limitations must be addressed to fully leverage the potential of AI in cybersecurity. By embracing AI's benefits while mitigating its risks, we can build a resilient defence ecosystem that adapts to the evolving threat landscape and ensures the security of our digital future. With continued research, collaboration, and investment, AI has the potential to revolutionise the field of cybersecurity and help us stay one step ahead of cybercriminals. (Disclaimer: The views of the writer do not represent the views of WION or ZMCL. Nor does WION or ZMCL endorse the views of the writer) WATCH WION LIVE HERE

Artificial Intelligence: Confronting challenges in cybersecurity

India's National Security Board is conducting cyber defense exercises in the wake of threats from China and other adversaries mounting by the day. The agencies including India's TRAI services are participating in the week-long exercise to test the resilience of India's civilian and Military infrastructure. The cyber security exercises are being held under the ages of India's defense cyber agency with participants aiming to test the firewalls guarding India's critical infrastructure.

India gears up to deal with cyber threats

The Federal Bureau of Investigation (FBI) is warning people to not use public phone charging stations or USB ports to avoid exposing their devices to malicious software. The Denver branch in a tweet said, "Avoid using free charging stations in airports, hotels or shopping centres. Bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices. Carry your own charger and USB cord and use an electrical outlet instead." The organisation told CBS News that there is no specific incident that caused the public announcement, rather was meant as a "field warning." While these charging stations are useful to many when devices are running low on battery, cyber experts have been raising security&nbsp;concerns for years.

In the last four years, the threats designed to propagate over USB or exploit USB for infection rose to 52 per cent, the 2022 USB Threat report by Honeywell Forge said. &nbsp;

In 2011, they introduced the term "juice jacking" to describe the problem.&nbsp;

<h3>What is juice jacking?</h3>

A term coined in 2011, still remains a concern. It means a security vulnerability in which a tampered or infected USB charging station is used to compromise linked devices.

The Federal Communications Commission (FCC) officials warned malware installed through corrupted USB ports can lock a device or even export personal data including passwords directly to criminals.&nbsp;

Drew Paik, a former employee of security firm Authentic8 told news agency CNN that plugging your phone into a (compromised) charger infects your device and data. If the port is compromised, then&nbsp;there is no limit to what extent a hacker could access the information. The hacker can even lock your device.

Experts have advised never to use a charger that isn't yours or someone you know.

The FCC in its recent blog post said, "In some cases, criminals may have intentionally left cables plugged in at charging stations.&nbsp;There have even been reports of infected cables being given away as promotional gifts."

<h3>Steps to avoid juice jacking?</h3>

Like the FBI, FCC recommends public to avoid using public USB charging stations and use a power outlet instead. In case you're travelling, always carry a portable charger or an external battery.&nbsp;

If you don't have any of these and are compelled to use a public station, thoroughly inspect it and if it appears to have been tampered with in any way, don't use it.&nbsp;

The Federal Bureau of Investigation (FBI) is warning people to not use public phone charging stations or USB ports to avoid exposing their devices to malicious software.

The Federal Bureau of Investigation (FBI) is warning people to not use public phone charging stations or USB ports to avoid exposing their devices to malicious software. The Denver branch in a tweet said, "Avoid using free charging stations in airports, hotels or shopping centres. Bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices. Carry your own charger and USB cord and use an electrical outlet instead." The organisation told CBS News that there is no specific incident that caused the public announcement, rather was meant as a "field warning." While these charging stations are useful to many when devices are running low on battery, cyber experts have been raising security concerns for years. In the last four years, the threats designed to propagate over USB or exploit USB for infection rose to 52 per cent, the 2022 USB Threat report by Honeywell Forge said. In 2011, they introduced the term "juice jacking" to describe the problem. What is juice jacking? A term coined in 2011, still remains a concern. It means a security vulnerability in which a tampered or infected USB charging station is used to compromise linked devices. The Federal Communications Commission (FCC) officials warned malware installed through corrupted USB ports can lock a device or even export personal data including passwords directly to criminals. Drew Paik, a former employee of security firm Authentic8 told news agency CNN that plugging your phone into a (compromised) charger infects your device and data. If the port is compromised, then there is no limit to what extent a hacker could access the information. The hacker can even lock your device. Experts have advised never to use a charger that isn't yours or someone you know. The FCC in its recent blog post said, "In some cases, criminals may have intentionally left cables plugged in at charging stations. There have even been reports of infected cables being given away as promotional gifts." Steps to avoid juice jacking? Like the FBI, FCC recommends public to avoid using public USB charging stations and use a power outlet instead. In case you're travelling, always carry a portable charger or an external battery. If you don't have any of these and are compelled to use a public station, thoroughly inspect it and if it appears to have been tampered with in any way, don't use it.

Beware of juice jacking: FBI warns against using public USB charging points over security concerns

cyber-security

Cyber Security, News on Cyber Security, stories on Cyber Security, articles on Cyber Security, Cyber Security stories at Wion, Cyber Security news, Cyber Security latest news