The Estonian Govt is keen on more cooperation with India on Cyber Security front & has welcomed India's push on Digital Public Infrastructure. Speaking to Wion's Sidhant Sibal in Tallinn, Estonia's Digital Affairs & Justice Minister Liisa Pakosta said,' we are looking for a more exchange of specialists cyber security specialists, and we are also looking for more joint research projects" with India.

Estonia Eyes More Cooperation With India on Cyber security, Says Minister Liisa Pakosta

As the United States general election nears the finishing line on Tuesday (Nov 5), there have been reports of 'bomb threats' of Russian origin, apart from bad weather and voting machine glitches that led to delays or extensions of polling time.

The email threats were described by authorities and the FBI as 'non-credible' amid reports that foreign adversaries including Russia and China were trying to disrupt the US election process.

Watch: US Election: Capitol Hill: Man With Flare Gun Arrested | Voting Extended In Pennsylvania County

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/us-election-capitol-hill-man-with-flare-gun-arrested-voting-extended-in-pennsylvania-county-773720/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

There have been some arrests, amid long lines that broke records in some states as Republican Donald Trump and Democrat Kamala Harris race for the White House in a supertight presidential election.

The bomb threats were received over email at some polling stations in the states of Michigan, Wisconsin and Georgia, leading to delays as law enforcement cleared the areas.

The FBI said the threats "appear to originate from Russian email domains" adding that no threat was credible thus far.

In Georgia, a key battleground state, the bomb threats were reported in Union City near the capital Atlanta, leading to the temporary shutting of two polling stations, CNN reported citing Nadine Williams, Fulton County Registration and Elections Director.

Similarly, a station was evacuated in the state's Gwinnett County for nearly an hour over a bomb threat, local police said.

<a href="https://www.wionews.com/world/us-election-2024-stay-in-line-too-big-to-rig-exhorts-trump-is-he-already-crying-foul-773701">Also read: US Election 2024: 'STAY IN LINE - TOO BIG TO RIG', exhorts Trump. Is he already crying foul?</a> 
 
In Michigan, bomb threats that were initially reported to be serious were found non-credible after a probe, CNN quoted the state's Attorney General Dana Nessel as saying.

All bomb threats were traced to email IDs with domains registered in Russia.

Some polling stations saw delays due to voter ID checking, and malfunctioning voting machines in an election closely scrutinised, vote by vote.

Election officials are seeking to prevent a repeat of 2020 when Trump claimed fraud, which he appeared to repeat already through some social media posts on Tuesday.

CNN cited Cait Conley, senior adviser at the Cybersecurity and Infrastructure Security Agency, as saying that there were no significant national-level incidents impacting election security.

The turnout has been impressive, with Michigan breaking the record that it already holds for the largest number of votes polled.

<a href="https://www.wionews.com/world/us-election-2024-donald-trump-and-his-india-connection-773647">Also read: US Election 2024: Donald Trump and his India connection</a> 
 
Sporadic incidents of violence and some arrests have been reported in Michigan, Wisconsin, Georgia and Washington DC, while voting machines malfunctioned in a Pennsylvania booth leading to an extension of polling time.

Trump also raised doubts about the conduct of elections.&nbsp;"A lot of talk about massive CHEATING in Philadelphia. Law enforcement coming!!!” he wrote in a post on his Truth Social platform.

Massive security is in place, including snipers and drones securing polling locations, apart from 350 National Guard personnel and monitoring of cyber threats.

Security has been beefed up and troops are on standby in the national capital Washington, DC and 18 states including some battlegrounds.

(With inputs from agencies)

As the United States general election nears the finishing line on Tuesday (Nov 5), there have been reports of 'bomb threats' of Russian origin, apart from bad weather and voting machine glitches that led to delays or extensions of polling time.

As the United States general election nears the finishing line on Tuesday (Nov 5), there have been reports of 'bomb threats' of Russian origin, apart from bad weather and voting machine glitches that led to delays or extensions of polling time. The email threats were described by authorities and the FBI as 'non-credible' amid reports that foreign adversaries including Russia and China were trying to disrupt the US election process. Watch: US Election: Capitol Hill: Man With Flare Gun Arrested | Voting Extended In Pennsylvania County × There have been some arrests, amid long lines that broke records in some states as Republican Donald Trump and Democrat Kamala Harris race for the White House in a supertight presidential election. The bomb threats were received over email at some polling stations in the states of Michigan, Wisconsin and Georgia, leading to delays as law enforcement cleared the areas. The FBI said the threats "appear to originate from Russian email domains" adding that no threat was credible thus far. In Georgia, a key battleground state, the bomb threats were reported in Union City near the capital Atlanta, leading to the temporary shutting of two polling stations, CNN reported citing Nadine Williams, Fulton County Registration and Elections Director. Similarly, a station was evacuated in the state's Gwinnett County for nearly an hour over a bomb threat, local police said. Also read: US Election 2024: 'STAY IN LINE - TOO BIG TO RIG', exhorts Trump. Is he already crying foul? In Michigan, bomb threats that were initially reported to be serious were found non-credible after a probe, CNN quoted the state's Attorney General Dana Nessel as saying. All bomb threats were traced to email IDs with domains registered in Russia. Some polling stations saw delays due to voter ID checking, and malfunctioning voting machines in an election closely scrutinised, vote by vote. Election officials are seeking to prevent a repeat of 2020 when Trump claimed fraud, which he appeared to repeat already through some social media posts on Tuesday. CNN cited Cait Conley, senior adviser at the Cybersecurity and Infrastructure Security Agency, as saying that there were no significant national-level incidents impacting election security. The turnout has been impressive, with Michigan breaking the record that it already holds for the largest number of votes polled. Also read: US Election 2024: Donald Trump and his India connection Sporadic incidents of violence and some arrests have been reported in Michigan, Wisconsin, Georgia and Washington DC, while voting machines malfunctioned in a Pennsylvania booth leading to an extension of polling time. Trump also raised doubts about the conduct of elections. "A lot of talk about massive CHEATING in Philadelphia. Law enforcement coming!!!” he wrote in a post on his Truth Social platform. Massive security is in place, including snipers and drones securing polling locations, apart from 350 National Guard personnel and monitoring of cyber threats. Security has been beefed up and troops are on standby in the national capital Washington, DC and 18 states including some battlegrounds. (With inputs from agencies)

US election: 'Bomb threats of Russian origin', machine glitches delay polling in some states

India’s top cybersecurity agency has warned of high risk to Apple users citing several vulnerabilities it found in multiple products. Computer Emergency Response Team-India (CERT-In) issued an alert on September 19 highlighting security concerns across several Apple software platforms like iOS, iPadOS, macOS, watchOS, and visionOS. The warning came as the US tech giant rolled out Apple’s iPhone 16 series globally.

According to the cybersecurity agency, following Apple products and software versions are at the highest risk.

-iOS: Versions prior to 18 and 17.7

- iPadOS: Versions prior to 18 and 17.7

- macOS Sonoma: Versions prior to 14.7

- macOS Ventura: Versions prior to 13.7

- macOS Sequoia: Versions prior to 15

- tvOS: Versions prior to 18

- watchOS: Versions prior to 11

- Safari: Versions prior to 18

- Xcode: Versions prior to 16

- visionOS: Versions prior to 2

The CERT-In has warned that if vulnerabilities are not addressed, they could allow potential attackers to gain access to sensitive information on these devices, execute arbitrary code on the device, bypass critical security restrictions, cause denial-of-service (DoS) conditions, elevate privileges to gain control over the system, perform spoofing attacks and engage in cross-site scripting (XSS) attacks.

The CERT has also listed potential impacts on Apple products if the high-risk loopholes are not fixed.

- iOS and iPadOS: Users with iOS versions prior to 18 or 17.7 could face DoS attacks, information disclosure, and security restriction bypassing.

Also read:&nbsp;<a data-ved="2ahUKEwjInfXA09aIAxUth68BHbiIM2YQxfQBKAB6BAgPEAE" href="https://www.wionews.com/business-economy/apple-faces-final-ruling-on-14-billion-dollars-tax-repayment-to-ireland-757695" jsname="YKoRaf" ping="/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https://www.wionews.com/business-economy/apple-faces-final-ruling-on-14-billion-dollars-tax-repayment-to-ireland-757695&amp;ved=2ahUKEwjInfXA09aIAxUth68BHbiIM2YQxfQBKAB6BAgPEAE">Apple faces final ruling on 14 billion dollars tax repayment to Ireland</a>

- macOS (Sonoma, Ventura, Sequoia): Users running older versions of macOS may experience data manipulation, DoS, privilege elevation, and cross-site scripting.

- tvOS and watchOS: These products face similar risks of DoS attacks, XSS vulnerabilities, and information disclosure.

- Safari and Xcode: Older versions could be vulnerable to spoofing and security restriction bypassing.

- visionOS: Users may be at risk of data manipulation, DoS, and information disclosure.

Also read:&nbsp;<a data-ved="2ahUKEwjInfXA09aIAxUth68BHbiIM2YQxfQBKAB6BAgIEAE" href="https://www.wionews.com/business-economy/huawei-set-to-unveil-groundbreaking-product-just-hours-after-apples-iphone-16-launch-755413" jsname="YKoRaf" ping="/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https://www.wionews.com/business-economy/huawei-set-to-unveil-groundbreaking-product-just-hours-after-apples-iphone-16-launch-755413&amp;ved=2ahUKEwjInfXA09aIAxUth68BHbiIM2YQxfQBKAB6BAgIEAE">Huawei set to unveil groundbreaking product just hours after Apple`s iPhone 16 launch</a>

The agency has advised all Apple users to install the&nbsp;latest software update on their devices and mitigate risks. It has also asked users to be vigilant about any unauthorised activity on their devices and ensure proper security measures are in place.

(With inputs from agencies)

India’s top cybersecurity agency has warned of high risk to Apple users citing several vulnerabilities it found in multiple products. Computer Emergency Response Team-India (CERT-In) issued an alert on September 19 highlighting security concerns across several Apple software platforms like iOS, iPadOS, macOS, watchOS, and visionOS.

India’s top cybersecurity agency has warned of high risk to Apple users citing several vulnerabilities it found in multiple products. Computer Emergency Response Team-India (CERT-In) issued an alert on September 19 highlighting security concerns across several Apple software platforms like iOS, iPadOS, macOS, watchOS, and visionOS. The warning came as the US tech giant rolled out Apple’s iPhone 16 series globally. According to the cybersecurity agency, following Apple products and software versions are at the highest risk. -iOS: Versions prior to 18 and 17.7 - iPadOS: Versions prior to 18 and 17.7 - macOS Sonoma: Versions prior to 14.7 - macOS Ventura: Versions prior to 13.7 - macOS Sequoia: Versions prior to 15 - tvOS: Versions prior to 18 - watchOS: Versions prior to 11 - Safari: Versions prior to 18 - Xcode: Versions prior to 16 - visionOS: Versions prior to 2 The CERT-In has warned that if vulnerabilities are not addressed, they could allow potential attackers to gain access to sensitive information on these devices, execute arbitrary code on the device, bypass critical security restrictions, cause denial-of-service (DoS) conditions, elevate privileges to gain control over the system, perform spoofing attacks and engage in cross-site scripting (XSS) attacks. The CERT has also listed potential impacts on Apple products if the high-risk loopholes are not fixed. - iOS and iPadOS: Users with iOS versions prior to 18 or 17.7 could face DoS attacks, information disclosure, and security restriction bypassing. Also read: Apple faces final ruling on 14 billion dollars tax repayment to Ireland - macOS (Sonoma, Ventura, Sequoia): Users running older versions of macOS may experience data manipulation, DoS, privilege elevation, and cross-site scripting. - tvOS and watchOS: These products face similar risks of DoS attacks, XSS vulnerabilities, and information disclosure. - Safari and Xcode: Older versions could be vulnerable to spoofing and security restriction bypassing. - visionOS: Users may be at risk of data manipulation, DoS, and information disclosure. Also read: Huawei set to unveil groundbreaking product just hours after Apple`s iPhone 16 launch The agency has advised all Apple users to install the latest software update on their devices and mitigate risks. It has also asked users to be vigilant about any unauthorised activity on their devices and ensure proper security measures are in place. (With inputs from agencies)

Is your iPhone safe? India’s cybersecurity agency flags ‘high-risk’ flaws in Apple products

A global outage in Microsoft's Windows operating system caused massive disruption in airlines, financial firms, banks, media, infrastructure, and other industries in July. CloudStrike, a cyber security company, was widely blamed, as a software update from this company had gone wrong, apparently leading to the outage.

Now, the company has been given an award for 'epic fail' this past weekend. The president of CloudStrike was in attendance to receive the Pwnie Award, which is given out annually to celebrate and mock achievements&nbsp;and failures in the security industry.

Michael Sentonas took home a Pwnie for Most Epic Fail at Def Con, the hacking community event in Las Vegas, Nevada.

The Pwnies are a well-organised award, and come at the end of a nomination process. But the organisers said the award this year for CrowdStrike was a last-minute switch, "because… how could CrowdStrike not win?,"&nbsp;TechCrunch said in a report.

While he said this was definitely not the award to be proud of receiving, Sentonas was still cool about it.

In his 'acceptance speech', Sentonas said he would take the award back to CrowdStrike headquarters in Austin, Texas, and display it in a prominent place to remind that “our goal is to protect people, and we got this wrong, and I want to make sure everybody understands these things can’t happen.”&nbsp;

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<blockquote class="twitter-tweet">
CrowdStrike accepting the <a href="https://twitter.com/PwnieAwards?ref_src=twsrc%5Etfw">@PwnieAwards</a> for “most epic fail” at <a href="https://twitter.com/defcon?ref_src=twsrc%5Etfw">@defcon</a>. Class act. <a href="https://t.co/e7IgYosHAE">pic.twitter.com/e7IgYosHAE</a>
— Dominic White 👾 (@singe) <a href="https://twitter.com/singe/status/1822324795645575263?ref_src=twsrc%5Etfw">August 10, 2024</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

&nbsp;

“I think the team was surprised when I said straightaway that I would get it...Because we got this horribly wrong, we’ve said this a number of different times, and it’s super important to own it when you do things well, it’s super important to own it when you do things horribly wrong,” he said.

<h2>What is CrowdStrike and how did it cripple global internet?</h2>

The irony is that CrowdStrike is a firm specialising in cyberattack response, threat intelligence and endpoint&nbsp;security.

The faulty update it issued on 19 July caused a worldwide outage that hit air travel, banking, broadcasting, and even power plants and transport services. It led to so-called 'blue screen of death' errors across displays using Windows operating system of Microsoft. It took a couple of days for Microsoft to fix the issue.&nbsp;

An estimated 8.5 million computer systems running on the Windows operating system crashed or went into freeze mode, with the business cost of the outage thought to be at least $10 billion.

(With inputs from agencies)

A global outage in Microsoft's Windows operating system caused massive disruption in airlines, financial firms, banks, media, infrastructure, and other industries in July.

A global outage in Microsoft's Windows operating system caused massive disruption in airlines, financial firms, banks, media, infrastructure, and other industries in July. CloudStrike, a cyber security company, was widely blamed, as a software update from this company had gone wrong, apparently leading to the outage. Now, the company has been given an award for 'epic fail' this past weekend. The president of CloudStrike was in attendance to receive the Pwnie Award, which is given out annually to celebrate and mock achievements and failures in the security industry. Michael Sentonas took home a Pwnie for Most Epic Fail at Def Con, the hacking community event in Las Vegas, Nevada. The Pwnies are a well-organised award, and come at the end of a nomination process. But the organisers said the award this year for CrowdStrike was a last-minute switch, "because… how could CrowdStrike not win?," TechCrunch said in a report. While he said this was definitely not the award to be proud of receiving, Sentonas was still cool about it. In his 'acceptance speech', Sentonas said he would take the award back to CrowdStrike headquarters in Austin, Texas, and display it in a prominent place to remind that “our goal is to protect people, and we got this wrong, and I want to make sure everybody understands these things can’t happen.” CrowdStrike accepting the @PwnieAwards for “most epic fail” at @defcon. Class act. pic.twitter.com/e7IgYosHAE — Dominic White 👾 (@singe) August 10, 2024 × “I think the team was surprised when I said straightaway that I would get it...Because we got this horribly wrong, we’ve said this a number of different times, and it’s super important to own it when you do things well, it’s super important to own it when you do things horribly wrong,” he said. What is CrowdStrike and how did it cripple global internet? The irony is that CrowdStrike is a firm specialising in cyberattack response, threat intelligence and endpoint security. The faulty update it issued on 19 July caused a worldwide outage that hit air travel, banking, broadcasting, and even power plants and transport services. It led to so-called 'blue screen of death' errors across displays using Windows operating system of Microsoft. It took a couple of days for Microsoft to fix the issue. An estimated 8.5 million computer systems running on the Windows operating system crashed or went into freeze mode, with the business cost of the outage thought to be at least $10 billion. (With inputs from agencies)

CrowdStrike, company behind Microsoft global outage, accepts award for ‘epic fail’ - Watch

A team of researchers in Scotland is hoping to revolutionize data security by developing a “potentially unhackable” national quantum network. Watch in for more details!

Scotland develops 'near unhackable' Quantum network to boost UK cybersecurity

A massive IT outage Friday caused long delays, cancellations, and check-in problems at airports around the world, hitting not only airlines but various other industries.

The disruption, which was blamed on a glitch in Microsoft software, impacted a vast network of services and caused considerable chaos for travellers.

More than 110,000 commercial flights were due to operate on the day; however, by this afternoon already, 2,691 flights had been cancelled worldwide, according to the aviation analytics firm Cirium.

Among the airports affected was Edinburgh, where boarding pass scanners said that a "server is offline message" appeared, with passengers advised to check their flight status online before heading to the airport.

In response to the disruption, many airports and airlines adopted manual check-in processes.

Hong Kong International Airport, however, reported that even as the Microsoft outage was affecting several carriers, flight operations were unaffected. Singapore's Changi Airport also had to result in manual check-ins.

The aviation sector, most sensitive to time and coordination, took a hit as even small delays had flights across the globe out of schedule.

Microsoft said that some of its Office 365 apps and services could experience issues because of a "configuration change in part of our Azure-backed workloads," the company tweeted.

Cybersecurity firm CrowdStrike confirmed it was working with clients affected by the issue caused by a flaw in a Windows update, which contributed to the far-flung glitches.

The blackout was hence very provoking to passengers. At Madrid-Barajas, however, travellers were greeted by long queues and no information, hence a confused wait.

Ana Rodriguez, a tourist from Mexico, also described the chaotic scene of the passengers waiting in different lines only to be told where to check in later.

In New Delhi, resorts to IT failures were made, with airlines issuing handwritten boarding passes and also displaying flight information on whiteboards, while passengers at Baltimore Airport had to wait for long as Spirit Airlines employees processed tickets from paper manifests by hand.

The Federal Aviation Administration reported that major airlines such as American Airlines, United Airlines, and Delta issued ground stops in the United States in the early hours of the day due to communication problems.

While American Airlines later resumed its operations, Delta still delayed or even cancelled flights around Atlanta, Detroit, Minneapolis, and Salt Lake City.

Even with all this, US Transportation Secretary Pete Buttigieg was optimistic that transportation could return to normal on Saturday.

In Europe, some carriers like Spanish airline Iberia did not cancel flights, while there were major disruptions at Amsterdam's Schiphol and Berlin airports.

Questions also remain over passenger compensation. In Europe, carriers usually have to compensate travellers when delays exceed three hours, but the airline could argue this outage constitutes an "extraordinary circumstance" under EU statute.

US carriers are not legally bound to compensate for delays, and it is not clear whether an IT issue will be considered an "airline-caused" delay.

(With inputs from Reuters)

A massive IT outage Friday caused long delays, cancellations, and check-in problems at airports around the world, hitting not only airlines but various other industries.

A massive IT outage Friday caused long delays, cancellations, and check-in problems at airports around the world, hitting not only airlines but various other industries. The disruption, which was blamed on a glitch in Microsoft software, impacted a vast network of services and caused considerable chaos for travellers. More than 110,000 commercial flights were due to operate on the day; however, by this afternoon already, 2,691 flights had been cancelled worldwide, according to the aviation analytics firm Cirium. Among the airports affected was Edinburgh, where boarding pass scanners said that a "server is offline message" appeared, with passengers advised to check their flight status online before heading to the airport. In response to the disruption, many airports and airlines adopted manual check-in processes. Hong Kong International Airport, however, reported that even as the Microsoft outage was affecting several carriers, flight operations were unaffected. Singapore's Changi Airport also had to result in manual check-ins. The aviation sector, most sensitive to time and coordination, took a hit as even small delays had flights across the globe out of schedule. Microsoft said that some of its Office 365 apps and services could experience issues because of a "configuration change in part of our Azure-backed workloads," the company tweeted. Cybersecurity firm CrowdStrike confirmed it was working with clients affected by the issue caused by a flaw in a Windows update, which contributed to the far-flung glitches. The blackout was hence very provoking to passengers. At Madrid-Barajas, however, travellers were greeted by long queues and no information, hence a confused wait. Ana Rodriguez, a tourist from Mexico, also described the chaotic scene of the passengers waiting in different lines only to be told where to check in later. In New Delhi, resorts to IT failures were made, with airlines issuing handwritten boarding passes and also displaying flight information on whiteboards, while passengers at Baltimore Airport had to wait for long as Spirit Airlines employees processed tickets from paper manifests by hand. The Federal Aviation Administration reported that major airlines such as American Airlines, United Airlines, and Delta issued ground stops in the United States in the early hours of the day due to communication problems. While American Airlines later resumed its operations, Delta still delayed or even cancelled flights around Atlanta, Detroit, Minneapolis, and Salt Lake City. Even with all this, US Transportation Secretary Pete Buttigieg was optimistic that transportation could return to normal on Saturday. In Europe, some carriers like Spanish airline Iberia did not cancel flights, while there were major disruptions at Amsterdam's Schiphol and Berlin airports. Questions also remain over passenger compensation. In Europe, carriers usually have to compensate travellers when delays exceed three hours, but the airline could argue this outage constitutes an "extraordinary circumstance" under EU statute. US carriers are not legally bound to compensate for delays, and it is not clear whether an IT issue will be considered an "airline-caused" delay. (With inputs from Reuters)

Global IT outage causes widespread disruptions across airports

Wall Street's main indexes plummeted Friday on heavy selling of technology shares and mixed earnings.

The losses were compounded by a far-reaching cyber outage that hit shares of cybersecurity company CrowdStrike hard, off 11.2 per cent to the lowest in more than two months.

The CrowdStrike outage affected its product update for Microsoft's Windows Operating System, paralysing activities across several industries.

Major US airlines were ordering ground stops due to communication problems, while both the Euronext exchange and London Stock Exchange Group's Workspace news and data platform were hit by issues.

The LSEG later said its data and services were back online, but the initial disruptions had already dented investor sentiment.

Microsoft also slid 0.7 per cent, to over a one-month low, and extended its losses for a fourth consecutive day.

Microsoft's stock drop contributed to an overall rout in tech stocks. "Any hint of bad news because they're so priced to perfection is going to hurt these stocks," said Phil Blancato, CEO of Ladenburg Thalmann Asset Management.

Even so, Blancato cites CrowdStrike and Microsoft as two great long-term investment opportunities.

The latest turmoil comes after Wall Street experienced two bruising sessions, as investors grappled with second-quarter earnings reports and turned averse to the mega-caps that had broadly led the equity rally in 2024.

Big technology stocks moved in both directions, with Nvidia and Amazon.com down 1 per cent and 0.5 per cent, respectively, and Apple and Alphabet up 1 per cent apiece.

Chip stocks were another mixed bag, with U.S.-listed shares of Taiwan Semiconductor Manufacturing down nearly 1.5 per cent, and Arm Holdings rose 3 per cent. The Nasdaq Composite has dropped 3.5 per cent over the past two sessions, while the S&amp;P 500 has lost 2.1 per cent, putting the indexes on pace for weekly losses.

The VIX, Wall Street's so-called "fear gauge," hit its highest level since early May, reflecting investor unease.

Investors now turn to comments from Federal Reserve officials John Williams and Raphael Bostic for possible clues regarding future monetary policy. Markets are pricing in a 25-basis-point interest rate cut by September and two cuts by year-end.

The Dow Jones Industrial Average slid 179.14 points, or 0.44 per cent, to 40,485.88; the S&amp;P 500 dropped 2.69 points, or 0.05 per cent, to 5,541.90; and the Nasdaq Composite slipped 18.08 points, or 0.10 per cent, to 17,853.15 at 9:48 a.m. ET.

In contrast, other cybersecurity shares rose, with Palo Alto Networks 1.5 per cent higher and SentinelOne jumping 6.4 per cent. Eli Lilly jumped 2.6 per cent on news that China approved its weight-loss drug tripeptide.

Intuitive Surgical surged 8 per cent after reporting second-quarter earnings well above expectations. Those updates helped the S&amp;P 500 healthcare index lead sectoral gainers.

On the other hand, Netflix fell 1 per cent in choppy trading following the streaming service's forecast of third-quarter subscriber additions below expectations and lower than a year earlier.

Oilfield services provider SLB rose 1.3 per cent following strong second-quarter profits.

Based on the most recent reports, S&amp;P 500 corporations have posted an earnings beat rate of 85 per cent and an overall growth rate of 11.1 per cent.

However, market breadth was still soft. Declining issues outnumbered advancers during trading on both the NYSE and the Nasdaq.

(With inputs from Reuters)

Wall Street's main indexes plummeted Friday on heavy selling of technology shares and mixed earnings. The losses were compounded by a far-reaching cyber outage that hit shares of cybersecurity company CrowdStrike hard, off 11.

Wall Street's main indexes plummeted Friday on heavy selling of technology shares and mixed earnings. The losses were compounded by a far-reaching cyber outage that hit shares of cybersecurity company CrowdStrike hard, off 11.2 per cent to the lowest in more than two months. The CrowdStrike outage affected its product update for Microsoft's Windows Operating System, paralysing activities across several industries. Major US airlines were ordering ground stops due to communication problems, while both the Euronext exchange and London Stock Exchange Group's Workspace news and data platform were hit by issues. The LSEG later said its data and services were back online, but the initial disruptions had already dented investor sentiment. Microsoft also slid 0.7 per cent, to over a one-month low, and extended its losses for a fourth consecutive day. Microsoft's stock drop contributed to an overall rout in tech stocks. "Any hint of bad news because they're so priced to perfection is going to hurt these stocks," said Phil Blancato, CEO of Ladenburg Thalmann Asset Management. Even so, Blancato cites CrowdStrike and Microsoft as two great long-term investment opportunities. The latest turmoil comes after Wall Street experienced two bruising sessions, as investors grappled with second-quarter earnings reports and turned averse to the mega-caps that had broadly led the equity rally in 2024. Big technology stocks moved in both directions, with Nvidia and Amazon.com down 1 per cent and 0.5 per cent, respectively, and Apple and Alphabet up 1 per cent apiece. Chip stocks were another mixed bag, with U.S.-listed shares of Taiwan Semiconductor Manufacturing down nearly 1.5 per cent, and Arm Holdings rose 3 per cent. The Nasdaq Composite has dropped 3.5 per cent over the past two sessions, while the S&P 500 has lost 2.1 per cent, putting the indexes on pace for weekly losses. The VIX, Wall Street's so-called "fear gauge," hit its highest level since early May, reflecting investor unease. Investors now turn to comments from Federal Reserve officials John Williams and Raphael Bostic for possible clues regarding future monetary policy. Markets are pricing in a 25-basis-point interest rate cut by September and two cuts by year-end. The Dow Jones Industrial Average slid 179.14 points, or 0.44 per cent, to 40,485.88; the S&P 500 dropped 2.69 points, or 0.05 per cent, to 5,541.90; and the Nasdaq Composite slipped 18.08 points, or 0.10 per cent, to 17,853.15 at 9:48 a.m. ET. In contrast, other cybersecurity shares rose, with Palo Alto Networks 1.5 per cent higher and SentinelOne jumping 6.4 per cent. Eli Lilly jumped 2.6 per cent on news that China approved its weight-loss drug tripeptide. Intuitive Surgical surged 8 per cent after reporting second-quarter earnings well above expectations. Those updates helped the S&P 500 healthcare index lead sectoral gainers. On the other hand, Netflix fell 1 per cent in choppy trading following the streaming service's forecast of third-quarter subscriber additions below expectations and lower than a year earlier. Oilfield services provider SLB rose 1.3 per cent following strong second-quarter profits. Based on the most recent reports, S&P 500 corporations have posted an earnings beat rate of 85 per cent and an overall growth rate of 11.1 per cent. However, market breadth was still soft. Declining issues outnumbered advancers during trading on both the NYSE and the Nasdaq. (With inputs from Reuters)

Tech sell-off deepens as cybersecurity outage hits Wall Street

Let's get you a flavor what's happening in the world of technology: - Cybersecurity report reveals rise in social media investment scams in India. - Google mandates disclosure for AI-altered election ads to fight misinformation. Watch in for more details!

Cybersecurity report reveals rise in social media investment scams in India

Keeping fans and players safe will be a mammoth task for Germany as it hosts Euro 2024 this summer in a tense global climate with major conflicts in Ukraine and the Middle East.

From hooligans to potential terrorist attacks and even cyberattacks, the European Championship organisers will be looking to ward off a range of threats.

Security forces will be charged with protecting some 2.7 million fans, 24 team base camps spread across the country and ten stadiums where 51 matches will be played between June 14 and July 14.

Designated fan zones are also expected to attract around 12 million visitors.

"From the outset, security has been our top priority," tournament director Philipp Lahm told AFP.

ALSO READ:&nbsp;<a href="https://www.wionews.com/sports/bundesliga-bayer-leverkusen-maintain-season-long-unbeaten-run-with-thumping-win-over-bochum-720724">Bundesliga: Bayer Leverkusen maintain season-long unbeaten run with thumping win over Bochum</a>

In an unprecedented move, Germany has invited some 300 security experts from all nations playing in the tournament to take part in a monitoring project at the International Police Cooperation Centre (IPCC) in the western city of Neuss.

Alongside officials from Germany, Europol and European football body UEFA, they will take turns to monitor the situation on the ground, gathering during the tournament in a huge 500-square-metre (5,382-square-foot) conference room equipped with 129 computers and a 40-square-metre screen, AFP saw on a visit to the facility.

<h2>- No leave for police -</h2>

"Each country knows its troublemakers better than any other, and the foreign experts present in Neuss will be able to identify them more quickly," Oliver Strudthoff, director of the IPCC, told AFP.

"The size of the delegations will depend on the number of fans and how potentially dangerous they are. England, for example, will have many more representatives than Switzerland," he said.

At the matches themselves, all hands will be on deck -- police have been forbidden from taking leave during the tournament.

Germany will also introduce security controls on all of its nine borders.

"On trains and in stations, the federal police will be visibly stepping up their presence," said a spokesman for the German interior ministry. The same applies to airports.

French gendarmes will support the German police by taking part in joint rail patrols on routes to and from France and at matches involving the French team.

The British government has said that more than 1,600 English and Welsh supporters who are hit with stadium bans because of previous violent behaviour, will be banned from travelling to Germany during the tournament.

<h3>- Triple perimeters -</h3>

On top of the standard measures, German Interior Minister Nancy Faeser has said the Ukrainian national team will be subject to enhanced security.

Between 800 and 1,300 police will be deployed around the stadiums at each match, depending on the teams playing.

In a bid to prevent anyone from entering a match with weapons or explosives, three security perimeters will be set up around each stadium.

Cars will be checked at the first barrier, while fans will have their bags searched at the second, before scanning their tickets at the third.

The fan zones will also present a security challenge, especially the largest one at Berlin's Brandenburg Gate which is set to welcome tens of thousands of visitors for every match.

These "soft targets" are more vulnerable because "it's easier for perpetrators to infiltrate (them) and take action", said Johannes Saal, a security expert at the University of Lucerne.

The German army will also monitor the sky from the National Air Security Center, located some 70 kilometres (44 miles) from the IPCC.

The use of drones will be closely monitored, with flight restriction zones.

"Major sporting events are always potential targets for terrorist attacks," said Saal, describing the security situation as "very tense" in the context of the war in Gaza and the ever-present threat of Islamist extremism.

Keeping fans and players safe will be a mammoth task for Germany as it hosts Euro 2024 this summer in a tense global climate with major conflicts in Ukraine and the Middle East.

Keeping fans and players safe will be a mammoth task for Germany as it hosts Euro 2024 this summer in a tense global climate with major conflicts in Ukraine and the Middle East. From hooligans to potential terrorist attacks and even cyberattacks, the European Championship organisers will be looking to ward off a range of threats. Security forces will be charged with protecting some 2.7 million fans, 24 team base camps spread across the country and ten stadiums where 51 matches will be played between June 14 and July 14. Designated fan zones are also expected to attract around 12 million visitors. "From the outset, security has been our top priority," tournament director Philipp Lahm told AFP. ALSO READ: Bundesliga: Bayer Leverkusen maintain season-long unbeaten run with thumping win over Bochum In an unprecedented move, Germany has invited some 300 security experts from all nations playing in the tournament to take part in a monitoring project at the International Police Cooperation Centre (IPCC) in the western city of Neuss. Alongside officials from Germany, Europol and European football body UEFA, they will take turns to monitor the situation on the ground, gathering during the tournament in a huge 500-square-metre (5,382-square-foot) conference room equipped with 129 computers and a 40-square-metre screen, AFP saw on a visit to the facility. - No leave for police - "Each country knows its troublemakers better than any other, and the foreign experts present in Neuss will be able to identify them more quickly," Oliver Strudthoff, director of the IPCC, told AFP. "The size of the delegations will depend on the number of fans and how potentially dangerous they are. England, for example, will have many more representatives than Switzerland," he said. At the matches themselves, all hands will be on deck -- police have been forbidden from taking leave during the tournament. Germany will also introduce security controls on all of its nine borders. "On trains and in stations, the federal police will be visibly stepping up their presence," said a spokesman for the German interior ministry. The same applies to airports. French gendarmes will support the German police by taking part in joint rail patrols on routes to and from France and at matches involving the French team. The British government has said that more than 1,600 English and Welsh supporters who are hit with stadium bans because of previous violent behaviour, will be banned from travelling to Germany during the tournament. - Triple perimeters - On top of the standard measures, German Interior Minister Nancy Faeser has said the Ukrainian national team will be subject to enhanced security. Between 800 and 1,300 police will be deployed around the stadiums at each match, depending on the teams playing. In a bid to prevent anyone from entering a match with weapons or explosives, three security perimeters will be set up around each stadium. Cars will be checked at the first barrier, while fans will have their bags searched at the second, before scanning their tickets at the third. The fan zones will also present a security challenge, especially the largest one at Berlin's Brandenburg Gate which is set to welcome tens of thousands of visitors for every match. These "soft targets" are more vulnerable because "it's easier for perpetrators to infiltrate (them) and take action", said Johannes Saal, a security expert at the University of Lucerne. The German army will also monitor the sky from the National Air Security Center, located some 70 kilometres (44 miles) from the IPCC. The use of drones will be closely monitored, with flight restriction zones. "Major sporting events are always potential targets for terrorist attacks," said Saal, describing the security situation as "very tense" in the context of the war in Gaza and the ever-present threat of Islamist extremism.

Germany ready to combat massive security challenges at Euro 2024, says tournament director Philipp Lahm

Paris 2024 is getting ready to face an unprecedented challenge in terms of cybersecurity, with organisers expecting a huge pressure on the Games this summer. Organised crime, activists and states will be the main threats during the July 26-Aug. 11&nbsp;Olympics&nbsp;and the Aug. 28-Sept. 8 Paralympics. Paris 2024, who have been working hand in hand with the French national agency for information security (ANSSI), and cybersecurity companies Cisco and Eviden are looking to limit the impact of cyber attacks.

"We can't prevent all the attacks, there will not be Games without attacks but we have to limit their impacts on the&nbsp;Olympics," Vincent Strubel, the director general of ANSSI, told reporters. "There are 500 sites, competition venues and local collectives, and we've tested them all."

Strubel is confident that Paris 2024, who will operate from a cybersecurity operation centre in a location that is being kept secret, will be ready. "The Games are facing an unprecedented&nbsp;level of threat, but we've also done an unprecedented amount of preparation work so I think we're a step ahead of the attackers," he said.

To make sure they are in the game, Paris 2024 have been paying "ethical hackers" to stress test their systems and have been using artificial intelligence to help them do a triage of the threats.

"AI helps us make the difference between a nuisance and a catastrophe," said Franz Regul, managing director for IT at Paris 2024. "We're expecting the number of cyber security event to be multiplied by 10 compared to Tokyo (in 2021)." "In terms of cybersecurity, four years is the equivalent of a century," Eric Greffier, head of partnerships at CISCO, explained.

Also read:&nbsp;<a href="https://www.wionews.com/sports/world-athletics-relays-indian-mens-and-womens-4x400m-relay-teams-seal-paris-olympics-berth-718385">World Athletics Relays: Indian men’s and women’s 4x400m relay teams seal Paris Olympics berth</a>

In 2018, a computer virus dubbed "Olympic Destroyer" was used in an attack on the opening ceremony of the Pyeongchang Winter Games.

While Moscow denied any involvement, the U.S. Justice Department in 2020 said it has indicted six Russian intelligence agency hackers for a four-year long hacking spree that included attacks against the Pyeongchang Games. "We would like to have one opponent but we're looking into everything and everyone. Naming the potential attackers is not our role, it is the role of the state," Strubel said.

Last month, French president Emmanuel Macron said he had no doubt Russia would malevolently target the Paris&nbsp;Olympics. The Games will take place amid a complex global backdrop, including Russia's war in Ukraine and Israel's conflict with Hamas, which has been designated a terrorist organization by the United States and the European Union.

Paris 2024 is getting ready to face an unprecedented challenge in terms of cybersecurity, with organisers expecting a huge pressure on the Games this summer. Organised crime, activists and states will be the main threats during the July 26-Aug.

Paris 2024 is getting ready to face an unprecedented challenge in terms of cybersecurity, with organisers expecting a huge pressure on the Games this summer. Organised crime, activists and states will be the main threats during the July 26-Aug. 11 Olympics and the Aug. 28-Sept. 8 Paralympics. Paris 2024, who have been working hand in hand with the French national agency for information security (ANSSI), and cybersecurity companies Cisco and Eviden are looking to limit the impact of cyber attacks. "We can't prevent all the attacks, there will not be Games without attacks but we have to limit their impacts on the Olympics," Vincent Strubel, the director general of ANSSI, told reporters. "There are 500 sites, competition venues and local collectives, and we've tested them all." Strubel is confident that Paris 2024, who will operate from a cybersecurity operation centre in a location that is being kept secret, will be ready. "The Games are facing an unprecedented level of threat, but we've also done an unprecedented amount of preparation work so I think we're a step ahead of the attackers," he said. To make sure they are in the game, Paris 2024 have been paying "ethical hackers" to stress test their systems and have been using artificial intelligence to help them do a triage of the threats. "AI helps us make the difference between a nuisance and a catastrophe," said Franz Regul, managing director for IT at Paris 2024. "We're expecting the number of cyber security event to be multiplied by 10 compared to Tokyo (in 2021)." "In terms of cybersecurity, four years is the equivalent of a century," Eric Greffier, head of partnerships at CISCO, explained. Also read: World Athletics Relays: Indian men’s and women’s 4x400m relay teams seal Paris Olympics berth In 2018, a computer virus dubbed "Olympic Destroyer" was used in an attack on the opening ceremony of the Pyeongchang Winter Games. While Moscow denied any involvement, the U.S. Justice Department in 2020 said it has indicted six Russian intelligence agency hackers for a four-year long hacking spree that included attacks against the Pyeongchang Games. "We would like to have one opponent but we're looking into everything and everyone. Naming the potential attackers is not our role, it is the role of the state," Strubel said. Last month, French president Emmanuel Macron said he had no doubt Russia would malevolently target the Paris Olympics. The Games will take place amid a complex global backdrop, including Russia's war in Ukraine and Israel's conflict with Hamas, which has been designated a terrorist organization by the United States and the European Union.

Olympics: Paris 2024 getting ready to face an unprecedented challenge in terms of cybersecurity

As our reliance on digital technology continues to grow, so does the importance of cybersecurity. It's no longer just about protecting data; it's about making sure the foundation of our interconnected world remains safe. Cyber threats are diverse and continually changing, requiring a variety of skills to effectively combat them. This means there is a need to better recognize the need for equally diverse perspectives in the task forces that battle these threats.

Over the course of my career, I have witnessed women peers bringing unique perspectives and problem-solving skills, especially when it comes to security. They can contribute significantly to creating a more thorough, adaptable and responsible cybersecurity strategy for individuals and organizations. However, despite the progress being made, there has been a historical lack of women in deeptech, making their inclusion in cybersecurity an important step toward a safer digital future.

The underrepresentation challenge

Taking a closer look at the cybersecurity industry shows a clear problem—a gender gap that persists despite progress in other professions. Statistics indicate that from 2018 to 2023, the number of women in cybersecurity jobs in India increased by over 10%. This was a growth from around 11% to 22% due to the efforts of initiatives like CyberShikshaa and corporate initiatives towards Inclusion and Diversity that brought in diverse workforce into the organizations. &nbsp;While this is an encouraging trend, there is still a huge gap to cover and there needs to be focused effort to bridge this gap both in academics and industry.

Navigating professional challenges

Despite the efforts made by organizations to promote gender equality, women continue to face challenges in the workplace ranging from workplace discrimination, lack of confidence and even imposter syndrome. Unconscious biases and gender stereotypes in the industry hinder the professional growth of women, highlighting the need for a change in organizational culture. It is important to create a supportive environment that empowers women to embrace their skills and build resilience.

Building a supportive network

Mentorship programs and networking communities are crucial for career development, especially for women in tech who may not see as many female role models. Additionally, encouraging a culture of support and collaboration within the industry ensures knowledge-sharing and skill development. These initiatives can not only bridge the gender gap but also create an environment where women feel empowered to thrive, guided by experienced mentors.

Promoting diversity and inclusivity

Advocating for workplace initiatives that promote equal opportunity is essential. Collaboration and diverse thinking are crucial in developing innovative and effective cybersecurity strategies, necessitating a diverse workforce. Activities like hackathons and coding quests can bring teams together and help women showcase their skills first-hand. Unbiased recruitment through anonymous skill-based hiring can also help bring more diversity into the organization. Strategies for skill development and recruitment, with a focus on fostering diversity, enrich the talent pool and contribute to building a more resilient cybersecurity workforce.

The way ahead

Empowering women in cybersecurity is a crucial journey for the industry. Recognizing the unique challenges women face, fostering a supportive network, and challenging gender norms pave the way for a more inclusive digital future.&nbsp;

As cybersecurity threats become more complex, embracing diverse perspectives is vital. The call to action is clear—organizations, industry leaders, and professionals must unite to build a cybersecurity landscape that thrives on diversity, ensuring a safer and more resilient digital world for all.

As our reliance on digital technology continues to grow, so does the importance of cybersecurity. It's no longer just about protecting data; it's about making sure the foundation of our interconnected world remains safe.

As our reliance on digital technology continues to grow, so does the importance of cybersecurity. It's no longer just about protecting data; it's about making sure the foundation of our interconnected world remains safe. Cyber threats are diverse and continually changing, requiring a variety of skills to effectively combat them. This means there is a need to better recognize the need for equally diverse perspectives in the task forces that battle these threats. Over the course of my career, I have witnessed women peers bringing unique perspectives and problem-solving skills, especially when it comes to security. They can contribute significantly to creating a more thorough, adaptable and responsible cybersecurity strategy for individuals and organizations. However, despite the progress being made, there has been a historical lack of women in deeptech, making their inclusion in cybersecurity an important step toward a safer digital future. The underrepresentation challenge Taking a closer look at the cybersecurity industry shows a clear problem—a gender gap that persists despite progress in other professions. Statistics indicate that from 2018 to 2023, the number of women in cybersecurity jobs in India increased by over 10%. This was a growth from around 11% to 22% due to the efforts of initiatives like CyberShikshaa and corporate initiatives towards Inclusion and Diversity that brought in diverse workforce into the organizations. While this is an encouraging trend, there is still a huge gap to cover and there needs to be focused effort to bridge this gap both in academics and industry. Navigating professional challenges Despite the efforts made by organizations to promote gender equality, women continue to face challenges in the workplace ranging from workplace discrimination, lack of confidence and even imposter syndrome. Unconscious biases and gender stereotypes in the industry hinder the professional growth of women, highlighting the need for a change in organizational culture. It is important to create a supportive environment that empowers women to embrace their skills and build resilience. Building a supportive network Mentorship programs and networking communities are crucial for career development, especially for women in tech who may not see as many female role models. Additionally, encouraging a culture of support and collaboration within the industry ensures knowledge-sharing and skill development. These initiatives can not only bridge the gender gap but also create an environment where women feel empowered to thrive, guided by experienced mentors. Promoting diversity and inclusivity Advocating for workplace initiatives that promote equal opportunity is essential. Collaboration and diverse thinking are crucial in developing innovative and effective cybersecurity strategies, necessitating a diverse workforce. Activities like hackathons and coding quests can bring teams together and help women showcase their skills first-hand. Unbiased recruitment through anonymous skill-based hiring can also help bring more diversity into the organization. Strategies for skill development and recruitment, with a focus on fostering diversity, enrich the talent pool and contribute to building a more resilient cybersecurity workforce. The way ahead Empowering women in cybersecurity is a crucial journey for the industry. Recognizing the unique challenges women face, fostering a supportive network, and challenging gender norms pave the way for a more inclusive digital future. As cybersecurity threats become more complex, embracing diverse perspectives is vital. The call to action is clear—organizations, industry leaders, and professionals must unite to build a cybersecurity landscape that thrives on diversity, ensuring a safer and more resilient digital world for all.

Expert voice | Empowering women in cybersecurity: Navigating challenges & breaking barriers

China plans to improve data security and control major database risks by 2026. China's Ministry of industry and information technology has now called for heightened data security measures and anti-hacking protections for domestic companies. Watch to know more!

China to improve anti-hacking protections by 2026

It is often believed that China viewed the United States as the number one cyber threat. But now according to a Chinese security expert, it's not the United States but India has become a major source of cyber security threat in the country.

Report: The biggest cyber security threat for China is India

Israel has witnessed a significant surge in cyberattacks since the war outbreak. According to data from check point software technologies, a global cybersecurity company, there has been an 18% increase in cyberattacks within Israel.

Cybersecurity firm check point shines amid Israel's security concerns

In a recent series of cyber incidents, the Philippines' weak cybersecurity practices have left government websites susceptible to breaches, endangering the security of millions of citizens.

Hackers targeted the Philippine Health Insurance Corporation (PhilHealth) in a breach affecting millions of individuals, including overseas Filipino workers, reported the South China Morning Post.

The breach resulted from the state insurer's refusal to pay a $300,000 ransom. Additionally, the House of Representatives' homepage was defaced, underscoring the government's vulnerabilities in the digital realm.

A hacker known as DiabloX Phantom claimed to have infiltrated five major government agencies, downloading significant amounts of data. His intent was to reveal the government's cybersecurity shortcomings.&nbsp;

<a href="https://www.wionews.com/world/chinese-spies-are-trying-to-steal-uks-nuclear-submarine-secrets-mi5-chief-649568">Also read |&nbsp;Chinese spies are trying to steal UK's nuclear submarine secrets: MI5 chief</a>

<h2>Government agency infiltrations and tactics</h2>

The hacker accessed the servers of the Philippine Statistics Authority, responsible for national identification cards, and the Philippine National Police's forensics database containing sensitive case files.

Additionally, he targeted the websites of the Department of Science and Technology, the Technical Education and Skills Development Authority (Tesda), and Clark International Airport.

His methods included exploiting weak passwords, sending malware via email, utilising open subdomains, and exploiting vulnerabilities left by other hackers.

DiabloX Phantom, as reported by the South China Morning Post, said that he did not intend to sell the data he obtained but aimed to draw attention to the government's cybersecurity vulnerabilities.

Also watch |&nbsp;Over 80% Indian companies hit with cyber attacks last year: Report

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/over-80-indian-companies-hit-with-cyber-attacks-last-year-report-632769/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

He sought a response from the government to address these issues. Philippine cybersecurity experts independently verified his claims. While there is no single entity responsible for the various breaches, some hackers aim to expose system vulnerabilities, seek recognition for their skills, or engage in cyber activities for amusement.

<h2>Historical cybersecurity lapses</h2>

The recent breaches in the Philippines are part of a pattern of cybersecurity incidents.

The "Comelec leak" in 2016 exposed personal data from up to 55 million Filipino voters. Despite the scale of this breach, there were no prosecutions or repercussions.

Weak passwords, inadequate employee training, and insufficient monitoring create vulnerabilities that need urgent attention. Addressing these issues is crucial to safeguard sensitive data and protect the privacy of millions of individuals.

The recent attempt to register SIM cards encountered challenges when criminal syndicates offered fake pre-registered SIM cards, undermining the government's efforts to combat mobile phone scams and crimes.

Registered SIM card users reported receiving scam texts. Law enforcement efforts led to arrests for selling fake "registered" SIM cards and the discovery of a large number of such cards in a raid on a gambling hub.&nbsp;

WATCH WION LIVE HERE:

<iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe>

In a recent series of cyber incidents, the Philippines' weak cybersecurity practices have left government websites susceptible to breaches, endangering the security of millions of citizens.

In a recent series of cyber incidents, the Philippines' weak cybersecurity practices have left government websites susceptible to breaches, endangering the security of millions of citizens. Hackers targeted the Philippine Health Insurance Corporation (PhilHealth) in a breach affecting millions of individuals, including overseas Filipino workers, reported the South China Morning Post. The breach resulted from the state insurer's refusal to pay a $300,000 ransom. Additionally, the House of Representatives' homepage was defaced, underscoring the government's vulnerabilities in the digital realm. A hacker known as DiabloX Phantom claimed to have infiltrated five major government agencies, downloading significant amounts of data. His intent was to reveal the government's cybersecurity shortcomings. Also read | Chinese spies are trying to steal UK's nuclear submarine secrets: MI5 chief Government agency infiltrations and tactics The hacker accessed the servers of the Philippine Statistics Authority, responsible for national identification cards, and the Philippine National Police's forensics database containing sensitive case files. Additionally, he targeted the websites of the Department of Science and Technology, the Technical Education and Skills Development Authority (Tesda), and Clark International Airport. His methods included exploiting weak passwords, sending malware via email, utilising open subdomains, and exploiting vulnerabilities left by other hackers. DiabloX Phantom, as reported by the South China Morning Post, said that he did not intend to sell the data he obtained but aimed to draw attention to the government's cybersecurity vulnerabilities. Also watch | Over 80% Indian companies hit with cyber attacks last year: Report He sought a response from the government to address these issues. Philippine cybersecurity experts independently verified his claims. While there is no single entity responsible for the various breaches, some hackers aim to expose system vulnerabilities, seek recognition for their skills, or engage in cyber activities for amusement. Historical cybersecurity lapses The recent breaches in the Philippines are part of a pattern of cybersecurity incidents. The "Comelec leak" in 2016 exposed personal data from up to 55 million Filipino voters. Despite the scale of this breach, there were no prosecutions or repercussions. Weak passwords, inadequate employee training, and insufficient monitoring create vulnerabilities that need urgent attention. Addressing these issues is crucial to safeguard sensitive data and protect the privacy of millions of individuals. The recent attempt to register SIM cards encountered challenges when criminal syndicates offered fake pre-registered SIM cards, undermining the government's efforts to combat mobile phone scams and crimes. Registered SIM card users reported receiving scam texts. Law enforcement efforts led to arrests for selling fake "registered" SIM cards and the discovery of a large number of such cards in a raid on a gambling hub. WATCH WION LIVE HERE:

Philippines faces cybersecurity crisis as hackers expose state secrets, personal data

Cybersecurity is the practice of protecting&nbsp;computer systems, networks, devices, and programs against cyber attacks of any kind and also being able to recover them.&nbsp;Amid an astronomical increase in the use of digital technologies in day-to-day life, cybersecurity has become significant.&nbsp;

In India, the government is keen towards digitalisation, which is crucial for the nation's growth and development, as it wants to make services available to citizens electronically through improved online infrastructure.&nbsp;

The government aims at increasing internet connectivity to digitalise the economy as the initiative includes plans to connect rural areas with high-speed internet networks.&nbsp;

However, at a time when the country is inclined towards going digital, the nation must understand the safety and security around it.&nbsp;

Also read:&nbsp;<a href="https://www.wionews.com/technology/working-with-robots-leads-to-social-loafing-find-scientists-heres-what-it-means-648347">Working with robots makes people lazy. Here's what 'social loafing' means</a>&nbsp;

WION spoke to Maninder Bharadwaj, who is the Global Head of Cybersecurity and Risk Management, at Tech Mahindra.&nbsp;

Bharadwaj explained that cyber threats are constantly evolving, exposing vulnerabilities in the digital infrastructure and impacting individuals and organisations across diverse sectors and industries.&nbsp;

"With the rise of new technologies like AI, cybercriminals have been able to create more advanced ways to launch attacks," he said.&nbsp;

Also read:&nbsp;<a href="https://www.wionews.com/technology/elon-musk-may-take-x-out-of-europe-to-dodge-anti-fake-news-eu-regulation-report-648596">Elon Musk may take X out of Europe to dodge anti-fake news EU regulation: Report</a>&nbsp;

<h2>India and Cybersecurity &nbsp;</h2>

Recently, a report by Palo Alto Networks revealed that India faces a substantial risk of cyberattacks targeting its critical infrastructure, public sector, and essential services.&nbsp;

As per the report, 67 per cent of Indian government and essential service entities reported encountering a surge of over 50 per cent in disruptive attacks.

Apart from that, S Somanath, the chairman of the Indian Space Research Organisation (ISRO), also said that the country's space agency is facing more than 100 cyber-attacks daily.&nbsp;These are a couple of examples which show the gravitas of the situation, and how they may impact India's future.

He said that ransomware attacks, phishing attacks, system intrusion, confirmed data disclosure, mobile threats, and social engineering are some of the common cyber threats in India that have affected individuals and organisations.&nbsp;

According to recent reports, less than 40 per cent of organisations have completely addressed emerging cyber risks. Around 47 per cent rank cloud-related threats as their top threat scenario, and 33 per cent rank cloud security as an investment priority.&nbsp;

Also read:&nbsp;<a href="https://www.wionews.com/technology/this-x-glitch-enabled-the-hijacking-of-cia-informant-channel-heres-how-648229">This glitch in X enabled the hijacking of CIA informant channel. Here's how</a>

<h2>Need for data security</h2>

Bharadwaj said that "considering the increasing amount of personal and sensitive information being stored digitally, it is essential to implement strict cyber-security policies to neutralise attacks and improve resilience".&nbsp;

He said that historically, the number of attackers was directly related to the number of malicious humans involved in the attacks. However, in the present scenario, the number of threat actors is proportional to the amount of virtual AI-enabled armies they can control.&nbsp;

"As a result, the scale of threat actors and their effectiveness has significantly changed. Attackers also use deep fake technology to create convincing fake audio or video content, spread disinformation and manipulate public opinion," he said.&nbsp;

Bharadwaj was asked about the importance of building skills and maintaining staff for research and development.&nbsp;

He said that the expansion of cybersecurity verticals offers ample opportunities for tech professionals to upskill, reskill, and enter this sector.&nbsp;

He asserted that there is a need to address the skill gaps in cybersecurity to "ensure enough skilled professionals meet the growing demand".&nbsp;

"To overcome this challenge, boosting resource availability and fostering cybersecurity talent development through industry-wide initiatives and strategies is crucial," he said.&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

Cybersecurity is the practice of protecting computer systems, networks, devices, and programs against cyber attacks of any kind and also being able to recover them.

Cybersecurity is the practice of protecting computer systems, networks, devices, and programs against cyber attacks of any kind and also being able to recover them. Amid an astronomical increase in the use of digital technologies in day-to-day life, cybersecurity has become significant. In India, the government is keen towards digitalisation, which is crucial for the nation's growth and development, as it wants to make services available to citizens electronically through improved online infrastructure. The government aims at increasing internet connectivity to digitalise the economy as the initiative includes plans to connect rural areas with high-speed internet networks. However, at a time when the country is inclined towards going digital, the nation must understand the safety and security around it. Also read: Working with robots makes people lazy. Here's what 'social loafing' means WION spoke to Maninder Bharadwaj, who is the Global Head of Cybersecurity and Risk Management, at Tech Mahindra. Bharadwaj explained that cyber threats are constantly evolving, exposing vulnerabilities in the digital infrastructure and impacting individuals and organisations across diverse sectors and industries. "With the rise of new technologies like AI, cybercriminals have been able to create more advanced ways to launch attacks," he said. Also read: Elon Musk may take X out of Europe to dodge anti-fake news EU regulation: Report India and Cybersecurity Recently, a report by Palo Alto Networks revealed that India faces a substantial risk of cyberattacks targeting its critical infrastructure, public sector, and essential services. As per the report, 67 per cent of Indian government and essential service entities reported encountering a surge of over 50 per cent in disruptive attacks. Apart from that, S Somanath, the chairman of the Indian Space Research Organisation (ISRO), also said that the country's space agency is facing more than 100 cyber-attacks daily. These are a couple of examples which show the gravitas of the situation, and how they may impact India's future. He said that ransomware attacks, phishing attacks, system intrusion, confirmed data disclosure, mobile threats, and social engineering are some of the common cyber threats in India that have affected individuals and organisations. According to recent reports, less than 40 per cent of organisations have completely addressed emerging cyber risks. Around 47 per cent rank cloud-related threats as their top threat scenario, and 33 per cent rank cloud security as an investment priority. Also read: This glitch in X enabled the hijacking of CIA informant channel. Here's how Need for data security Bharadwaj said that "considering the increasing amount of personal and sensitive information being stored digitally, it is essential to implement strict cyber-security policies to neutralise attacks and improve resilience". He said that historically, the number of attackers was directly related to the number of malicious humans involved in the attacks. However, in the present scenario, the number of threat actors is proportional to the amount of virtual AI-enabled armies they can control. "As a result, the scale of threat actors and their effectiveness has significantly changed. Attackers also use deep fake technology to create convincing fake audio or video content, spread disinformation and manipulate public opinion," he said. Bharadwaj was asked about the importance of building skills and maintaining staff for research and development. He said that the expansion of cybersecurity verticals offers ample opportunities for tech professionals to upskill, reskill, and enter this sector. He asserted that there is a need to address the skill gaps in cybersecurity to "ensure enough skilled professionals meet the growing demand". "To overcome this challenge, boosting resource availability and fostering cybersecurity talent development through industry-wide initiatives and strategies is crucial," he said. WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Cyber threats pose serious challenges to India's digital transformation dreams

When constructing integrations with LLMs into services or enterprises, the UK government agency advised caution. The global IT community "doesn't yet fully understand LLM's capabilities, weaknesses and (critically) vulnerabilities," according to the NCSC, adding that AI chatbots occupy a "blind spot" in human understanding.

UK's cybersecurity agency issues warning over AI chatbots

The White House on Wednesday released a statement saying that it had come up with a multimillion-dollar cyber contest to stimulate the use of artificial intelligence (AI) in order to find out and fix flaws in the security system of the United States government infrastructure.

"Cybersecurity is a race between offence and defence," said Anne Neuberger, the U.S. government's deputy national security adviser for cyber and emerging technology.

"We know malicious actors are already using AI to accelerate identifying vulnerabilities or build malicious software," she added in a statement to Reuters.

In recent times, several organisations in the United States, from healthcare groups to manufacturing firms and government institutions, have been a victim of hacking attacks.&nbsp;

Neuberger's comments about artificial intelligence were somewhat similar to those made by Canada's cybersecurity head Samy Khoury last month.

Also read: <a href="https://www.wionews.com/world/maui-wildfires-death-toll-rises-to-53-president-joe-biden-declares-it-major-disaster-624392">Maui wildfires death toll rises to 55, President Joe Biden declares it ‘major disaster’</a>

He said that his agency had witnessed AI being deployed for things like creating phishing emails, writing malicious computer code and spreading disinformation.

The White House released a statement saying that the two-year contest includes around $20 million in rewards and will be ushered by the Defense Advanced Research Projects Agency (DARPA), the United States government body which is in charge of creating technologies for national security.

The government said that the tech giants at the forefront of the AI revolution which include Alphabet's Google, Anthropic, Microsoft, and OpenAI, will make their systems available for the challenge.

"Our goal with the DARPA AI challenge is to catalyze a larger community of cyber defenders who use the participating AI models to race faster – using generative AI to bolster our cyber defences," Neuberger said.

The Open Source Security Foundation (OpenSSF), a US group of experts attempting to enhance open source software security, will be in charge of guaranteeing the "winning software code is put to use right away," the US government said.

(With inputs from agencies) 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

The White House on Wednesday released a statement saying that it had come up with a multimillion-dollar cyber contest to stimulate the use of artificial intelligence (AI) in order to find out and fix flaws in the security system of the United States government infrastructure.

The White House on Wednesday released a statement saying that it had come up with a multimillion-dollar cyber contest to stimulate the use of artificial intelligence (AI) in order to find out and fix flaws in the security system of the United States government infrastructure. "Cybersecurity is a race between offence and defence," said Anne Neuberger, the U.S. government's deputy national security adviser for cyber and emerging technology. "We know malicious actors are already using AI to accelerate identifying vulnerabilities or build malicious software," she added in a statement to Reuters. In recent times, several organisations in the United States, from healthcare groups to manufacturing firms and government institutions, have been a victim of hacking attacks. Neuberger's comments about artificial intelligence were somewhat similar to those made by Canada's cybersecurity head Samy Khoury last month. Also read: Maui wildfires death toll rises to 55, President Joe Biden declares it ‘major disaster’ He said that his agency had witnessed AI being deployed for things like creating phishing emails, writing malicious computer code and spreading disinformation. The White House released a statement saying that the two-year contest includes around $20 million in rewards and will be ushered by the Defense Advanced Research Projects Agency (DARPA), the United States government body which is in charge of creating technologies for national security. The government said that the tech giants at the forefront of the AI revolution which include Alphabet's Google, Anthropic, Microsoft, and OpenAI, will make their systems available for the challenge. "Our goal with the DARPA AI challenge is to catalyze a larger community of cyber defenders who use the participating AI models to race faster – using generative AI to bolster our cyber defences," Neuberger said. The Open Source Security Foundation (OpenSSF), a US group of experts attempting to enhance open source software security, will be in charge of guaranteeing the "winning software code is put to use right away," the US government said. (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

White House to launch AI-based contest aimed at fixing flaws in security systems

According to a report by the news agency PTI, the website of a prominent private school in the Indian city of Noida, Uttar Pradesh was hacked by an unknown group identifying itself as “Muslim hackers from Bangladesh,” on Thursday (August 10).&nbsp;

<h2>About the hack</h2>

The incident came to light on Thursday night and the local&nbsp;police&nbsp;said&nbsp;that they are yet to receive a complaint about the alleged hack.&nbsp;

“When liberty is at risk, expect us,” read a line from a message visible on the website’s homepage, as quoted by the media report. It added, “We are Bangladeshi Muslim hacker’s never try to mess our cyberspace. We oppose oppression where we are, we represent freedom, we are simple evolimion of the technological system when liberty is at risk ...expect us…”

ALSO READ |&nbsp;Indian hospital AIIMS says malware attack 'thwarted' by cybersecurity systems

The website showed the national flag of Bangladesh. The hackers signed off the message with “Joy Bangla” and “Bangladesh” written after it followed by multiple code names, said the PTI report.&nbsp;

<h2>Rise of cyberattacks in India</h2>

The incident comes weeks after cyber security firm Group-IB’s report about a hacktivist group known as “Mysterious Team Bangladesh” which has carried out several distributed denial-of-service (DDoS) attacks since June 2022.&nbsp;

The group, which is said to be primarily driven by religious and political motives, has also attacked multiple sectors in India, the report said.

ALSO READ |&nbsp;Nearly two-thirds of India-based companies victims of ransomware attack: Report

This also comes a month after a report by Check Point, an American-Israeli software company, revealed a sharp increase in cyberattacks targeting organisations worldwide, with Indian institutions suffering a disproportionately high number of attacks.

According to the report, between January and July of this year, a single Indian organisation endured an average of 2,146 cyber attacks per week. This number significantly surpasses&nbsp;the global average of 1,239 attacks per organisation.

ALSO READ |&nbsp;More than 2,000 cyberattacks target single Indian firm a week on average: Report

The education and research sector faced the highest number of attacks per week globally, said the report by Check Point.&nbsp;

(With inputs from agencies)&nbsp; 
 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

According to a report by the news agency PTI, the website of a prominent private school in the Indian city of Noida, Uttar Pradesh was hacked by an unknown group identifying itself as “Muslim hackers from Bangladesh,” on Thursday (August 10).

According to a report by the news agency PTI, the website of a prominent private school in the Indian city of Noida, Uttar Pradesh was hacked by an unknown group identifying itself as “Muslim hackers from Bangladesh,” on Thursday (August 10). About the hack The incident came to light on Thursday night and the local police said that they are yet to receive a complaint about the alleged hack. “When liberty is at risk, expect us,” read a line from a message visible on the website’s homepage, as quoted by the media report. It added, “We are Bangladeshi Muslim hacker’s never try to mess our cyberspace. We oppose oppression where we are, we represent freedom, we are simple evolimion of the technological system when liberty is at risk ...expect us…” ALSO READ | Indian hospital AIIMS says malware attack 'thwarted' by cybersecurity systems The website showed the national flag of Bangladesh. The hackers signed off the message with “Joy Bangla” and “Bangladesh” written after it followed by multiple code names, said the PTI report. Rise of cyberattacks in India The incident comes weeks after cyber security firm Group-IB’s report about a hacktivist group known as “Mysterious Team Bangladesh” which has carried out several distributed denial-of-service (DDoS) attacks since June 2022. The group, which is said to be primarily driven by religious and political motives, has also attacked multiple sectors in India, the report said. ALSO READ | Nearly two-thirds of India-based companies victims of ransomware attack: Report This also comes a month after a report by Check Point, an American-Israeli software company, revealed a sharp increase in cyberattacks targeting organisations worldwide, with Indian institutions suffering a disproportionately high number of attacks. According to the report, between January and July of this year, a single Indian organisation endured an average of 2,146 cyber attacks per week. This number significantly surpasses the global average of 1,239 attacks per organisation. ALSO READ | More than 2,000 cyberattacks target single Indian firm a week on average: Report The education and research sector faced the highest number of attacks per week globally, said the report by Check Point. (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Indian private school website hacked, Bangladesh flag posted: Report

A network of hospitals across the United States came under a cyberattack on Friday (Aug 5), forcing them to close down emergency rooms and divert ambulances.

Many primary care services were also shut down as the hospital administration was working to determine the extent of the damage.

Currently, it is unknown who or which group is responsible for the cyberattack.

According to local media reports, Los Angeles-based Prospect Medical Holdings, which has hospitals and clinics in Connecticut, Pennsylvania, Rhode Island and Texas, saw its computer systems hacked by ransomware.

"Prospect Medical Holdings, Inc. recently experienced a data security incident that has disrupted our operations," the company said in a statement.

"Upon learning of this, we took our systems offline to protect them and launched an investigation with the help of third-party cybersecurity specialists. While our investigation continues, we are focused on addressing the pressing needs of our patients as we work diligently to return to normal operations as quickly as possible."

<h2>Ambulances diverted, patients re-directed to other hospitals&nbsp;</h2>

In Connecticut, the emergency departments at Manchester Memorial and Rockville General hospitals were closed for Thursday and patients were re-directed to other nearby medical centres, reports AP news agency.

“We have a national Prospect team working and evaluating the impact of the attack on all of the organisations,” Jillian Menzel, chief operating officer for the Eastern Connecticut Health Network, said in a statement.

The FBI in Connecticut in a statement said that it is working with “law enforcement partners and the victim entities” but could not comment further on an ongoing investigation.

<h2>Computers down till next week&nbsp;</h2>

In Pennsylvania, the nurses’ union at Crozer-Chester Medical System said that the hospital has reverted to a paper system because most of the computers are offline, CBS News reported.

The computers are unlikely to be back online until next week, according to the labour group, citing Prospect Medical.

Among healthcare services that were suspended include elective surgeries, outpatient appointments, blood drives and other services.

Also read |&nbsp;<a href="https://www.wionews.com/business-economy/flashback-friday-tracing-the-success-of-coffee-giant-starbucks-622338">Tracing the success of coffee giant Starbucks</a>

Though some centres reopened the emergency departments late Thursday, many primary care services were closed on Friday, the Eastern Connecticut Health Network, which runs the facilities, said.

Also read |&nbsp;<a href="https://www.wionews.com/world/crocodile-fatally-attacks-soccer-player-in-costa-rican-river-swims-away-with-body-later-622378">Crocodile fatally attacks soccer player in Costa Rican river, swims away with body</a>

Patients were being contacted individually, according to the network’s website, reports AP news agency.

(With inputs from agencies) 
 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

A network of hospitals across the United States came under a cyberattack on Friday (Aug 5), forcing them to close down emergency rooms and divert ambulances. Many primary care services were also shut down as the hospital administration was working to determine the extent of the damage.

A network of hospitals across the United States came under a cyberattack on Friday (Aug 5), forcing them to close down emergency rooms and divert ambulances. Many primary care services were also shut down as the hospital administration was working to determine the extent of the damage. Currently, it is unknown who or which group is responsible for the cyberattack. According to local media reports, Los Angeles-based Prospect Medical Holdings, which has hospitals and clinics in Connecticut, Pennsylvania, Rhode Island and Texas, saw its computer systems hacked by ransomware. "Prospect Medical Holdings, Inc. recently experienced a data security incident that has disrupted our operations," the company said in a statement. "Upon learning of this, we took our systems offline to protect them and launched an investigation with the help of third-party cybersecurity specialists. While our investigation continues, we are focused on addressing the pressing needs of our patients as we work diligently to return to normal operations as quickly as possible." Ambulances diverted, patients re-directed to other hospitals In Connecticut, the emergency departments at Manchester Memorial and Rockville General hospitals were closed for Thursday and patients were re-directed to other nearby medical centres, reports AP news agency. “We have a national Prospect team working and evaluating the impact of the attack on all of the organisations,” Jillian Menzel, chief operating officer for the Eastern Connecticut Health Network, said in a statement. The FBI in Connecticut in a statement said that it is working with “law enforcement partners and the victim entities” but could not comment further on an ongoing investigation. Computers down till next week In Pennsylvania, the nurses’ union at Crozer-Chester Medical System said that the hospital has reverted to a paper system because most of the computers are offline, CBS News reported. The computers are unlikely to be back online until next week, according to the labour group, citing Prospect Medical. Among healthcare services that were suspended include elective surgeries, outpatient appointments, blood drives and other services. Also read | Tracing the success of coffee giant Starbucks Though some centres reopened the emergency departments late Thursday, many primary care services were closed on Friday, the Eastern Connecticut Health Network, which runs the facilities, said. Also read | Crocodile fatally attacks soccer player in Costa Rican river, swims away with body Patients were being contacted individually, according to the network’s website, reports AP news agency. (With inputs from agencies) WATCH WION LIVE HERE

Hospital networks in several US states under cyberattack, essential services suspended

In the digital age, crimes have taken the route of the internet where hacking and cybercrimes infiltrate people's life. In light of such incidents, the Biden administration has now announced a cybersecurity warning label for electronic devices. The cybersecurity trust mark will tell users whether the electronic device they are going to purchase meets the government-set cybersecurity standards.

US announces cybersecurity warning label for electronic devices

China has a long history of snooping on others; its intelligence agencies have been accused of employing a variety of techniques to collect critical information; they spy on corporations, other governments, and even their own citizens, and now China's objectives are being questioned once more. Chinese spies have allegedly breached hundreds of public and private networks this time, according to a USB cyber security company.

Mandiant: Chinese hackers attack several government agencies

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an <a href="https://go.checkpoint.com/2023-cyber-security-report/chapter-03.php">analysis </a>by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst.

The latest cyber-attack on India’s premier&nbsp;medical institution, the All India Institute of Medical Science&nbsp;(AIIMS), New Delhi,&nbsp;the <a href="https://www.wionews.com/india-news/aiims-says-malware-attack-successfully-thwarted-by-cyber-security-systems-601396">second such attack in a row</a> has rekindled discussion over India's&nbsp;preparedness&nbsp;to deal with attacks of the given nature.&nbsp;AIIMS in a statement released on Monday (June 5) said the attempt of malware attack was successfully thwarted and the threat was neutralised in time. But, the bigger questions of India's vulnerability, vigilance and digitalisation still remain unanswered.&nbsp;

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false"><iframe aria-label="Grouped Bars" data-external="1" frameborder="0" height="546" id="datawrapper-chart-7Exvx" scrolling="no" src="https://datawrapper.dwcdn.net/7Exvx/1/" style="border: none;" title="Avg weekly cyber attacks per organisation by sector in 2022 (Globally)" width="600"></iframe></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

<h2 dir="ltr">Why is India being targetted?</h2>

Cyber-attacks are frequently directed towards India due to its large population and expanding internet user base, resulting in a substantial attack surface, explains Dr Ananth Prabhu G, cyber law and security expert for various Indian law enforcement agencies.

“The country's economic progress and digital modernisation have led to increased digitisation in various sectors, which has caught the attention of cyber-criminals who seek financial benefits and access to sensitive data. Additionally, India's global prominence and intricate political and geopolitical relationships make it a prime target for attacks motivated by politics, espionage, or the disruption of critical infrastructure. Government initiatives and the collection of vast amounts of personal data have made the systems enticing targets,” he told WION.

<h2 dir="ltr">India’s healthcare sector a constant target? Why is health-related data so critical?</h2>

A nationwide initiative to <a href="https://main.mohfw.gov.in/sites/default/files/17739294021483341357.pdf">digitise medical data</a> was launched in September 2021, and as of now, more than 173,000 hospitals have enrolled with it. In accordance with medical records kept by hospitals on their own servers or in cloud storage, the programme allocates patient numbers that are linked to those records.&nbsp;

“Healthcare data is a prime target for <a href="https://www.wionews.com/india-news/delhis-bigest-cyber-fraud-doctor-duped-of-rs-45-crore-548k-via-skype-calls-594502">cyber-criminals</a> due to its immense value and inherent vulnerabilities. Firstly, healthcare data contains a plethora of sensitive information that can be exploited for illicit purposes. Personally identifiable information (PII) like names, addresses, Aadhar, and insurance details can be illicitly traded on the black market for identity theft or used in fraudulent financial activities. Furthermore, medical records and health information hold significant worth as they can be leveraged for fraudulent billing, acquiring prescription drugs, or even extorting individuals with sensitive health conditions. The high value attached to healthcare data makes it an enticing objective for cyber-criminals seeking financial gain or other malicious intentions,” explains Dr Prabhu G.

He further adds that healthcare systems are “particularly appealing” to hackers because they often possess weaker security measures compared to other industries. The healthcare sector traditionally prioritises patient care and operational efficiency over robust cybersecurity, leaving vulnerabilities that cyber-criminals can exploit. Outdated software, legacy systems, and inadequate investments in cyber security infrastructure render healthcare organisations more susceptible to attacks.&nbsp;

Also watch |&nbsp;Second malware attack at AIIMS, New Delhi&nbsp;

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/second-malware-attack-at-aiims-new-delhi-cyber-attack-india-news-601464/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

<h2 dir="ltr">Digitalisation and the risk of cyber-crimes</h2>

As per industry estimates, 2022 was India's worst year to date for cyber-attacks, an issue that has only become worse with rising digitalisation.

“The process of digitalisation heightens the vulnerability to cyber crime as it expands the attack surface through interconnected systems, adds complexity to IT infrastructure, involves the accumulation of valuable data, increases connectivity, and witnesses the continuous evolution of cyber threats. This combination of factors grants cybercriminals numerous avenues to exploit weaknesses, pilfer sensitive information, disrupt operations, and inflict financial and reputational harm,” Dr Prabhu G said.&nbsp;

<h2>Way forward</h2>

Technology usage is accelerating, which will lead to an increase in cyber-attack frequency and intensity. How can organisations curb the risk of a cyber-attack in that case?

“To bridge the gap and address the challenges posed by cyber-crime, it is essential to enhance collaboration between government agencies, private sector organisations, and cyber-security experts, while also prioritising robust cyber-security measures, education and training programmes, adequate resources and investment, legislation and regulation, international cooperation, continuous monitoring and incident response capabilities, and specific cyber-security awareness initiatives in sectors like healthcare. By taking these comprehensive steps, we can work towards a safer digital landscape, mitigate cyber threats, protect sensitive data, and foster a collective defence against cyber-criminals,” Dr Prabhu G explains.&nbsp;

The most significant issue, notwithstanding India's security measures, is the ability of the criminals to penetrate the Indian cyber-security system, regardless of whether or not these attacks result in data or financial loss. Therefore, it is imperative to implement the <a href="https://www.meity.gov.in/writereaddata/files/DIA_Presentation%2009.03.2023%20Final.pdf">digital India Act</a>.

 
WATCH WION LIVE HERE:

<iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe>

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an analysis by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst.

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an analysis by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst. The latest cyber-attack on India’s premier medical institution, the All India Institute of Medical Science (AIIMS), New Delhi, the second such attack in a row has rekindled discussion over India's preparedness to deal with attacks of the given nature. AIIMS in a statement released on Monday (June 5) said the attempt of malware attack was successfully thwarted and the threat was neutralised in time. But, the bigger questions of India's vulnerability, vigilance and digitalisation still remain unanswered. × Why is India being targetted? Cyber-attacks are frequently directed towards India due to its large population and expanding internet user base, resulting in a substantial attack surface, explains Dr Ananth Prabhu G, cyber law and security expert for various Indian law enforcement agencies. “The country's economic progress and digital modernisation have led to increased digitisation in various sectors, which has caught the attention of cyber-criminals who seek financial benefits and access to sensitive data. Additionally, India's global prominence and intricate political and geopolitical relationships make it a prime target for attacks motivated by politics, espionage, or the disruption of critical infrastructure. Government initiatives and the collection of vast amounts of personal data have made the systems enticing targets,” he told WION. India’s healthcare sector a constant target? Why is health-related data so critical? A nationwide initiative to digitise medical data was launched in September 2021, and as of now, more than 173,000 hospitals have enrolled with it. In accordance with medical records kept by hospitals on their own servers or in cloud storage, the programme allocates patient numbers that are linked to those records. “Healthcare data is a prime target for cyber-criminals due to its immense value and inherent vulnerabilities. Firstly, healthcare data contains a plethora of sensitive information that can be exploited for illicit purposes. Personally identifiable information (PII) like names, addresses, Aadhar, and insurance details can be illicitly traded on the black market for identity theft or used in fraudulent financial activities. Furthermore, medical records and health information hold significant worth as they can be leveraged for fraudulent billing, acquiring prescription drugs, or even extorting individuals with sensitive health conditions. The high value attached to healthcare data makes it an enticing objective for cyber-criminals seeking financial gain or other malicious intentions,” explains Dr Prabhu G. He further adds that healthcare systems are “particularly appealing” to hackers because they often possess weaker security measures compared to other industries. The healthcare sector traditionally prioritises patient care and operational efficiency over robust cybersecurity, leaving vulnerabilities that cyber-criminals can exploit. Outdated software, legacy systems, and inadequate investments in cyber security infrastructure render healthcare organisations more susceptible to attacks. Also watch | Second malware attack at AIIMS, New Delhi Digitalisation and the risk of cyber-crimes As per industry estimates, 2022 was India's worst year to date for cyber-attacks, an issue that has only become worse with rising digitalisation. “The process of digitalisation heightens the vulnerability to cyber crime as it expands the attack surface through interconnected systems, adds complexity to IT infrastructure, involves the accumulation of valuable data, increases connectivity, and witnesses the continuous evolution of cyber threats. This combination of factors grants cybercriminals numerous avenues to exploit weaknesses, pilfer sensitive information, disrupt operations, and inflict financial and reputational harm,” Dr Prabhu G said. Way forward Technology usage is accelerating, which will lead to an increase in cyber-attack frequency and intensity. How can organisations curb the risk of a cyber-attack in that case? “To bridge the gap and address the challenges posed by cyber-crime, it is essential to enhance collaboration between government agencies, private sector organisations, and cyber-security experts, while also prioritising robust cyber-security measures, education and training programmes, adequate resources and investment, legislation and regulation, international cooperation, continuous monitoring and incident response capabilities, and specific cyber-security awareness initiatives in sectors like healthcare. By taking these comprehensive steps, we can work towards a safer digital landscape, mitigate cyber threats, protect sensitive data, and foster a collective defence against cyber-criminals,” Dr Prabhu G explains. The most significant issue, notwithstanding India's security measures, is the ability of the criminals to penetrate the Indian cyber-security system, regardless of whether or not these attacks result in data or financial loss. Therefore, it is imperative to implement the digital India Act. WATCH WION LIVE HERE:

Data Lab | Digital India and the need to beef up cyber-security in healthcare

Cybersecurity has become a topic of discussion after many people have reported online scams where hackers tried to trick them. A team of researchers detected one such case where cybercriminals target people intending to steal their payment information.

Cybersecurity has become a topic of discussion after many people have reported online scams where hackers tried to trick them. A team of researchers detected one such case where cybercriminals target people intending to steal their payment information. Hackers send fraudulent emails using Netflix's branding to deceive individuals. According to the new report by Check Point Research, the phishing campaign has increased since the beginning of 2023. Omer Dembinsky, the data group manager at Check Point Software, stated that cybercriminal groups "orchestrate phishing campaigns" to get people to share their data. "In some cases, attacks are designed to obtain account information, as seen with Raiffeisen campaigns. Others are deployed to steal payment details, which we witnessed with the popular streaming service Netflix," he added. What is the 'Netflix scam' in 2023? The fraudulent email appears to originate from Netflix from an email address like support@bryanadamstribute[.]dk. The subject line is usually "Update required - Account on hold." The message in the email says that Netflix has suspended the user's account due to "failure to authorise payment for next billing cycle." Furthermore, it mentions a link to renew the Netflix subscription and requests the user to enter accurate payment details. However, the link directs users to a malicious website to steal payment details. Thus, the hacker cannot use your payment details or Netflix account until you fill in your information in the form. The cybersecurity company advised people to beware of such emails and report them. In December 2022, a 74-year-old man from Mumbai lost $1,200 while he was trying to restart his Netflix account. People must verify the source of an email requesting a user to reset a password or renew a subscription. ALSO READ | Scientists discover how X chromosome gets its shape, solving one of life's greatest mysteries How to stay safe from cyber scams? Less tech-savvy people are most likely to get scammed by such brand phishing attacks. Appropriate training to spot suspicious traits such as misspelt domains, typos, incorrect dates, and other details can expose a malicious email or link. Here are some tips for users to stay safe from such cyber scams. Sign out of unused or unrecognised devices Be aware of fake messages and websites (phishing) Verify the source (domain) of any email related to payments or passwords. Report fraudulent or suspicious activity to the concerning online streaming platform. Add a phone number for password recovery to your account. Keep your computer safe. Don't share your payment details on suspicious websites. (With inputs from agencies) WATCH WION LIVE HERE

Netflix Scam 2023: Hackers try stealing users' payment details; Here's how to stay safe

The microblogging giant Twitter experiences another data breach with email addresses of over 200 million users leaked and posted on an online hacking forum, a security researcher claimed on Wednesday.&nbsp;

Alon Gal, co-founder of Israeli cybersecurity-monitoring firm Hudson Rock on his LinkedIn said that this is one of the most significant leaks he has seen, Reuters reported.

Gal said that this breach, "will unfortunately lead to a lot of hacking, targeted phishing and doxxing."

Screenshots of the hacker forum, where the data was posted circulated online on Wednesday.&nbsp;Currently, there are no clues to identify the hacker or hackers behind this breach.

<a href="https://www.wionews.com/technology/another-data-breach-at-twitter-details-of-over-400-million-users-up-for-sale-probe-on-548132">Also read |&nbsp;Another data breach at Twitter, details of over 400 million users up for sale; probe on</a>

This is the second data breach that the Israeli cybersecurity firm Hudson Rock raised.&nbsp;

According to it, in late December almost 400 million accounts were hacked and their respective email addresses and phone numbers were exposed.&nbsp;

According to BBC, the hacker named "Ryushi" in the online post warned Twitter to avoid buying any large data protection and buy the exposed data from him "exclusively."

<a href="https://www.wionews.com/technology/from-reach-is-earned-not-bought-to-cause-based-advertising-twitter-to-lift-ban-on-political-advertising-549220">Also read |&nbsp;Shifting gears from reach is 'earned not bought' to 'cause-based advt', Twitter lifts ban on political ads</a>

Creator of breach-notification site, Have I Been Pwned, Tory Hunt said that the leaked data seemed "pretty much what it's been described as."

This data breach might be investigated by regulators from both sides, Data Protection Commission in Ireland and the US Federal Trade Commission who have been monitoring the company for compliance with European data protection rules and US consent orders respectively.&nbsp;

(with inputs from agencies)

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

The microblogging giant Twitter experiences another data breach with email addresses of over 200 million users leaked and posted on an online hacking forum, a security researcher claimed on Wednesday.

The microblogging giant Twitter experiences another data breach with email addresses of over 200 million users leaked and posted on an online hacking forum, a security researcher claimed on Wednesday. Alon Gal, co-founder of Israeli cybersecurity-monitoring firm Hudson Rock on his LinkedIn said that this is one of the most significant leaks he has seen, Reuters reported. Gal said that this breach, "will unfortunately lead to a lot of hacking, targeted phishing and doxxing." Screenshots of the hacker forum, where the data was posted circulated online on Wednesday. Currently, there are no clues to identify the hacker or hackers behind this breach. Also read | Another data breach at Twitter, details of over 400 million users up for sale; probe on This is the second data breach that the Israeli cybersecurity firm Hudson Rock raised. According to it, in late December almost 400 million accounts were hacked and their respective email addresses and phone numbers were exposed. According to BBC, the hacker named "Ryushi" in the online post warned Twitter to avoid buying any large data protection and buy the exposed data from him "exclusively." Also read | Shifting gears from reach is 'earned not bought' to 'cause-based advt', Twitter lifts ban on political ads Creator of breach-notification site, Have I Been Pwned, Tory Hunt said that the leaked data seemed "pretty much what it's been described as." This data breach might be investigated by regulators from both sides, Data Protection Commission in Ireland and the US Federal Trade Commission who have been monitoring the company for compliance with European data protection rules and US consent orders respectively. (with inputs from agencies) WATCH WION LIVE HERE

Twitter hacked, email addresses of over 200 million users exposed: Report

The password management company, NordPass, released its list of the Top 200 Most Common Passwords used by people in 2022. The report was released on Monday with a special pop culture edition, that tells that most people have been using the character "password" as their account password.&nbsp;

The report mentioned, "We learned that despite growing cybersecurity awareness, old habits die hard. The research shows that people still use weak passwords to protect their accounts."

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<blockquote class="twitter-tweet">
Yes, it’s that time of the year again when you get a glimpse into the Top 200 Most Common Passwords. The 2022 report is here and it even has a special pop culture edition 🔥 <a href="https://twitter.com/hashtag/NordPass?src=hash&amp;ref_src=twsrc%5Etfw">#NordPass</a> <a href="https://twitter.com/hashtag/worstpasswords?src=hash&amp;ref_src=twsrc%5Etfw">#worstpasswords</a>
— NordPass (@NordPass) <a href="https://twitter.com/NordPass/status/1592179095990898690?ref_src=twsrc%5Etfw">November 14, 2022</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

The research was carried out across 30 countries by NordPass, and also looked at the cultural impacts of people in selecting their passwords. The top three passwords used by users across these countries are — 'password', '123456', and '123456789'. The finding also shows that it will take less than one second to crack all the top three passwords.&nbsp;

In India, "bigbasket" and "1111111" are the top-most commonly used passwords by users. Other common passwords by Indian users also include, 'iloveyou', 'abcd1234', and 'iphone5s'.

The report further noticed that users have a big influence of films and movies in generating a password for their accounts. It reported, "Batman, Euphoria, and Encanto were among the most popular releases in 2021/2022. All are also popular passwords: “Batman” was used 2,562,776 times, “euphoria” 53,993, and “Encanto” 10,808 times." 
 
Even the biggest film industry event of the year, the Oscars ceremony, inspired many to use a not-so-safe password, 'Oscars', that was used over 60,000 times.

Also Read |&nbsp;<a href="https://www.wionews.com/world/cyberattacks-rise-four-fold-in-australia-says-government-report-531148">Cyberattacks rise four-fold in Australia, 76,000 complaints registered last year: Govt report</a>

It was noted by the researchers that people generally use passwords from their favourite sports teams, movie characters, and food items. Other dominant categories of all time include — fashion brands, swear words, names of artists, video games, cars and food.&nbsp;

The list was compiled by NordPass in partnership with independent researchers specialising in research of cybersecurity incidents, evaluating a 3TB database.&nbsp;

Ending the report with suggestions for selecting a strong password, the firm also lists down some password hygiene basis, like choosing long and complex passwords instead of short passwords,&nbsp;not reusing a single password for multiple accounts, and using a password manager to securely store and access passwords.&nbsp;

(with inputs from agencies)&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1  width=&quot;100%&quot;"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

The password management company, NordPass, released its list of the Top 200 Most Common Passwords used by people in 2022. The report was released on Monday with a special pop culture edition, that tells that most people have been using the character "password" as their account password.

The password management company, NordPass, released its list of the Top 200 Most Common Passwords used by people in 2022. The report was released on Monday with a special pop culture edition, that tells that most people have been using the character "password" as their account password. The report mentioned, "We learned that despite growing cybersecurity awareness, old habits die hard. The research shows that people still use weak passwords to protect their accounts." Yes, it’s that time of the year again when you get a glimpse into the Top 200 Most Common Passwords. The 2022 report is here and it even has a special pop culture edition 🔥 #NordPass #worstpasswords — NordPass (@NordPass) November 14, 2022 × The research was carried out across 30 countries by NordPass, and also looked at the cultural impacts of people in selecting their passwords. The top three passwords used by users across these countries are — 'password', '123456', and '123456789'. The finding also shows that it will take less than one second to crack all the top three passwords. In India, "bigbasket" and "1111111" are the top-most commonly used passwords by users. Other common passwords by Indian users also include, 'iloveyou', 'abcd1234', and 'iphone5s'. The report further noticed that users have a big influence of films and movies in generating a password for their accounts. It reported, "Batman, Euphoria, and Encanto were among the most popular releases in 2021/2022. All are also popular passwords: “Batman” was used 2,562,776 times, “euphoria” 53,993, and “Encanto” 10,808 times." Even the biggest film industry event of the year, the Oscars ceremony, inspired many to use a not-so-safe password, 'Oscars', that was used over 60,000 times. Also Read | Cyberattacks rise four-fold in Australia, 76,000 complaints registered last year: Govt report It was noted by the researchers that people generally use passwords from their favourite sports teams, movie characters, and food items. Other dominant categories of all time include — fashion brands, swear words, names of artists, video games, cars and food. The list was compiled by NordPass in partnership with independent researchers specialising in research of cybersecurity incidents, evaluating a 3TB database. Ending the report with suggestions for selecting a strong password, the firm also lists down some password hygiene basis, like choosing long and complex passwords instead of short passwords, not reusing a single password for multiple accounts, and using a password manager to securely store and access passwords. (with inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Millions still neglecting cybersecurity threats, using simple passwords easy to crack: Study

Cybersecurity researchers have discovered a spyware campaign that targets Uighurs through Android apps.

Gravitas: Apps that target Uighurs uncovered

Earlier today, Germany’s Interior Ministry indicated that the head of the country’s national cybersecurity agency, Arne Schoenbohm, has been sacked. This comes after media reports alleged that a member company of the group co-founded by Schoenbohm, was created by a former Russian intelligence agent.&nbsp;

The decision announced by Interior Minister Nancy Faeser followed allegations in German media which “damaged the necessary confidence of the public in the neutrality and impartiality” of his management.&nbsp;

ALSO READ:&nbsp;<a href="https://www.wionews.com/world/sweden-refuses-a-joint-investigation-team-with-germany-and-denmark-to-probe-nord-stream-explosions-525697">Sweden refuses joint investigation team with Germany, Denmark to probe Nord Stream explosions</a>

The German government had said over a week ago that they will investigate the reports comprehensively in light of these allegations.

Schoenbohm, who has been sacked as head of the country’s President of the&nbsp;Federal Office for Information Security (BSI), told German media he was unaware of “what the ministry has examined and what the concrete allegations against me look like.”&nbsp;

According to reports, nearly a decade ago, Schoenbohm had co-founded a cybersecurity group which brings together experts from public and private institutions. German media reported that one of its members was a company that was founded by a former Russian agent. However, the group said that they had removed the company last week.&nbsp;

ALSO READ:&nbsp;<a href="https://www.wionews.com/world/rail-traffic-halted-in-germany-authorities-say-malicious-and-targeted-sabotage-523623">Rail network cables cut, traffic stalled in Germany; termed ‘malicious, targeted’ sabotage</a>

The interior ministry said Faeser’s decision would not only be beneficial for the 1,500 employees of the agency but Schoenbohm himself, saying that they would now be able to work without any speculations about the personal issue, said the report.&nbsp;

Schoenbohm has been the head of the BSI since 2016. The ministry has not said who would take over after him. This comes amid growing concerns about attacks against Germany’s critical infrastructure by Moscow given Berlin’s support for Ukraine in the ongoing Russian invasion of the country.&nbsp;

(With inputs from agencies) 
 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

Earlier today, Germany’s Interior Ministry indicated that the head of the country’s national cybersecurity agency, Arne Schoenbohm, has been sacked. This comes after media reports alleged that a member company of the group co-founded by Schoenbohm, was created by a former Russian intelligence agent.

Earlier today, Germany’s Interior Ministry indicated that the head of the country’s national cybersecurity agency, Arne Schoenbohm, has been sacked. This comes after media reports alleged that a member company of the group co-founded by Schoenbohm, was created by a former Russian intelligence agent. The decision announced by Interior Minister Nancy Faeser followed allegations in German media which “damaged the necessary confidence of the public in the neutrality and impartiality” of his management. ALSO READ: Sweden refuses joint investigation team with Germany, Denmark to probe Nord Stream explosions The German government had said over a week ago that they will investigate the reports comprehensively in light of these allegations. Schoenbohm, who has been sacked as head of the country’s President of the Federal Office for Information Security (BSI), told German media he was unaware of “what the ministry has examined and what the concrete allegations against me look like.” According to reports, nearly a decade ago, Schoenbohm had co-founded a cybersecurity group which brings together experts from public and private institutions. German media reported that one of its members was a company that was founded by a former Russian agent. However, the group said that they had removed the company last week. ALSO READ: Rail network cables cut, traffic stalled in Germany; termed ‘malicious, targeted’ sabotage The interior ministry said Faeser’s decision would not only be beneficial for the 1,500 employees of the agency but Schoenbohm himself, saying that they would now be able to work without any speculations about the personal issue, said the report. Schoenbohm has been the head of the BSI since 2016. The ministry has not said who would take over after him. This comes amid growing concerns about attacks against Germany’s critical infrastructure by Moscow given Berlin’s support for Ukraine in the ongoing Russian invasion of the country. (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Germany: Cybersecurity chief dismissed following media reports of ties with Russia

The chief&nbsp;of the federal agency in charge of cybersecurity, Arne Schönbohm, is under consideration for termination by German Interior Minister Nancy Faeser due to his alleged contacts with Russian security service agents, according to German newspapers, which cited unnamed government sources.

The Federal Office for Information Security is led by Schönbohm (BSI). However, a recent inquiry discovered that he was also a member of a technological group that includes a German business that is a subsidiary of a Russian cybersecurity firm created by a former KGB employee among its members.

The Interior Ministry said that it "takes the matters reported over the weekend seriously and is investigating them comprehensively."

A scheduled joint appearance of Faeser and Schönbohm on Thursday to present the BSI Situation Report 2022 has reportedly been called off.

Also read |&nbsp;<a href="https://www.wionews.com/world/putin-warns-of-more-severe-attacks-as-russian-missiles-pound-ukraine-524108">Putin warns of more 'severe' attacks as Russian missiles pound Ukraine</a>

The Interior Ministry was reported to have stated by the daily tabloid Bild that "it is being explored how a speedy change of president may be done." Since there are restrictions on terminating public employees under the civil service rules, it is said that German authorities prefer to give Schönbohm a new position rather than dismiss him completely.

The Cyber <a href="https://www.wionews.com/videos/eam-jaishankar-refuses-to-disclose-indias-stance-on-un-vote-against-russia-523976">Security Council</a> of Germany, according to media reports, may have facilitated Schönbohm's purported meetings with Russian agents. The organisation was organised with the assistance of Schönbohm, and among its members is a German corporation that is a subsidiary of a Russian company that was established by a former KGB employee.

The Interior Ministry reportedly requested Schönbohm to distance himself from the council, but his most recent visit to celebrate the group's anniversary reportedly infuriated the ministry to a great extent.

As recently as 2015, when a cyberattack shut down the lower house of the Bundestag, or German parliament, Germany has accused Russia of carrying out cyberattacks.

(With inputs from agencies)

WATCH WION LIVE HERE:

<iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe>

The chief of the federal agency in charge of cybersecurity, Arne Schönbohm, is under consideration for termination by German Interior Minister Nancy Faeser due to his alleged contacts with Russian security service agents, according to German newspapers, which cited unnamed government sources.

The chief of the federal agency in charge of cybersecurity, Arne Schönbohm, is under consideration for termination by German Interior Minister Nancy Faeser due to his alleged contacts with Russian security service agents, according to German newspapers, which cited unnamed government sources. The Federal Office for Information Security is led by Schönbohm (BSI). However, a recent inquiry discovered that he was also a member of a technological group that includes a German business that is a subsidiary of a Russian cybersecurity firm created by a former KGB employee among its members. The Interior Ministry said that it "takes the matters reported over the weekend seriously and is investigating them comprehensively." A scheduled joint appearance of Faeser and Schönbohm on Thursday to present the BSI Situation Report 2022 has reportedly been called off. Also read | Putin warns of more 'severe' attacks as Russian missiles pound Ukraine The Interior Ministry was reported to have stated by the daily tabloid Bild that "it is being explored how a speedy change of president may be done." Since there are restrictions on terminating public employees under the civil service rules, it is said that German authorities prefer to give Schönbohm a new position rather than dismiss him completely. The Cyber Security Council of Germany, according to media reports, may have facilitated Schönbohm's purported meetings with Russian agents. The organisation was organised with the assistance of Schönbohm, and among its members is a German corporation that is a subsidiary of a Russian company that was established by a former KGB employee. The Interior Ministry reportedly requested Schönbohm to distance himself from the council, but his most recent visit to celebrate the group's anniversary reportedly infuriated the ministry to a great extent. As recently as 2015, when a cyberattack shut down the lower house of the Bundestag, or German parliament, Germany has accused Russia of carrying out cyberattacks. (With inputs from agencies) WATCH WION LIVE HERE:

Germany cybersecurity chief to be fired over Russia ties: reports

Twitter’s former head of security, Peiter Zatko, has accused his former employer of cybersecurity negligence in an explosive whistleblower complaint.

Tech Talk: Twitter's former security chief Peiter Zatko turns whistleblower

There are various ways in which cybercriminals can rob people. Among them, and the most prominent one, is phishing emails. These mails are designed to trap innocent and gullible victims by enticing them with fake offers or a cash rewards or sleazy advertisements. The mail contains a link, and once it is clicked, people can lose their sensitive information within a few seconds.

According to Microsoft, these phishing emails, also called adversary-in-the-middle (AiTM), have attempted to target more than 10,000 organisations across the globe since September 2021.

In its blog post, Microsoft said the cybercriminals use phishing mail to steal passwords, hijack users’ sign-in sessions, and bypass the authentication process even if users had enabled multifactor authentication (MFA).

“The attackers then used the stolen credentials and session cookies to access affected users’ mailboxes and perform follow-on business email compromise (BEC) campaigns against other targets,” the company said in the post.

What is phishing?

Phishing is an online scam, wherein malicious actors use sleazy emails, messages, advertisements or other resources to steal sensitive information. In every message there is a link in which some confidential information is asked from you.

How does it work?

To entice the users, the cyberthugs send a mail containing a replica URL of a big website or platform. That URL link is a proxy server between a potential victim and the targeted website so that the users are redirected to lookalike landing pages designed to capture credentials and MFA information.

"The phishing page has two different Transport Layer Security (TLS) sessions — one with the target and another with the actual website the target wants to access," Microsoft explained.

"These sessions mean that the phishing page practically functions as an AitM agent, intercepting the whole authentication process and extracting valuable data from the HTTP requests such as passwords and, more importantly, session cookies."

Once in possession of this information, the attackers injected the cookies into their own browsers to circumvent the authentication process, regardless of whether the victim had enabled MFA protections, it said.

"The session cookie is proof for the web server that the user has been authenticated and has an ongoing session on the website," Microsoft explained.

"In AitM phishing, an attacker attempts to obtain a target user's session cookie so they can skip the whole authentication process and act on the latter’s behalf."

How to protect yourself from phishing?

Speaking to DNA news website, a Delhi-based lawyer, Anurag, who monitors cases related to cybercrime, said that some important things should be taken care of to avoid phishing.

Do not click on any unverified link. If clicked, then do not fill the details. No company benefits you unnecessarily.&nbsp;No company gives the desired amount.&nbsp;Never fall for such calls, calls or emails, in which you are being offered with a bang.&nbsp;Do not share your banking details with anyone.&nbsp;

&nbsp;If you keep these things in mind, then you can avoid being a victim of phishing, he said.

(With inputs from agencies)

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

There are various ways in which cybercriminals can rob people. Among them, and the most prominent one, is phishing emails. These mails are designed to trap innocent and gullible victims by enticing them with fake offers or a cash rewards or sleazy advertisements.

There are various ways in which cybercriminals can rob people. Among them, and the most prominent one, is phishing emails. These mails are designed to trap innocent and gullible victims by enticing them with fake offers or a cash rewards or sleazy advertisements. The mail contains a link, and once it is clicked, people can lose their sensitive information within a few seconds. According to Microsoft, these phishing emails, also called adversary-in-the-middle (AiTM), have attempted to target more than 10,000 organisations across the globe since September 2021. In its blog post, Microsoft said the cybercriminals use phishing mail to steal passwords, hijack users’ sign-in sessions, and bypass the authentication process even if users had enabled multifactor authentication (MFA). “The attackers then used the stolen credentials and session cookies to access affected users’ mailboxes and perform follow-on business email compromise (BEC) campaigns against other targets,” the company said in the post. What is phishing? Phishing is an online scam, wherein malicious actors use sleazy emails, messages, advertisements or other resources to steal sensitive information. In every message there is a link in which some confidential information is asked from you. How does it work? To entice the users, the cyberthugs send a mail containing a replica URL of a big website or platform. That URL link is a proxy server between a potential victim and the targeted website so that the users are redirected to lookalike landing pages designed to capture credentials and MFA information. "The phishing page has two different Transport Layer Security (TLS) sessions — one with the target and another with the actual website the target wants to access," Microsoft explained. "These sessions mean that the phishing page practically functions as an AitM agent, intercepting the whole authentication process and extracting valuable data from the HTTP requests such as passwords and, more importantly, session cookies." Once in possession of this information, the attackers injected the cookies into their own browsers to circumvent the authentication process, regardless of whether the victim had enabled MFA protections, it said. "The session cookie is proof for the web server that the user has been authenticated and has an ongoing session on the website," Microsoft explained. "In AitM phishing, an attacker attempts to obtain a target user's session cookie so they can skip the whole authentication process and act on the latter’s behalf." How to protect yourself from phishing? Speaking to DNA news website, a Delhi-based lawyer, Anurag, who monitors cases related to cybercrime, said that some important things should be taken care of to avoid phishing. Do not click on any unverified link. If clicked, then do not fill the details. No company benefits you unnecessarily. No company gives the desired amount. Never fall for such calls, calls or emails, in which you are being offered with a bang. Do not share your banking details with anyone. If you keep these things in mind, then you can avoid being a victim of phishing, he said. (With inputs from agencies) WATCH WION LIVE HERE

What is phishing and how do cyberthugs con gullible victims?

cybersecurity

Cybersecurity, News on Cybersecurity, stories on Cybersecurity, articles on Cybersecurity, Cybersecurity stories at Wion, Cybersecurity news, Cybersecurity latest news