Hackjacks Cyber Security

Hello Friends, Today we gonna talk about information security standards. I am sure you all are aware about ISO standards.So for IT there is 27k series including all IT requirements. The ISO 27000 family of standards helps organizations keep information assets secure. Using this family of standards will help your organization manage the security of assets such as financial information, intellectual property, employee details or information entrusted to you by third parties. ISO/IEC 27001 is the best-known standard in the family providing requirements for an information security management system (ISMS). What is an ISMS? An ISMS is a systematic approach to managing sensitive company information so that it remains secure. It includes people, processes and IT systems by applying a risk management process. It can help small, medium and large businesses in any sector keep information assets secure. Benefits of ISO 27001 By achieving certification to ISO 27001 your orga...

Hello Friends,  Last week Govt. of India have banned few websites for downloading, music and other content. Now may be you or our script kidding (so called hackers) will believe that they will use some free proxy sites to visit or use all those blocked website.  Are you one of them who is using free proxy from the open internet..? Many people use free proxy servers to access sites/content not available in their countries, or in order to “anonymously” browse the internet. When searching for a suitable proxy, you have surely noticed the relatively large number of free proxies. You try one, and although it’s a little slow, it works. You can now watch The Interview on YouTube even if it is blocked. Did you ever think about why it’s free? A proxy works as a traffic relay point. When using a proxy, all your traffic goes through that particular proxy server. This means, that someone, somewhere has to pay for a server and for a good internet connection, so that hundreds, t...

Hello Friends, Today I want to share the Threats & vulnerabilities we considered for implementing risk assessment. The list comprehends also threats & vulnerabilities from ISO 22301 in order to have the larger effect possible on improving confidentiality, integrity and availability of the assets. THREATS Access to the network by unauthorized persons Breach of contractual relations Breach of legislation Compromising confidential information Concealing user identity Damage caused by a third party Damages resulting from penetration testing Destruction of records Disaster (human caused) Disaster (natural) Disclosure of information Disclosure of passwords Eavesdropping Embezzlement Errors in maintenance Failure of communication links Falsification of records Fire Flood Fraud Industrial espionage Information leakage Interruption of business processes Loss of electricity Loss of support services Malfunction of equipment Malicious code Misuse of informa...

The essential security principles of confidentiality, integrity, and availability are often  referred to as the  CIA Triad. All security controls must address these principles. These three  security principles serve as common threads throughout the CISSP CBK. Each domain  addresses these principles in unique ways, so it is important to understand them both in  general terms and within each specific domain: Confidentiality is the principle that objects are not disclosed to unauthorized subjects. Integrity is the principle that objects retain their veracity and are intentionally modified by  authorized subjects only. Availability is the principle that authorized subjects are granted timely access to objects  with sufficient bandwidth to perform the desired interaction. Different security mechanisms address these three principles in different ways and offer varying  degrees of support or application of these principl...

Security issues associated with Windows XP-driven ATMs - following the operating system going end-of-life earlier in the year - it appears that criminals have moved in for the kill, developing malware specifically designed to exploit cash machines that still run the embedded operating system. According to Kaspersky Lab, which has been working with Interpol on the issue, the malware - Tyupkin - allows criminals to gain cardless access to ATM funds using six digit access codes.Vicente Diaz, Kaspersky's principal security researcher said that the fraud shows that criminals are improving their tactics and appear to be able to gain enough access to ATMs to install program code.Kaspersky claims that the Tyupkin malware does not infect ATMs, but must be installed via physical access to the device. The criminals are then are able to check the amount of notes in each of the ATM's cartridges and select from which cartridge to draw up to 40 notes at a time.Diaz says that, based on ...

Today in the morning, a number of  Australian  users of Apple devices ( Connected  to iCloud) found their devices locked. Really this is a shock-full news. Customers find their Apple products like phones, tablets, and even laptops and  desktops  showing a message originating in Apple’s find my device service that states “Device hacked by Oleg Pliss” and  the user send US$100 to unlock  the device . According to the reports, the attack was initiated in the early hours of the morning across Australian, one user named ‘deskokat’ reporting that being woken up at 4:30AM with the associated ‘hacked by Oleg Pliss’ message and sounds being played out of their iPad. “I thought it was the morning alarm. I just signed in with my code, and all seems ok. I then signed in to my powerbook — but as a guest user — VERY grateful I did,” deskokat wrote. “Message to say I’d been hacked there too, wouldn’t let me sign out without...

પાસવર્ડ સિક્યોરીટી વિષે આમ તો આપણે  ઘણું જાણતા હોઈએ છીએ પરંતુ તેમ છતાં હોવી જોઈએ એટલી જરૂરી સિક્યોરીટી રહેતી નથી અને વારંવાર પાસવર્ડ ચોરી અને હેકિંગ ની ઘટનાઓ બનતી રહે છે.  સિગારેટ કે ગુટકાના પેકેટ પર જેમ મોટા મોટા અક્ષરે ચેતવણી આપી હોવા છતાં તેને અવગણવામાં આવે છે તેમ પાસવર્ડ સિક્યોરીટી માટે પણ જેતે વેબસાઈટ કે સર્વિસ પ્રોવાઈડર  દ્વારા અપાતી સૂચનાઓ ને અવગણવામાં આવે છે. આપણે આ અંક માં આપણે જાણીશું કે અલગ અલગ એપ્લીકેશન ની પાસવર્ડ સ્ટ્રેટેજી કઈ સેટ થાય છે અને આ પાસવર્ડ ને ક્રેક કરવો શક્ય છે કે નહિ. પાસવર્ડ ક્રેકિંગ :- કમ્પ્યુટર સિક્યોરીટી ના શબ્દકોશ પ્રમાણે કમ્પ્યુટર સીસ્ટમ માં સ્ટોર થયેલ એન્ક્રિપ્ટેડ (સામાન્ય યુઝર ના વાચી શકે તેવા) ને રીકવર કરવાની પ્રોસેસ ને પાસવર્ડ ક્રેકિંગ કહેવાય છે. પાસવર્ડ ક્રેકિંગ નો મુખ્ય હેતુ ભૂલી ગયેલા પાસવર્ડ ને ફરીથી રીકવર કરવા માટે હોય છે. પરંતુ ઘણી વાર તેનો દુરુપયોગ થઇ શકે છે.હેકર્સ આવી રીતે કોઈ પણ કમ્પ્યુટરમાં કે એપ્લીકેશન માં ઘુસી ને ડેટા ચોરી શકે છે. આપણા  આ આર્ટીકલ માં અપને જાણીશું કે પાસવર્ડ કઈ રીતે ક્રેક થઇ શકે અને આ ક્રેકિંગ...