FireSale HackBoy

Knowledge Shared By FireSale HackBoy...

Hacking

The Art Of Exploitation...

Ethical Hacking

Security Experts...Same Techniques To Make Hacker's Stuff Useless.

Black Hat Hacking

Dark Side Of Hacking... In Short Destruction Of Cyber Stuff.

Digital Stuff

All The Digital Stuff Is Under The Influence Of Cyber Attacks... Be Safe

Tuesday, March 3, 2020

The Importance of Active Learning in the Data Science and Engineering

By Andrew Bolster, machine learning engineer at WhiteHat Security

Back when I was pursuing my undergraduate degree in electronics and software engineering, I couldn’t imagine a path that would lead to me working with NATO on port protection and maritime defense, teaching smart submarines how to trust each other. But while I was working toward a Ph.D., that’s what happened. Instead of following the path into academia, a friend enticed me to work with him on biometrics. From there, I found an opportunity to apply my skills and knowledge to the cybersecurity industry – but that’s not something I could have predicted either.

The new year has me reflecting on the roundabout approach that led to my current role as a machine learning (ML) team lead with WhiteHat Security. I think it’s important to share some of the challenges, experiences, and opportunities I’ve been fortunate enough to have gone through with others who may be just at the beginning of a journey or professional career in data science and engineering. Like many, my experiences have shaped my views on certain issues and advancements in technology. For example, during the past eight years as a chairman of a charitable hackerspace in Northern Ireland, I have become a huge proponent of open data and transparent government. I also believe that with enough work, many of the world’s current challenges, from climate change, road traffic accidents, infectious diseases, obesity, and even corrupt governments can be faced with a combination of accurate, honest, data, and the advances in machine learning and data science techniques. 

If you’re planning to pursue a career in STEM, one important thing to consider is that feeding your interest in these fields is one of the smartest investments you can make. Look for every opportunity to engage and immerse yourself in conversations, and self-directed projects or research. If you’re still a full-time student, don’t panic about exams or even grades. With an understanding that your education could be out-of-date by the time you finish your degree pathway, know that your long-term success will more accurately be defined by how much you can learn and remain an active learner in your own experiences.

Another critical factor to building success in science and engineering is to find mentors early on. I can confidently say when seated at either side of the interview table, that the most active learners with a keen interest in their fields have often worked very closely with an experienced mentor along the way, and subsequently gift their time and experience to the next generation of learners that come after them. The role a mentor plays in keeping you engaged and curious cannot be overstated. Not to mention, a mentor can show you all the best ways to ‘win friends and influence people’ throughout an organization. 

As an example of active learning in my own career, my team was recently working on verifying vulnerabilities. Before, using scanning technologies to assess websites was difficult because the scanner can be quite ‘dumb.’ Our team is building a secondary system to apply ML and develop an augmented risk assessment system on top of the battle-tested scanner, to add experience over time. Whenever the ML has seen vulnerabilities on a website, they are clustered and grouped together and are verified by human experts. These experts then perform a deep dive into websites to investigate further, but it takes a lot of time and resources to do so. To serve our customers, we must be able to scale this process. All vulnerabilities are human verified, leveraging the collective experience they possess. When building with ML, the models improve as they receive more engagement from the subject matter experts – and this is where active learning and natural curiosity play a very strong role.   

One thing that ML is terrible at is pattern recognition on time series data. Despite all of the research into stock market trends, for example, ML is very bad at identifying patterns in noisy, time-varying, multi-value inputs. This is because ML doesn’t understand the reason for changes over time and their pattern correlations. What’s missing is the human ability to infer, correlate, and leverage past experience. Humans can say, “Of course that vulnerability won’t work, because this happened.” ML – whether fortunately or unfortunately – lacks common sense, and the ability to intuitively make these kinds of inferences. But this is an exciting time to pursue a career in this field because this is being researched at this very moment!

As you pursue STEM studies, make time to explore and follow new and emerging technologies. Bear in mind that by graduation, there could be entirely new fields and industries to get excited about. That’s a major upside to science and engineering – it’s constantly evolving!

Become plugged into the industry from a global perspective. Read about what’s happening in the world and draw your inspiration from the latest research or breakthroughs as you explore your own potential. But be sure to strike a balance between work and life, too. There are plenty of social opportunities to have fun and make friends at events like meetups, hackathons, or robotics competitions, and quite often, these relationships will form the basis of strong and long lasting personal and professional relationships. These relationships will support you as you build a reputation within the field, and even bring you professional opportunities that many would not normally have access to following classical pathways. 

Finally, remember that studying science and engineering is serious, and it’s rare that things will run smoothly every time. There are no experts, just people who have made (and learned from) more mistakes than you have. Expect the unexpected but keep your wits and a sense of humor about it all. Use the time to learn your own preferences – do you enjoy the precision and methodology of lab work, or are you more of a free spirit, who prefers to be in the field? By exploring these options early, you can figure out what appeals to you most and set your course with purpose.

About Andrew Bolster

A technologist, founder of multiple technology-based groups and organizations, an award-winning researcher, community leader, and an occasional public speaker, Andrew Bolster is currently the machine learning team lead at WhiteHat Security, using advanced data mining and machine learning to analyse potential hacking and malware attacks on cloud infrastructure. He was previously a data scientist working in the fields of affective computing and cybersecurity. Follow him on Twitter, @bolster

The post The Importance of Active Learning in the Data Science and Engineering appeared first on Cybersecurity Insiders.


March 03, 2020 at 08:12PM

Monday, March 2, 2020

Two Chinese nationals indicted by the US for North Korea Cyber Attack

US Justice Department has indicted two nationals from China in relation to the billions of laundering in relation to the Pyongyang Weapons program. Therefore, the indictment stands as the first legal order against Kim Jong UN-led nation who is known to launch cyber attacks on banks and cryptocurrency outlets operating worldwide to fund his nuclear weapons visionary.

 

According to the Justice Department’s media update available from Monday, hackers hailing from North Korea launched a cyber attack on virtual currency exchange and stole over $250 million. They then used multiple laundering methods in order to disguise the origin of the stolen virtual currency.

 

In relation to the case, two Chinese nationals named Tian Yinyin and Li Jiadong who were working as team members in the money laundering case were found guilty. As they were caught laundering victual currency worth $100m to over 116 digital currency accounts and addresses.

 

US Justice Department on receiving an update from the US Treasury suspects that the two Chinese nationals were part of a Lazarus Group which is a state-funded hacking unit working for the interests of Kim Jong-UN.

 

As the culprits are not in US custody, the case has been referred to the Interpol for tracking down the suspects for arrests.

 

Note– Lazarus Group is the same hacking unit that was behind the server hack in India’s Kudankulam Nuclear Power Plant.

The post Two Chinese nationals indicted by the US for North Korea Cyber Attack appeared first on Cybersecurity Insiders.


March 03, 2020 at 11:02AM

Tesco issues 620,000 Clubcards after discovering Cyber Attack

UK based Tesco has issued new 620,000 Clubcards to its customers after it discovered that the database containing user information related to the old cards was compromised with a cyber attack. All points and vouchers related to the old cards will be transferred to the new ones after 3 days of issuance said the British supermarket chain provider.

 

The retailer which is renowned for its supermarket chain worldwide said that issuance of the new loyalty cards was being done to ward off any potential cyber risk which could arise due to stolen usernames and passwords from its database.

 

FYI, Tesco has over 17 million members holding Clubcards and offers one point for every pound spent in its store. So, when a user gathers 100 points, then he/she will be eligible to get a shopping round worth a pound.

 

In simple terms, the rewards program accounts for cashback on user spending.

 

Tesco has issued a public statement yesterday that the data breach incident is true. But it assured that no financial data was compromised and its systems were not hacked………..( sound’s strange !).

 

Note 1- Tesco’s Clubcard’s scheme is valid in its stores operating in the United Kingdom, Czech Republic, Ireland, Slovakia, Hungary, and Poland.

 

Note 2- Many Tesco Clubcard users have raised their privacy concerns last year as the company collects info such as names, addresses, number of children, number of family members and what’s their annual income before issuing the loyalty cards.

 

The post Tesco issues 620,000 Clubcards after discovering Cyber Attack appeared first on Cybersecurity Insiders.


March 03, 2020 at 11:01AM

How a small business can achieve Zero Trust security

Contrary to popular belief, small businesses don’t need to be restricted by their budgets and productive capacity – especially when it comes to security. By using the right Zero Trust approach, businesses can prevent data breaches, all while continuing to grow.
New technologies such as databases, the cloud, the internet-of-things, and countless network devices help a business save money and time while making operations more efficient. Companies are now capable of taking brainstorming discussions about new apps, and make them into prototypes in a day – but while this new efficiency is yielding incredible results, correct security must be implemented to keep these businesses prospering in the long term.
Successful small businesses of any kind share a common trait between them: they move and grow rapidly. Broken down this means they’re bringing on new contractors and employees, experimenting with new technologies and ideas, expanding to new…

Sam Bocetta Posted by:

Sam Bocetta

Read full post

      

The post How a small business can achieve Zero Trust security appeared first on Cybersecurity Insiders.


March 02, 2020 at 09:09PM

Cyber Attack news trending on Google

The first news headlines which are topping the Google news results are about Finablr which is a London based Financial services company. It released a press statement early today that its profit scale will be negatively hit this year due to the spread of Coronavirus across the world and also due to the cyber attack on its Travelex Foreign Exchange.

 

According to the media update released by the company, it expects a knockdown of £25 million from this year’s earnings as its subsidiary Travelex which it acquired in 2014 was targeted by a ransomware attack n Dec’2019.

 

“As China and other countries in Asia account to approximately 10% of Travelex Revenues, the spread of Wuhan Virus is said to negatively affect the earnings of exchange service due to a dip in travel demand”, says a statement released by Travelex.

 

Note- The Ransomware Cyber Attack which took place on Travelex on the new year eve of 2020 is said to have affected the customers of the UK, US, and Australia along with France. Maze Ransomware which steals data first and later locks down a database with encryption malware was reported to be behind the incident.

 

Coming to the second news which is doing rounds on Google is a cyber-attack that reportedly impacted the email accounts and servers of the City of Torrance. News is out that the incident took place on Sunday i.e yesterday at around 2:30 am disrupting the server functioning impacting the email network.

 

According to the statement released early today, all basic communication services were working fine and no sensitive info related to the Public was compromised. And only some city business services were compromised.

The post Cyber Attack news trending on Google appeared first on Cybersecurity Insiders.


March 02, 2020 at 08:47PM

Sunday, March 1, 2020

Russia to re-interfere in US 2020 Elections to favor Donald Trump

In the year 2016, there were N number of speculations that Russia was trying to influence the US 2016 Polls which were eventually won by the current President of United States Donald Trump.

 

Now, the news is out that the Intelligence officials have recently disclosed to the Congress that Russia might again interfere in 2020 elections to re-favor Donald Trump.

 

In a briefing given to the House of Intelligence Committee chaired by Adam Schiff over Trump impeachment, Shelby Pierson and her team reportedly raised this issue by adding that the Putin led nation is in a bid to shatter the confidence of US voters by favoring the win of Donald Trump by digitally influencing the election poll results.

 

Speaking precisely, this speculation is doing rounds since the beginning of Feb this year and became a discussion point at the Oval Office recently.

 

The New York Times believes that the 2020 elections which are scheduled to be held in November this year are already being influenced by Kremlin as it has already started to use Social Media Platforms in its campaign of distrust.

 

While Russia has been denying what is being briefed by US Intelligence, Trump and his administration believe that this information might be used against them when the President starts to campaign on an official note from July this year- which stands true.

 

Note- In January 2017, the then-President Barack Obama was jointly briefed by CIA and FBI that the elections held in Nov’16 were digitally influenced to go in favor of Trump- hence sidelining the vision of Hillary Clinton- who was a Presidential Probably then.

The post Russia to re-interfere in US 2020 Elections to favor Donald Trump appeared first on Cybersecurity Insiders.


March 02, 2020 at 10:21AM

What employees fear during Merger and Acquisition Activities

In the field of business and technology, Merger and Acquisition (M&A) activities are common as companies tend to cut down the competition on one hand with it while doing their best to deliver products and services as per the needs of their customers.

 

But in this transition process, most companies fail to engage their employees in an appropriate way which do affects the success of a Merger or Acquisition.

 

One of the foremost fear which starts pestering the mind of an employee when his/her company is going for a Merger/Acquisition transition is the fear of losing their job. Many times those employed fear being laid off or shown a dip in pay-package which later transforms into a kind of insecurity in them- giving rise to more administration and management plights. While most company heads cannot guard against rumors and misinformation spread, at least they can create a space where their employees can have access to a flow of resources that can put a block to most of their fears.

 

Trusting the other side- The second fear which often grips the mind of the employees is whether they can trust the other side of the leadership when the entire process or M&A completes. Better to keep a feedback platform that allows the new joiners to put forward their concerns and get feedback in a precise way and at the right time.

 

Fear of new culture- When one company employee/s join another company, it is like combing two different sets of work cultures which presents a myriad of challenges. So, the company head who is acquiring the new employee/s should think in a proactive way to come up with an effective strategy that allows developments in a shared culture. Better to create a platform where peers are allowed to recognize their co-worker’s talents, contributions and accomplishments.

 

So, all your company heads over there, better you take into account the human side during M&A as it plays a vital role in making or breaking a finished business deal in the future.

 

The post What employees fear during Merger and Acquisition Activities appeared first on Cybersecurity Insiders.


March 02, 2020 at 10:20AM