Affairs ministry, Ministry

New Delhi, Dec 27 The Indian cyber agency CERT-In on Tuesday warned Ind users against phishing, credential stuffing, or other brute force attacks against online accounts associated with LastPass vault.The warning came as encrypted password manager LastPass admitted last week that hackers were able to "copy a backup of customer vault data," in a recent data breach.LastPass is a freemium password manager that stores encrypted passwords onlin"."The data is encrypted and the threat actor could possibly perform brute force attempt to guess the master password, or may carry out phishing, credential stuffing, or other brute force attacks against online accounts associated with your LastPass "ault," warned CERT-In in its advisory.It is reported that, threat actors gained access to source code and technical information from the utility¿s developer environment to target users.The threat actors reportedly utilised information copied from backup containing basic customer account information and related metadata from which users were accessing the Password manager "ervice."For successful execution the threat actor may target users with a possible brute force attempt to guess the master password, or may perform phishing, credential stuffing and brute force attacks against online accounts associated with the Password mana"er utility," said CERT-In, which comes under the IT"Ministry."Change your password every 60-90 days on user-level accounts. This ensures threat actors using social engineering, brute force and credential stuffing attacks cannot use your older passwords to gain access to your sy"tems or data," it added.The cyber agency also reported a vulnerability in WordPress which could allow an attacker to execute arbitrary code on the targeted system.This vulnerability exists in YITH WooCommerce Gift Cards Premium plugin for WordPress due to an improper validation of file, durin" file upload."An attacker can exploit this vulnerability by uploading a malicious file. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on"the target system," said CERT-In.Disclaimer: This post has been auto-published from an agency feed without any modifications to the text and has not been reviewed by an editor

Affairs MinistryFOLLOW

Affairs ministry, Latest News

Union Minister of Youth Affairs and Sports Anurag Singh Thakur on Friday launched the themes of Y20 summit, logo, ... ...

In view of a series of protests by the Jain community, the Union Minister for Environment, Forest and Climate ... ...

New Delhi, Jan 5 The Union Home Ministry has designated Ejaz Ahmad Ahangar, the recruitment chief of the ... ...

India's overall coal production increased 16.39 per cent so far in the financial year 2022-23 to 607.97 million tonnes, ... ...

Jerusalem, Jan 2 The Israeli Health Ministry has announced the entry into force of a national food reform ... ...

Helsinki, Dec 30 A temporary profit tax is set to be introduced for companies in Finland that produce ... ...

Wellington, Dec 28 New Zealand recorded 32,010 new community cases of Covid-19 and 78 deaths in the week ... ...

New Delhi, Dec 27 The Indian cyber agency CERT-In on Tuesday warned Ind users against phishing, credential stuffing, ... ...