Union home affairs ministry, Ministry

New Delhi, Dec 27 The Indian cyber agency CERT-In on Tuesday warned Ind users against phishing, credential stuffing, or other brute force attacks against online accounts associated with LastPass vault.The warning came as encrypted password manager LastPass admitted last week that hackers were able to "copy a backup of customer vault data," in a recent data breach.LastPass is a freemium password manager that stores encrypted passwords onlin"."The data is encrypted and the threat actor could possibly perform brute force attempt to guess the master password, or may carry out phishing, credential stuffing, or other brute force attacks against online accounts associated with your LastPass "ault," warned CERT-In in its advisory.It is reported that, threat actors gained access to source code and technical information from the utility¿s developer environment to target users.The threat actors reportedly utilised information copied from backup containing basic customer account information and related metadata from which users were accessing the Password manager "ervice."For successful execution the threat actor may target users with a possible brute force attempt to guess the master password, or may perform phishing, credential stuffing and brute force attacks against online accounts associated with the Password mana"er utility," said CERT-In, which comes under the IT"Ministry."Change your password every 60-90 days on user-level accounts. This ensures threat actors using social engineering, brute force and credential stuffing attacks cannot use your older passwords to gain access to your sy"tems or data," it added.The cyber agency also reported a vulnerability in WordPress which could allow an attacker to execute arbitrary code on the targeted system.This vulnerability exists in YITH WooCommerce Gift Cards Premium plugin for WordPress due to an improper validation of file, durin" file upload."An attacker can exploit this vulnerability by uploading a malicious file. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on"the target system," said CERT-In.Disclaimer: This post has been auto-published from an agency feed without any modifications to the text and has not been reviewed by an editor

Union Home Affairs MinistryFOLLOW

Union home affairs ministry, Latest News

India's overall coal production increased 16.39 per cent so far in the financial year 2022-23 to 607.97 million tonnes, ... ...

New Delhi, Jan 3 In a latest development in the death case of a 20-year-old woman, who died ... ...

Jerusalem, Jan 2 The Israeli Health Ministry has announced the entry into force of a national food reform ... ...

Helsinki, Dec 30 A temporary profit tax is set to be introduced for companies in Finland that produce ... ...

Union Home Minister Amit Shah is scheduled to hold two back-to-back high-level meetings on Leh-Ladakh and Jammu and Kashmir ... ...

New Delhi, Dec 28 Union Home Minister Amit Shah will chair two high-level review meetings regarding the status ... ...

Wellington, Dec 28 New Zealand recorded 32,010 new community cases of Covid-19 and 78 deaths in the week ... ...

New Delhi, Dec 27 The Indian cyber agency CERT-In on Tuesday warned Ind users against phishing, credential stuffing, ... ...