Because of the soon to be law, requirements for VPN companies operating in India, to keep full logs of their user’s activities for five years, so India’s Computer Emergency Response Team (CERT-In) and law enforcement can have access to them – so removing the levels of privacy that a VPN …
India, India, India…
I think it is a good thing that the Indian government is giving it’s full support to tightening up cyber security in the country. However it seems that their responses, which seem good on paper are not so when translated into the real world: Indian authorities issue conflicting advice about …
InfoSec in Indian now always seems to be in hurry
Following the Indian government directives about reporting of cyber-security incidents and the requirement to keep VPN user logs, both of which had ridiculously short deadlines for compliance – here is another: Indian stock markets given ten day deadline to file reports • The Register India in the news – when …
Continue reading “InfoSec in Indian now always seems to be in hurry”
India in the news – when is privacy not so private? UPDATED 20 May 2022
This article was first published on 5 May 2022 Update 20 May 2022 The Indian government has moved on it’s hard line approach to incident report reporting, and some of the other provisions in their new cyber security laws – except the rules on VPNs! India slightly softens infosec incident …
Continue reading “India in the news – when is privacy not so private? UPDATED 20 May 2022”
Check your Zyxel devices
Zyxel have issued critical updates for some essential cyber security devices. Check your business cybersecurity plan to see if you are impacted and if so – get the updates done. Zyxel patches critical vulnerability that can allow Firewall and VPN hijacks | Ars Technica You do not have a business …