Government issues 'Cybersecurity Advisory'
Summary
The National Cybersecurity Center has issued an advisory urging government bodies and other entities to update Node.js runtimes, implement valid SSL/TLS certificates, and enforce HTTPS on websites. The directive also calls for regular certificate renewals and stronger website security standards to reduce cyberattack risks.
Key Points
- The National Cybersecurity Center has issued a cybersecurity advisory after vulnerabilities such as Node2Shell were identified in the Node.js runtime.
- Relevant entities have been urged to check and update Node.js versions used in systems and web applications.
- The advisory directs websites to use valid SSL/TLS certificates, operate exclusively via HTTPS, and renew certificates before expiry.
- Government and local bodies have been asked to implement website security standards to reduce cyberattack risks.