Athenian Tech

𝐂𝐚𝐫𝐞𝐞𝐫 𝐎𝐩𝐩𝐨𝐫𝐭𝐮𝐧𝐢𝐭𝐲: 𝐆𝐑𝐂 𝐀𝐧𝐚𝐥𝐲𝐬𝐭 | 𝐍𝐨𝐢𝐝𝐚, 𝐍𝐂𝐑 Athenian Tech is hiring a 𝐆𝐑𝐂 𝐀𝐧𝐚𝐥𝐲𝐬𝐭 (1 year of experience) to support ISMS operations and governance, risk, and compliance functions. 𝐊𝐞𝐲 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐢𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬: • Support ISMS implementation aligned with ISO/IEC 27001 • Conduct gap assessments, compliance reviews, and risk treatment activities • Maintain ISMS documentation and coordinate audit evidence collection • Manage corrective actions and support vendor/third-party security assessments 𝐑𝐞𝐪𝐮𝐢𝐫𝐞𝐦𝐞𝐧𝐭𝐬: • Bachelor's degree in IT, Computer Science, Law, or related field • 1 year of experience in GRC, information security, or compliance • Familiarity with ISO/IEC 27001, NIST, GDPR, or IT Act 2000 • Strong documentation and communication skills; proficiency in MS Office 𝐏𝐫𝐞𝐟𝐞𝐫𝐫𝐞𝐝: ISO 27001 Foundation or CompTIA Security+ certification (in progress or completed) 𝐋𝐨𝐜𝐚𝐭𝐢𝐨𝐧: Noida, NCR | 𝐓𝐲𝐩𝐞: Full-Time | 𝐒𝐜𝐡𝐞𝐝𝐮𝐥𝐞: Mon–Sat (1st & 3rd Saturdays off) 𝐓𝐨 𝐚𝐩𝐩𝐥𝐲, 𝐬𝐡𝐚𝐫𝐞 𝐲𝐨𝐮𝐫 𝐫𝐞𝐬𝐮𝐦𝐞 𝐚𝐭: hr@atheniantech.com Interested candidates may apply or share their profile for consideration. #Hiring #GRCAnalyst #CyberSecurity #ISO27001 #NoidaJobs

𝐌𝐲𝐭𝐡: 𝐎𝐧𝐥𝐲 "𝐠𝐮𝐥𝐥𝐢𝐛𝐥𝐞" 𝐩𝐞𝐨𝐩𝐥𝐞 𝐟𝐚𝐥𝐥 𝐟𝐨𝐫 𝐬𝐜𝐚𝐦𝐬. 𝐅𝐚𝐜𝐭: 𝐀𝐧𝐲𝐨𝐧𝐞 𝐜𝐚𝐧. Scammers today use AI voice cloning, deepfake videos, and fake news that look 100% real. Falling for one isn't about being careless - it's about not knowing what to look for yet. That's exactly what this free certification fixes. Become a Certified First Responder Against Misinformation & Cyber Threats in just 10 hours, spread across 13 easy modules - 100% online, no tech background needed. Knowledge is the best firewall. #CyberPeace #MythVsFact #DigitalIndia #StaySafeOnline

𝐀 𝐅𝐫𝐞𝐞 𝐏𝐚𝐭𝐡 𝐈𝐧𝐭𝐨 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐟𝐨𝐫 𝐒𝐭𝐮𝐝𝐞𝐧𝐭𝐬, 𝐁𝐚𝐜𝐤𝐞𝐝 𝐛𝐲 𝐆𝐨𝐨𝐠𝐥𝐞. Misinformation and cyber threats don't wait for college students to graduate before targeting them. CyberPeace, supported by Google, is offering a 𝐟𝐫𝐞𝐞 𝐜𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐟𝐨𝐫 𝐜𝐨𝐥𝐥𝐞𝐠𝐞 𝐬𝐭𝐮𝐝𝐞𝐧𝐭𝐬 𝐭𝐨 𝐛𝐞𝐜𝐨𝐦𝐞 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐅𝐢𝐫𝐬𝐭 𝐑𝐞𝐬𝐩𝐨𝐧𝐝𝐞𝐫𝐬 - equipping them to identify, respond to, and help others navigate misinformation and cyber threats in their communities. 📌 10 𝐡𝐨𝐮𝐫𝐬 | 13 𝐦𝐨𝐝𝐮𝐥𝐞𝐬 | 100% 𝐨𝐧𝐥𝐢𝐧𝐞 📌 𝐍𝐨 𝐭𝐞𝐜𝐡𝐧𝐢𝐜𝐚𝐥 𝐛𝐚𝐜𝐤𝐠𝐫𝐨𝐮𝐧𝐝 𝐫𝐞𝐪𝐮𝐢𝐫𝐞𝐝 📌 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐞 𝐨𝐧 𝐜𝐨𝐦𝐩𝐥𝐞𝐭𝐢𝐨𝐧 This is a practical, accessible entry point for students who want cybersecurity and digital safety skills that matter today - no prior expertise needed. Scan the QR code in the video or register today to become a Digital First Responder. #CyberPeace #DigitalFirstResponder #CyberSecurity #Misinformation #StudentCertification #OnlineSafety #India

𝐁𝐞𝐜𝐨𝐦𝐞 𝐚 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐞𝐝 𝐅𝐢𝐫𝐬𝐭 𝐑𝐞𝐬𝐩𝐨𝐧𝐝𝐞𝐫 𝐀𝐠𝐚𝐢𝐧𝐬𝐭 𝐌𝐢𝐬𝐢𝐧𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧 & 𝐂𝐲𝐛𝐞𝐫 𝐓𝐡𝐫𝐞𝐚𝐭𝐬 - Athenian Tech 𝐂𝐨𝐦𝐞𝐬 𝐔𝐩 𝐖𝐢𝐭𝐡 𝐅𝐫𝐞𝐞 𝐂𝐲𝐛𝐞𝐫 𝐒𝐚𝐟𝐞𝐭𝐲 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐟𝐨𝐫 𝐒𝐭𝐮𝐝𝐞𝐧𝐭𝐬 Every day, thousands of Indian students encounter misinformation, phishing attempts, and cyber scams - many without the tools to recognise or respond to them in time. A Google-supported programme is inviting students across the country to become Certified First Responders against Misinformation & Cyber Threats. 𝐏𝐫𝐨𝐠𝐫𝐚𝐦𝐦𝐞 𝐡𝐢𝐠𝐡𝐥𝐢𝐠𝐡𝐭𝐬: • 13 comprehensive modules covering cyber threats and digital safety • 10 hours of flexible, self-paced learning • 100% online - accessible anytime, anywhere Certificate by Google on successful completion In an increasingly connected India, digital literacy is no longer optional - it's essential. This programme equips students with the critical thinking and verification skills needed to identify threats, respond responsibly, and protect their campuses and communities online. Registration is free and open now. Register today: 'https://lnkd.in/gPxkQJk4' Educators, university partners, and student communities - we encourage you to share this opportunity widely. #CyberSecurity #DigitalIndia #DigitalLiteracy #MisinformationAwareness #StudentsForSaferInternet #IndiaFutureFoundation #GoogleForEducation #CyberAwareness

A DDoS-for-hire "stresser" service costs as little as $38 an hour to rent. The average small business spends $120,000 recovering from the attack it launches. DDoS used to require real infrastructure and real technical skill to pull off at scale. Today it requires a credit card, or increasingly, just cryptocurrency and five minutes on a storefront website. The 2025–2026 numbers (verified sources): → Cloudflare mitigated 47.1 million DDoS attacks in 2025 — a 358% increase over 2024, with Q1 2025 alone accounting for 96% of Cloudflare's entire 2024 total → The largest attack ever recorded reached 31.4 Tbps — a 726% increase over the previous record of 3.8 Tbps, set just 14 months earlier → Network-layer DDoS attacks surged 509% year over year, while application-layer attacks rose 74% → A DDoS-for-hire ("booter" or "stresser") service costs as little as $38 per hour, against an average SMB recovery cost of $120,000 and enterprise losses exceeding $1 million — a roughly 1:3,158 attacker-to-defender cost ratio → Every minute of DDoS-caused downtime costs an average of $22,000, or $1.32 million per hour at scale (MazeBolt) AI is compressing the barrier to entry even further: Purpose-built malicious LLMs now offer tiered access to attack development — from free tools to premium platforms — accelerating botnet recruitment and attack sophistication across the entire booter/stresser ecosystem. What was an emerging trend in December 2024 is now, as of Q4 2025, an operational reality baked into how these services are marketed and sold. What actually reduces exposure in 2026: 1. Always-on cloud-based DDoS scrubbing rather than on-demand activation, given that 89% of attacks resolve in under 10 minutes — there's no time to react manually 2. Rate limiting and behavioural traffic analysis at the application layer, since app-layer attacks are growing even as they're outpaced by network-layer volume 3. Treating short, low-volume "test" bursts as reconnaissance, not noise — booter traffic is frequently a precursor probe before a larger campaign If a $38-an-hour booter service targeted your infrastructure right now, how many minutes before your defences actually engaged? #DDoS #DDoSProtection #CyberSecurity #CISO #NetworkSecurity #BooterService #ThreatIntelligence #CyberRisk #InfoSec #IncidentResponse #NetworkResilience #DDoSMitigation #CloudSecurity #CyberDefense

5 billion passkeys are now in active use worldwide. 97% of identity attacks are still password-based. Passkeys crossed a real adoption threshold in 2025 and 2026. What hasn't caught up is the operational discipline to actually retire the fallback path that keeps the old vulnerability alive. The 2025–2026 numbers (verified sources): → The FIDO Alliance estimates 5 billion passkeys are in active use worldwide as of 2026 → Consumer awareness of passkeys reached 90%, up from 75% a year earlier; 75% have enabled a passkey on at least one account (FIDO State of Passkeys 2026, 11,000 consumers surveyed) → Only 49% of consumers report actually using passkeys whenever possible — enabling and using remain two different behaviours, and the gap between them is where password exposure persists → 87% of enterprises are now actively deploying or piloting FIDO2 passkeys, up sharply from 53% just two years prior (HID/FIDO Alliance 2025 State of Authentication) → Even among organisations that have deployed passkeys, 57% still rely on phishable authentication methods for primary day-to-day sign-in → 87% of organisations still use passwords for customer-facing authentication altogether, and only 2% believe passwords strike the right balance between security and user experience (Descope State of Customer Identity 2025) The data behind why passkeys work when they're actually enforced: Passkeys are phishing-resistant by construction — the private key never leaves the device and can't be typed, copied, or entered into a fake login page, which eliminates the entire class of credential-theft attacks that password-based MFA remains vulnerable to. That's precisely why regulators are moving to eliminate the fallback: several financial regulators phased out SMS one-time passwords in 2025–2026, and NIST's AAL3 standard now requires phishing-resistant authenticators with non-exportable private keys. What actually closes the gap between "deployed" and "default" in 2026: 1. Contextual, post-login enrollment prompts rather than settings-menu-only availability 2. A defined sunset timeline for password fallback, not an indefinite parallel option 3. Recovery flows tested as rigorously as the primary sign-in path — lost-device and account-recovery scenarios are where passwordless programs most often quietly fail 4. Tracking password-reset volume, phishing-related incidents, and the declining share of password-only logins as the real adoption metrics — not just "passkeys enabled" Is your organisation's passkey rollout measured by enrollment numbers or by how much password-based attack surface it's actually eliminated? #Passkeys #KanishkGaur #Passwordless #FIDO2 #IdentitySecurity #CyberSecurity #CISO #ZeroTrust #PhishingResistant #Authentication #CyberRisk #InfoSec #MFA #AccountSecurity #DigitalIdentity

This Raksha Bandhan, we celebrate the bonds that connect us, and our commitment to protecting them in an increasingly digital world. Happy Raksha Bandhan from Athenian Tech! #RakshaBandhan #CyberSecurity #DigitalTrust #AthenianTech

82% of executives believe their existing security policies protect against unauthorised AI agent actions. Only 21% actually have visibility into what those agents can access, which tools they call, or what data they touch. That gap is where the incidents are happening. Agentic AI moved from experimental demo to production infrastructure faster than almost any technology security teams have had to secure. The 2026 numbers (verified sources): → 48% of cybersecurity professionals now rank agentic AI as the single most dangerous attack vector of the year, ahead of deepfakes and passwordless adoption risk (Dark Reading poll) → 92% of security professionals report being concerned about the impact of AI agents on their organisation (Darktrace State of AI Cybersecurity 2026) → 88% of organisations reported a confirmed or suspected AI agent security incident in the past year — that figure rises to 92.7% in healthcare specifically → 82% of executives believe their existing policies protect against unauthorised agent actions; only 21% have actual visibility into agent permissions, tool usage, or data access patterns — and over half of deployed agents operate with no security oversight or logging at all → The average AI agent-related data breach costs roughly $4.7 million; autonomous agents have breached enterprise systems in under two hours during controlled red-team testing → Prompt injection already affects more than a third of deployed agents, according to aggregated field data Where the highest-leverage investment sits in 2026: 1. Full visibility into agent permissions, tool access, and data reach before production deployment — not after an incident 2. Non-human identity governance treated as its own discipline, since every agent is effectively a new machine identity requiring its own access lifecycle 3. Behavioural anomaly detection tuned specifically to agent actions — an agent that normally checks inventory suddenly running privileged commands should trigger immediate response Do you know exactly what every AI agent in your environment is authorised to touch — or only what you assume it's authorised to touch? #AgenticAI #AISecurity #AutonomousAgents #CyberSecurity #CISO #PromptInjection #NonHumanIdentity #OWASP #AIThreat #CyberRisk #InfoSec #MachineLearningSecurity #ZeroTrust #EnterpriseAI

𝐖𝐞 𝐀𝐫𝐞 𝐇𝐢𝐫𝐢𝐧𝐠: 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐧𝐚𝐥𝐲𝐬𝐭 (𝐕𝐀𝐏𝐓) - 𝐈𝐦𝐦𝐞𝐝𝐢𝐚𝐭𝐞 𝐉𝐨𝐢𝐧𝐞𝐫𝐬 𝐏𝐫𝐞𝐟𝐞𝐫𝐫𝐞𝐝 Our organisation is seeking a skilled 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐧𝐚𝐥𝐲𝐬𝐭 to join our team immediately and strengthen our web application security assessment capabilities. 𝐑𝐨𝐥𝐞 𝐎𝐯𝐞𝐫𝐯𝐢𝐞𝐰 The selected candidate will be responsible for conducting comprehensive security assessments using a combined black-box and white-box testing methodology, covering the complete engagement lifecycle: • 𝐒𝐜𝐨𝐩𝐞 & 𝐑𝐞𝐜𝐨𝐧𝐧𝐚𝐢𝐬𝐬𝐚𝐧𝐜𝐞: Defining assessment boundaries and gathering open-source intelligence on target web applications • 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐈𝐝𝐞𝐧𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐢𝐨𝐧: Conducting automated scanning and manual analysis to identify security flaws and logical vulnerabilities • 𝐂𝐨𝐧𝐭𝐫𝐨𝐥𝐥𝐞𝐝 𝐄𝐱𝐩𝐥𝐨𝐢𝐭𝐚𝐭𝐢𝐨𝐧: Safely replicating real-world attack scenarios on staging environments to assess actual risk and potential data exposure, without impacting business operations • 𝐂𝐡𝐞𝐜𝐤𝐥𝐢𝐬𝐭 𝐕𝐞𝐫𝐢𝐟𝐢𝐜𝐚𝐭𝐢𝐨𝐧: Systematically validating all items against the client-defined assessment checklist • 𝐑𝐞𝐩𝐨𝐫𝐭𝐢𝐧𝐠 & 𝐑𝐞𝐦𝐞𝐝𝐢𝐚𝐭𝐢𝐨𝐧: Documenting findings with clear severity ratings and actionable remediation steps for development teams 𝐑𝐞𝐪𝐮𝐢𝐫𝐞𝐦𝐞𝐧𝐭𝐬 • 1–2 𝐲𝐞𝐚𝐫𝐬 𝐨𝐟 𝐫𝐞𝐥𝐞𝐯𝐚𝐧𝐭 𝐞𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞 in Vulnerability Assessment and Penetration Testing (VAPT) • Strong working knowledge of the OWASP Top 10 and common web application vulnerabilities • Proficiency with industry-standard tools (e.g., Burp Suite, Nmap, Nessus/OpenVAS, or equivalent) • Ability to produce clear, well-structured technical reports for both technical and non-technical stakeholders • Immediate availability to join is strongly preferred Interested candidates meeting the above criteria are invited to apply or share their profile at 𝐡𝐫@𝐚𝐭𝐡𝐞𝐧𝐢𝐚𝐧𝐭𝐞𝐜𝐡.𝐜𝐨𝐦. #Cybersecurity #VAPT #PenetrationTesting #Hiring #InfoSecCareers #WebApplicationSecurity