KATHMANDU, Oct 29: The National Cybersecurity Center has issued a cybersecurity advisory.
Noting that serious security vulnerabilities, including 'Node2Shell' have recently been identified in the Node.js runtime, the Center has urged relevant entities to check the versions of the Node.js runtime used in their systems and web applications and to update them to the latest versions.
Govt issues cyber security advisory for employees
In a circular issued on Wednesday, the Center also directed that valid SSL/TLS certificates be implemented to ensure the security of websites.
The Center under the Office of Information Technology and E-Governance within the Office of the Prime Minister and Council of Ministers has communicated to federal ministries, commissions, secretariats, provincial ministries, the Municipal Association of Nepal, and the National Association of Rural Municipalities, urging them to effectively implement website security standards.
Given the rising cybersecurity risks, the Center has stated that encryption mechanisms must be made mandatory on websites to ensure the secure exchange of user data. The directive specifies that a valid SSL/TLS certificate utilizing TLS 1.2 or TLS 1.3 protocols must be employed for this purpose.
Furthermore, the Center has directed that websites be configured to operate exclusively via https, and that outdated or insecure protocols such as TLS 1.2 and TLS 1.3 be completely disabled.
The Center has urged that arrangements be made for the regular renewal of SSL/TLS certificates before they expire. It has also emphasized the high-priority implementation of other essential security standards to mitigate the risk of cyber attacks stemming from vulnerabilities in website security.
