Author: CyberMind

ESET researchers uncover a vulnerability in a UEFI application that could enable attackers to deploy malicious bootkits on unpatched systems 16 Jan 2025 ESET researchers have uncovered a vulnerability that, if exploited, would allow bad actors to circumvent UEFI Secure… Read More "UEFI Secure Boot: Not so secure"

Online fraud remains a significant and rapidly expanding threat in today’s cyber threat landscape. According to the FTC, consumers in the U.S. lost a staggering $12.5 billion to fraud in 2024, a 25% surge from the previous year. The most… Read More "Digital Brand Protection in the Age of Impersonation"

AI is replacing attackers The Anthropic report said that the company is finding more evidence that genAI tools are no longer helping cyberattackers so much as they are replacing them. “A cybercriminal used Claude Code to conduct a scaled data… Read More "Anthropic detects the inevitable: genAI-only attacks, no humans involved"

Cyberbullying is a fact of life in our digital-centric society, but there are ways to push back 27 Aug 2025  •  , 4 min. read For better or worse, the digital world in many ways resembles its physical counterpart. Unfortunately,… Read More "Don’t let “back to school” become “back to bullying”"

The zero-day vulnerability in Progress Software’s MOVEit Transfer product is being exploited by the Clop ransomware gang and other copycat cybercriminal groups to expedite the theft of sensitive data from customer databases. To protect your organization from compromise, follow the… Read More "The MOVEit Zero-Day Vulnerability: How to Respond"

Das sieht auch Toby Basalla, Gründer und Principal Data Consultant bei Synthelize, so. “Wenn Chaos herrscht, wer weiß dann noch, welche Red Flags wirklich ernst zu nehmen sind? Sie würden wahrscheinlich auch nicht Daten rund um die Uhr ohne Redundanz… Read More "7 Anzeichen für akuten MSSP-Bedarf"

The ToolShell bugs are being exploited by cybercriminals and APT groups alike, with the US on the receiving end of 13 percent of all attacks 25 Jul 2025 The ESET research team has released their findings about exploitation of CVE-2025-53770… Read More "ToolShell attacks hit organizations worldwide"

The U.S. Federal Government passed the Computer Fraud and Abuse Act (18 U.S.C.§1030) (CFAA) in 1986 as an amendment to the Comprehensive Crime Control Act of 1984, which included the first federal computer crime statute. Since enacting the CFAA, congress… Read More "What is the Computer Fraud and Abuse Act (CFAA)?"

NetScaler ADC and NetScaler Gateway 14.1-47.48 and later releases NetScaler ADC and NetScaler Gateway 13.1-59.22 and later releases of 13.1 NetScaler ADC 13.1-FIPS and 13.1-NDcPP 13.1-37.241 and later releases of 13.1-FIPS and 13.1-NDcPP NetScaler ADC 12.1-FIPS and 12.1-NDcPP 12.1-55.330 and later releases… Read More "Attackers exploiting NetScaler ADC and Gateway zero day flaw, Citrix warns"

ESET researchers have discovered a previously unknown vulnerability in WinRAR, being exploited in the wild by Russia-aligned group RomCom. This is at least the third time that RomCom has been caught exploiting a significant zero-day vulnerability in the wild. Previous… Read More "RomCom and others exploiting zero-day vulnerability"