Author: CyberMind

A new Chinese-speaking cybercrime group has expanded its reach from East Asia into Europe and Africa, while rapidly overhauling the malware it uses to break into corporate networks. According to new analysis from Proofpoint, the actor, tracked as TA4922, is… Read More "Chinese-Speaking Actor TA4922 Widens Its Global Reach"

Supplier risk is a top contributor to data breaches. On average, a single data breach costs companies $4.9 million, according to the 2024 Cost of a Data Breach Report by IBM. To counteract this growing threat, many organizations are investing… Read More "Best Vendor Risk Management Software for 2026"

The Microsoft Detection and Response Team (DART) has issued advice on how organizations and their security teams should respond to the rising issue of AI-powered cyber threats. “AI is amazing, it makes our job easier. “But the same AI that’s… Read More "AI Adoption Creates New Opportunities for Attackers"

Infrastructure security is a pillar of cybersecurity that focuses on protecting critical systems, hardware, and software assets from physical and cyber threats. Both cyber threats and physical threats can cause significant damage to an organization’s infrastructure security. Common cyber threats… Read More "Free Infrastructure Security Questionnaire Template (2026 Edition)"

A critical vulnerability in the Everest Forms Pro plugin for WordPress has been actively exploited to hijack vulnerable websites. According to new analysis from WordPress security firm Wordfence, the remote code execution flaw lets unauthenticated attackers run PHP on a… Read More "Everest Forms Pro Vulnerability Allows Remote Code Execution"

Storing large amounts of sensitive data and allocating minimal resources to cybersecurity makes the education sector attractive to cybercriminals. Education organizations are also a prime target for cybercrime, given their historic reliance on large distributed networks, the rise of remote… Read More "The 5 Biggest Cyber Threats For the Education Sector in 2026"

The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public AI tools. Security teams responded with usage policies, domain blocks, and data loss prevention rules. That response made sense at the time.… Read More "Shadow AI’s Real Threat Is Access Control"

Business leaders are unsure what threat intelligence is or how it can help them, potentially putting organizations at increased to cyber threats, a new research paper has warned. Launched at Infosecurity Europe 2026, the Bridging the Gap Between Threat Intelligence… Read More "Business Leaders Lack Understanding of Threat Intelligence"

The National Institute of Standards and Technology (NIST) developed the NIST 800-171 framework to set guidelines and security requirements for protecting controlled unclassified information (CUI). NIST first created the framework in June 2015 but has since revised the publication several… Read More "How to Comply with NIST SP 800-171 Revision 3 in 2026"

The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands out to affiliates for impairing system defenses before deploying the encryptor. This mature portfolio of EDR-terminating tools is… Read More "The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes"