Author: CyberMind

The NIST Artificial Intelligence Risk Management Framework (AI RMF) is a recent framework developed by The National Institute of Standards and Technology (NIST) to guide organizations across all sectors in the use of artificial intelligence (AI) and its systems. As… Read More "The NIST AI Risk Management Framework: Building Trust in AI"

Pro-Russia Z-Pentest Alliance linked to the dam attack A video posted on Telegram purports to show the April attack on the Norwegian dam. Ron Fabela, director of industrial cybersecurity at ABS Consulting, who stumbled on the video in April, says it… Read More "Russia-linked European attacks renew concerns over water cybersecurity"

In this post, the three major cyber threats facing businesses impacted by the Optus breach of September 2022 are discussed. Security responses for each threat are also mentioned to help you reduce the potential of these risks developing into breaches.… Read More "Top 3 Threats to Businesses Impacted by the Optus Data Breach"

Apart from affected clients running Windows 11 v23H2 and Windows 11 v22H2, the bug affected systems running Windows Server 2022 and Windows Server 2019. The company resolved the issue without requiring manual action from users, noting that affected devices should… Read More "Microsoft fixes the fixes that broke Windows tools"

The US National Institute of Standards and Technology (NIST) has published new guidelines it claims will help organizations optimize their efforts to detect face morphing software. Face morphing is a type of deepfake technology that enables threat actors to blend… Read More "NIST Unveils Guidelines to Help Spot Face Morphing Attempts"

Often regarded as the Californian version of the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) aim’s to increase consumer rights by giving California residents greater control over the use of their personal data. The CCPA heavily… Read More "Meeting the Third-Party Risk Requirements of the CCPA"

Als Head of Global Cyber Security (CISO) & IT Transformation Officer bei Drees & Sommer will Sotirios Siozos das Thema Informationssicherheit vorantreiben. Drees & Sommer SE Am 1. Juli 2025 trat Sotirios Siozos seine neue Stelle als “Head of Global… Read More "Personalie: Sotirios Siozos ist neuer CISO bei Drees & Sommer"

Researchers have engineered a new version of the ClickFix social engineering technique using prompt injection to trick agentic AI into performing a range of malicious actions. Guardio dubbed this “PromptFix” – a variation on the ClickFix attacks that use a fake… Read More "“PromptFix” Attacks Could Supercharge Agentic AI Threats"

In today’s interconnected business landscape, outsourcing to third-party vendors and service providers is an effective method for most organizations to improve operational efficiency and lower financial costs. However, as businesses form third-party partnerships, they inherit potential risks and increase the… Read More "Building a Robust Vendor Risk Management Dashboard"