ESET has collaborated with Microsoft, BitSight, Lumen, Cloudflare, CleanDNS, and GMO Registry in a global disruption operation against Lumma Stealer, an infamous malware-as-a-service (MaaS) infostealer. The operation targeted Lumma Stealer infrastructure with all known C&C servers in the past year,… Read More "ESET takes part in global operation to disrupt Lumma Stealer"
ISACA has announced a new certification which will enable security professionals to demonstrate their ability to implement enterprise AI solutions while identifying, assessing, monitoring and mitigating risk in these tools. The global professional association for cybersecurity credentials launched the new… Read More "ISACA Launches AI-Centric Security Management Certification"
.jpeg?w=1140&resize=1140,855&ssl=1 "Mitel MiCollab Vulnerabilities: CVE-2024-35286 and CVE-2024-41713")
Mitel’s MiCollab Unified Communications solutions are widely used by businesses to streamline communications. However, two critical vulnerabilities, CVE-2024-35286 and CVE-2024-41713, have been identified across several versions of Mitel MiCollab. CVE-2024-35286 has been identified in versions 9.8.0.33 and earlier and CVE-2024-41713… Read More "Mitel MiCollab Vulnerabilities: CVE-2024-35286 and CVE-2024-41713"
The field of cybersecurity changes , and Security Operations Centers (SOCs) need to leave behind old signature-focused tools. SOCs now rely on behavioral threat detection and analysis to strengthen their systems. Using behavior-based methods to respond to threats is key… Read More "How Behavioral Analysis Drives Fast Reactions in Today’s SOCs"
Aug 20, 2025Ravie LakshmananBotnet / Cybercrime A 22-year-old man from the U.S. state of Oregon has been charged with allegedly developing and overseeing a distributed denial-of-service (DDoS)-for-hire botnet called RapperBot. Ethan Foltz of Eugene, Oregon, has been identified as the… Read More "DOJ Charges 22-Year-Old for Running RapperBot Botnet Behind 370,000 DDoS Attacks"
Erik Avakian, technical counselor at Info-Tech Research Group, said that he applauds NIST’s efforts to reach out for community feedback, but he also cautioned that it might backfire. For example, what if AI agents flood the comments with self-serving suggestions?… Read More "NIST’s attempts to secure AI yield many questions, no answers"
From Australia’s new ransomware payment disclosure rules to another record-breaking DDoS attack, June 2025 saw no shortage of interesting cybersecurity news 28 Jun 2025 It’s that time of month when ESET Chief Security Evangelist Tony Anscombe looks at the most… Read More "This month in security with Tony Anscombe – June 2025 edition"
It’s easy for cybersecurity teams to think they’re doing everything to stay ahead of data breaches and cyberattacks in this post-pandemic era. For instance, you’ve probably rallied qualified experts to augment your IT ecosystem and supplied them with state-of-the-art threat… Read More "9 Third-Party Risk Cyber Gaps in 2025"
Übermäßig komplexe, unnötige oder unsinnige Sicherheitsmaßnahmen können Mitarbeiter nachhaltig frustrieren. Das schafft neue Risiken. Foto: vchal | shutterstock.com Je mehr Zwang besteht, Systeme und Daten zu schützen, desto besser ist es um die Security bestellt. So zumindest die Annahme einiger… Read More "User-Experience-Irrwege: 5 Fehler, die Ihre Sicherheit gefährden"
AsyncRAT has cemented its place as a cornerstone of modern malware and as a pervasive threat that has evolved into a sprawling network of forks and variants. While its capabilities are not that impressive on their own, it is the… Read More "Navigating the labyrinth of forks"
