Author: CyberMind

A new cyber-attack targets consumers and small and medium businesses worldwide to both steal sensitive cryptocurrency data and mine Monero, a decentralized cryptocurrency focused on private, untraceable transactions. The malicious campaign was first detected by Unit 42, the research arm… Read More "New Malicious Campaign Delivers Vidar Stealer and Monero Crypto Miner"

Thanks to AI, a lone threat actor was able to execute a cyber-attack that would have otherwise taken weeks in just 72 hours, according to a new report by Sygnia. The Israeli security vendor’s reeport, Inside an AI-Assisted Cloud Attack: Familiar Techniques at… Read More "Threat Actors Uses Agentic AI to Rapidly Compromise Cloud Target"

Australian government security experts have warned content management system (CMS) customers of a “highly scaled” effort to scan for and exploit vulnerabilities in their products. The Australian Cyber Security Centre (ACSC) said in an update on July 9 that many SMBs… Read More "Australian Cyber Agency Warns of Global CMS Exploitation Campaign"

An Armenian national extradited from Ukraine has pleaded guilty to charges related to his role in notorious ransomware outfit Ryuk. Karen Serobovich Vardanyan, 34, pleaded guilty to conspiracy and computer fraud in a federal court in Portland on July 8.… Read More "Hacker Extradited from Ukraine Pleads Guilty to Ryuk Ransomware Charge"

Five people from London have been charged as part of a multi-year investigation into a notorious fraud platform thought to be responsible for millions of scam calls. The charge list includes conspiracy to supply articles for use in connection with… Read More "Five Charged in “Russian Coms” Fraud Platform Case"

Lidl has warned customers in several European countries to beware of phishing messages after revealing that their personal information may have been stolen from a third-party IT provider. The supermarket giant, owned by German retail conglomerate Schwarz Group, said customers… Read More "Lidl Notifies Customers of Third-Party Data Breach"

A new form of malware is targeting macOS users by impersonating Apple’s built-in crash-reporting component to trick victims into installing a password-stealing payload. As detailed by Jamf Threat Labs, CrashStealer is a macOS infostealer designed to harvest login details, cryptocurrency… Read More "New MacOS Malware Exploits Legitimate Developer ID"

The US Department of Defense (DoD) has suspended the Cybersecurity Maturity Model Certification (CMMC) Phase II requirements until it reviews the program to allow for more innovation in the US defense industrial base (DIB). Originally scheduled to come into effect… Read More "Pentagon Suspends CMMC Phase II Requirements for Defense Contractors"

The UK’s leading cybersecurity agency has urged device manufacturers to help incident response teams by making it easier for them to collect evidence after a compromise. Chris A, technical director networking and infrastructure at the National Cyber Security Centre (NCSC),… Read More "NCSC Calls on Vendors to Embed ‘Forensic Observability’ in Network Dev"

Google’s Chrome security team has released security patches for 370 vulnerabilities affecting the browser, including seven critical ones. The patches were announced on July 29 as part of a Chrome update to version 151 for Windows, Mac (151.0.7922.71/.72) and Linux… Read More "Google Releases Patches for 370 Vulnerabilities in Chrome 151"