Author: CyberMind

Shay Berkovich, Threat Researcher bei Wiz, ordnet ein: “Diese krypto-basierten Angriffe sind auf dem Vormarsch. Vor allem, weil sich Kubernetes-Cluster als hocheffiziente Execution-Plattformen ideal für solche Workloads eignen.” Beispielhaft führt der Sicherheitsexperte die von seinem Arbeitgeber identifizierten Cryptomining-Angriffskampagnen “PyLoose” und… Read More "Kubernetes Security: Wie Sie Ihre Cluster (besser) absichern"

As is their wont, cybercriminals waste no time launching attacks that aim to cash in on the frenzy around the latest big thing – plus, what else to know before using DeepSeek 31 Jan 2025  •  , 4 min. read… Read More "How scammers are exploiting DeepSeek’s sudden rise"

The European Union’s (EU’s) General Data Protection Regulation (GDPR) is one of the world’s most robust data privacy laws. The regulation requires all organizations that do business in the EU or collect data from EU residents to comply with various… Read More "Free GDPR Vendor Security Questionnaire Template (2025 Edition)"

Left unchecked, AI’s energy and carbon footprint could become a significant concern. Can our AI systems be far less energy-hungry without sacrificing performance? 04 Feb 2025 Artificial intelligence (AI) models require massive computational power, which in turn demands tremendous amounts… Read More "AI will eat all our energy, unless we make it tiny"

ESG frameworks are guidelines, metrics, and criteria that allow companies and investors to develop sustainability reporting standards and evaluate environmental, social, and governance risks. Common ESG frameworks include the Global Reporting Initiative (GRI), Carbon Disclosure Project (CDP), and Task Force… Read More "What are ESG Frameworks? Corporate Sustainability & ESG Risks"

The attackers executed SOQL queries to retrieve information associated with Salesforce objects such as Cases, Accounts, Users, and Opportunities and to extract data from them, after which they deleted the query jobs. However, the logs were not impacted so organizations… Read More "Attackers steal data from Salesforce instances via compromised AI live chat tool"

Don’t wait for a costly breach to provide a painful reminder of the importance of timely software patching 05 Feb 2025  •  , 5 min. read Vulnerability exploitation has long been a popular tactic for threat actors. But it’s becoming… Read More "How organizations can master vulnerability management"

The Information Security Registered Assessors Program is a cybersecurity initiative created by the Australian Cyber Security Centre (ACSC), a subsidiary of the Australian Signals Directorate (ASD). IRAP assessments utilize cybersecurity standards set by the Australian Government Information Security Manual (ISM)… Read More "What is the InfoSec Registered Assessors Program (IRAP)?"

As a result of this flaw, an attacker who gains access to a Docker container could leverage the API to create a new Docker container and give it access to a volume that hosts, for example, a database used by… Read More "Critical Docker Desktop flaw allows container escape"