ESET Calls for Windows 10 Migration Before Support Ends

January 9, 2025January 9, 2025

ESET Urges Users to Upgrade to Windows 11 Before Support Ends for Windows 10

ESET has recently issued a critical warning for users still operating on Windows 10, advising them to upgrade to Windows 11 or explore alternative operating systems. With the end of updates for Windows 10 set for October 2025, the cybersecurity company emphasizes the increased security risks associated with remaining on an unsupported platform. As cybercriminals are likely to exploit vulnerabilities once support ceases, now is the perfect time to make the transition.

The Security Risks of Staying on Windows 10

ESET’s warnings highlight significant dangers as the deadline approaches. According to Thorsten Urbanski, director of marketing and communication at ESET DACH, the current situation is more perilous than when support for Windows 7 ended in early 2020. He noted that back then, only about 20% of users were still on Windows 7, while over 70% had already migrated to Windows 10. The numbers reveal a stark contrast, indicating that many users may still be vulnerable if they do not upgrade soon.

Why You Should Upgrade to Windows 11

Here are some compelling reasons to upgrade to Windows 11:

Enhanced Security Features: Windows 11 includes updated security protocols designed to protect against modern cyber threats.
Improved User Experience: The new OS offers a more intuitive interface and better performance.
Support for New Hardware: Windows 11 is optimized for the latest hardware, ensuring smoother operation.

ESET also suggests that users with older devices that cannot support Windows 11 consider switching to Linux as a viable alternative.

Options for Extended Support

For those who may not be ready to upgrade immediately, Microsoft does offer an extended support option. However, this comes at an additional cost, which may not be feasible for all users. It’s crucial to weigh the benefits of upgrading against the risks of remaining on an unsupported system.

Conclusion: Act Now to Protect Your System

The time to act is now. As the deadline for Windows 10 support looms, users must prioritize their cybersecurity by upgrading to Windows 11 or an alternative operating system. Protecting your data and devices should be a top priority.

For more information about the transition to Windows 11 and detailed cybersecurity tips, check out ESET’s official blog here.

Do you have thoughts on upgrading to Windows 11? Share your experiences or read related articles to stay informed about cybersecurity best practices!

Password Spraying Attacks Hit Citrix NetScaler Devices

December 18, 2024December 18, 2024

Citrix has issued a warning regarding ongoing password spraying attacks targeting NetScaler and NetScaler Gateway appliances, both on-premises and in the cloud. These attacks can lead to denial-of-service disruptions, especially if the appliances are not sized to handle excessive login attempts. Citrix reports a rise in failed authentication attempts linked to broader brute-force campaigns affecting various security devices. To mitigate risks, organizations are advised to implement Multi-Factor Authentication (MFA), establish strict authentication policies, reduce log retention periods, and use CAPTCHA to prevent automated logins. Staying informed and adopting cybersecurity best practices is crucial for protection against these evolving threats.

US Targets Chinese Firm After Major Ragnarok Ransomware Attack

December 11, 2024December 11, 2024

The U.S. Treasury Department has sanctioned Chinese cybersecurity firm Sichuan Silence for exploiting a critical vulnerability, CVE-2020-12271, in the Sophos XG firewall, which contributed to the spread of Ragnarok ransomware in 2020. The firm compromised around 81,000 firewalls globally, with over 25% located in the U.S. In response, the U.S. is offering bounties up to $10 million for information on Sichuan Silence and its researcher, Guan Tianfeng. This move reflects the U.S. commitment to enhancing cybersecurity and protecting critical infrastructure amidst growing cyber threats. Sophos’ CISO praised the sanctions as a positive step against cybercrime.

Apache Patches Vulnerability in Traffic Control Software

December 27, 2024December 27, 2024

On December 23, Apache released critical patches for a severe vulnerability, CVE-2024-45387, affecting Apache Traffic Control versions 8.0.0 and 8.0.1. Rated 9.9 in severity, this flaw allows attackers with admin privileges to inject malicious SQL commands via crafted PUT requests, risking unauthorized data access and potential breaches of content delivery network (CDN) services. Experts urge organizations to promptly update to the latest version, review user roles, and monitor for unauthorized access to mitigate risks. The situation highlights the importance of timely security updates to protect data integrity and maintain CDN operations.

Meet the Woman Building Africa’s Cybersecurity Talent Hub

December 13, 2024December 13, 2024

Confidence Staveley is revolutionizing Africa’s cybersecurity landscape through her CyberGirls Fellowship, empowering over 3,000 young women, 60% of whom have secured jobs with a 400% income increase. Honored as a 2024 “Power Player” by SC Media, she is addressing the gender gap in a field where women represent only 9% of the workforce. Staveley leads the CyberSafe Foundation, focusing on safety and inclusion, and aims to educate individuals about digital risks while providing free resources and mentorship. Her vision is to position Africa as a global cybersecurity talent hub, inspiring the next generation of women in tech.

Chinese Malware Targets IoT Devices with Hiatus RAT

December 20, 2024December 20, 2024

The FBI has issued a cybersecurity alert regarding the Hiatus RAT botnet, a Chinese-backed malware operation targeting Internet of Things (IoT) devices like smart cameras and DVRs. This malware, classified as a Remote Access Trojan, allows attackers to gain remote control and exploit sensitive data. The campaign primarily aims at U.S. government agencies and contractors, using known vulnerabilities and default passwords. IoT devices are particularly vulnerable due to infrequent updates. The FBI recommends applying firmware updates, changing default passwords, and limiting device exposure to enhance security. The situation highlights the urgent need for improved IoT cybersecurity measures.

Ukrainian Military Hit by Sandworm Cyberespionage Attack

December 20, 2024December 20, 2024

A Russian cyberespionage campaign, linked to the state-backed group Sandworm (UAC-0125), is targeting Ukrainian soldiers through the Army+ military app. The operation involves creating fake Army+ websites that trick users into downloading a trojanized installer, allowing hackers to secretly access devices and steal data. Sandworm, known for escalating cyberattacks against Ukraine, has previously aimed to exfiltrate sensitive communications from platforms like Telegram and Signal. This situation highlights the urgent need for improved cybersecurity measures among military personnel to recognize and combat phishing and fraudulent applications effectively.