We recently observed a multi-stage macOS intrusion campaign conducted by the North Korean state-sponsored threat group Sapphire Sleet (also tracked as BlueNoroff/UNC1069).
Recently, somebody going by the name of Nightmare Eclipse has been having an online beef with Microsoft around security vulnerabilities they claim they had been trying to report. Their posts read...
Discussion of PQC relevant statistics that we see across our customers and other data sources.
Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ. [...]
A new campaign orchestrated by a previously undocumented threat actor has targeted cryptocurrency organizations with an aim to facilitate digital asset theft using recruitment-themed social...
Out-of-bounds Write vulnerability (CVE-2026-42250) has been found in bzip2 software.
Use of Weak Credentials vulnerability (CVE-2026-4377) has been found in DWR-X1820 router.
Tehran’s hackers have grown more organized, more coordinated and more willing to use artificial intelligence for influence operations in recent months — and they have demonstrated many of those...
Cisco’s evaluation of 15 leading AI models from OpenAI, Anthropic, Google, Amazon and xAI “found that single-turn attack success rate (ASR) is not a reliable proxy for what happens when an...
The newly-installed head of U.S. Cyber Command has commissioned a pair of studies, including one by a major outside research organization, to examine how the military’s digital warfare arm might...
The Trump administration is pursuing funding deals with a group of drone companies as part of its effort to increase domestic production and lower the costs of the increasingly vital weapons,...
The 2026 FIFA World Cup will be the largest sporting event ever staged. Across 39 days, 16 host cities in three nations will host 104 matches, an expanded 48-team tournament and an estimated...
Why are there more antennas on Svalbard than anywhere else on Earth? Svalbard of all places, where cats and childbirth are banned and there are more polar bears than people? This cluster of...
When Pope Leo XIV presented a 42,300-word open letter to the world’s 1.4 billion Catholics on Monday, calling for protections against the rise of artificial intelligence, he was joined by...
SpaceX and the Pentagon have been bickering about the price of using Starshield satellite service during the Iran war, according to a Reuters report published today. It appears that SpaceX asked...
The Trump administration reached an agreement with Volvo Car AB that will allow the automaker to avoid a U.S. ban on connected vehicles tied to China. Volvo, which is majority-owned by China’s...
Russia is relentlessly targeting Britain’s infrastructure and democracy while there is only a narrowing technological window to stay ahead of a fast-developing China, the head of the spy agency...
GuidePoint Security, a cybersecurity advisor and services partner organizations rely on to protect what matters most, announced launch... The post GuidePoint Security launches supply chain...
The U.S. White House, through its Office of Management and Budget, issued a new federal cybersecurity directive ordering... The post OMB cyber directive pushes centralized logging, AI-driven...
An unpatched zero-day vulnerability in the Gogs self-hosted Git service can allow attackers to gain remote code execution (RCE) on Internet-facing instances. [...]
MSPs don't lack security data. They struggle to separate real threats from alert noise. Kaseya explains how SIEM helps MSPs improve visibility, reduce fatigue, and respond faster. [...]
The 2026 World Cup presents major cyber risks from ransomware groups, state-aligned actors, and other groups targeting critical infrastructure. Learn more here. The post 2026 World Cup: Discussing...
This white paper presents a concrete case study demonstrating the creation of a heap overflow vulnerability through the exploitation of the DICOM file format.
Customer data from more than 350 hotels around the world may have been accessed as part of realistic reservation-hijacking scams.
Also, missing school iPad resurfaced after coach’s kids uploaded video to YouTube
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026
A Romanian national was sentenced this week to 56 months in federal prison for breaking into an Oregon state government computer network and fr cyberattacks targeting dozens of other U.S. victims. [...]
This diary walks through a recent Akira-attributed intrusion at a mid-sized organization. The reconstruction used only SSLVPN syslog and Windows EVTX exports. No EDR. No memory captures. Every...
Many organizations can detect network issues quickly, but investigations and coordination often slow incident resolution. This webinar explores how automation and AI-assisted workflows can help IT...
In April 2026, the American insurance holding company Kemper Corporation was named by the ShinyHunters ransomware group in a "pay or leak" extortion campaign. The attackers allegedly accessed...