If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious

Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe

Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next.

ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026

A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account

The cybersecurity market is often making it tougher for SMBs to keep threats at bay

Autonomous AI agents go on a hacking spree, and Microsoft ships what used to be a year's worth of security patches in one go – here's how to keep pace

Con artists are targeting timeshare owners who want out – and some victims are hit twice

When phishing can increasingly pass familiar checks, avoiding or limiting the damage depends on how quickly your company can detect and contain the attack

As AI lets anyone build software, here’s how to vet that shiny new app before it exposes your data

Crypto ATM scams often follow a predictable script – here’s how to recognize it and what to do if you’ve already been caught out

Fake giveaways, free Robux generators and lookalike login pages all target the same thing – your Roblox account

As AI opens new paths to company data while making familiar attacks faster and cheaper, SMBs need protection designed around the time and expertise available to operate it

Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images

ESET researchers document SparroWocky, the new flagship backdoor of the FamousSparrow APT group

As AI adoption expands the attack surface and adds to the security workload, businesses need automation backed by experts

LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor

AI scams are now hyper-realistic. But there’s one simple way to see through them.

Don’t panic if you spot an illegally created image or video of you online – there are ways to request its removal

Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's cybersecurity news

It’s getting cheaper and easier for cybercriminals to research potential victims. Here’s what’s still in your control.

Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap.

And will today’s surge in AI-driven vulnerability discovery eventually make tomorrow’s software safer?

The incident involving OpenAI models shows that autonomous hacks make human oversight more important, not less

AI took center stage, but the clearest lesson was less about what AI can do than about who is accountable when something goes wrong

AI tutors can offer useful support, but their quality and safeguards vary widely. Here’s what parents should check before handing one to a child.

OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a packed July roundup

The screenshot may look convincing, but it doesn’t necessarily prove that the payment, booking or conversation is genuine

ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI Secure Boot by exploiting decade-old vulnerabilities

A view of the H1 2026 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts.

AI is changing cybercrime, but SMB cyber readiness still largely depends on closing the familiar gaps

Three-day patching deadlines, exposed fuel-tank systems, scams costing billions of dollars, and social media bans for children all gave Tony plenty to unpack in June 2026

Your inbox is an identity system all of its own: whoever owns it may own a lot more

Your business may be small, but its attack surface is anything but. Readiness is the first step to resilience.

ESET Research analyzes Gamaredon’s new toolset and the group’s growing reliance on legitimate online services to hide its C&C infrastructure and exfiltrate stolen data

ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical analysis, infrastructure tracking, and affiliate-level insights

ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen

Many manufacturing plants depend on OT systems that stay in service for many years. That long run can hide significant cybersecurity risks.

ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness

A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages

A shift in operational pattern of the infamous Vietnam-aligned APT group

A company that's expecting a cyberattack but hasn’t actively prepared for it risks making the hardest decisions at the worst possible moment

Every organisation gets audited. The question is who does the auditing.

Your child’s first data breach may happen before they’ve even opened a bank account. Here’s how to keep their digital life safe.

In this roundup, Tony looks at attacks against Polish water treatment facilities, how AI-directed attacks failed in Mexico, and what Google believes is the first AI-generated zero-day exploit

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026

Using chatbots for medical advice could elicit hallucinations and even expose you to security and privacy risks. Here’s what’s at stake and how to stay safe.

The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compromise

Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and personal data

ESET researchers describe new tools and techniques that the Webworm APT group recently added to its arsenal