Being seen as reliable is good for ‘business’ and ransomware groups care about 'brand reputation' just as much as their victims

If you don’t look inside your environment, you can’t know its true state – and attackers count on that

Interpreting the vast cybersecurity vendor landscape through the lens of industry analysts and testing authorities can immensely enhance your cyber-resilience.

Is your organization’s senior leadership vulnerable to a cyber-harpooning? Learn how to keep them safe.

Identity is effectively the new network boundary. It must be protected at all costs.

MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook

From LinkedIn to X, GitHub to Instagram, there are plenty of opportunities to share work-related information. But posting could also get your company into trouble.

Data exposure by top AI companies, the Akira ransomware haul, Operation Endgame against major malware families, and more of this month's cybersecurity news

Online disagreements among young people can easily spiral out of control. Parents need to understand what’s at stake.

Social media influencers can provide reach and trust for scams and malware distribution. Robust account protection is key to stopping the fraudsters.

Why your business needs the best-of-breed combination of technology and human expertise

Here’s how open-source intelligence helps trace your digital footprint and uncover your weak points, plus a few essential tools to connect the dots

ESET researchers have discovered a network implant used by the China-aligned PlushDaemon APT group to perform adversary-in-the-middle attacks

Does your chatbot know too much? Here's why you should think twice before you tell your AI companion everything.

Look no further to learn how cybercriminals could try to crack your vault and how you can keep your logins safe

From unintentional data leakage to buggy code, here’s why you should care about unsanctioned AI use in your company

Former colleagues and friends remember the cybersecurity researcher, author, and mentor whose work bridged the human and technical sides of security

ESET Chief Security Evangelist Tony Anscombe highlights some of the key findings from the latest issue of the ESET APT Activity Report

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2025 and Q3 2025

How a fast-growing scam is tricking WhatsApp users into revealing their most sensitive financial and other data

Think you could never fall for an online scam? Think again. Here's how scammers could exploit psychology to deceive you – and what you can do to stay one step ahead

When every minute counts, preparation and precision can mean the difference between disruption and disaster

From the end of Windows 10 support to scams on TikTok and state-aligned hackers wielding AI, October's headlines offer a glimpse of what's shaping cybersecurity right now

Families that combine open communication with effective behavioral and technical safeguards can cut the risk dramatically

Deepfakes are blurring the line between real and fake and fraudsters are cashing in, using synthetic media for all manner of scams

Here’s what to know about a recent spin on an insider threat – fake North Korean IT workers infiltrating western firms

With cybersecurity talent in short supply and threats evolving fast, managed detection and response is emerging as a strategic necessity for MSPs

Shadow IT leaves organizations exposed to cyberattacks and raises the risk of data loss and compliance failures

ESET research analyzes a recent instance of the Operation DreamJob cyberespionage campaign conducted by Lazarus, a North Korea-aligned APT group

Here’s what to know about the malware with an insatiable appetite for valuable data, so much so that it tops this year's infostealer detection charts

Ransomware rages on and no organization is too small to be targeted by cyber-extortionists. How can your business protect itself against the threat?

Some Minecraft mods don’t help build worlds – they break them. Here’s how malware can masquerade as a Minecraft mod.

Could a simple call to the helpdesk enable threat actors to bypass your security controls? Here’s how your team can close a growing security gap.

As the number of software vulnerabilities continues to increase, delaying or skipping security updates could cost your business dearly.

Cybercriminals have tricked X’s AI chatbot into promoting phishing scams in a technique that has been nicknamed “Grokking”. Here’s what to know about it.

Is the ride-hailing app secretly tracking you? Not really, but this iOS feature may make it feel that way.

Never rely on just a password, however strong it may be. Multi-factor authentication is essential for anyone who wants to protect their online accounts from intruders.

Company leaders need to recognize the gravity of cyber risk, turn awareness into action, and put security front and center

Looks can be deceiving, so much so that the familiar icon could mask malware designed to steal your data and money.

Manufacturers operate in one of the most unforgiving threat environments and face a unique set of pressures that make attacks particularly damaging

ESET researchers have discovered campaigns distributing spyware disguised as Android Signal and ToTok apps, targeting users in the United Arab Emirates

We're kicking off the month with a focus on the human element: the first line of defense, but also the path of least resistance for many cybercriminals

The past 30 days have seen no shortage of new threats and incidents that brought into sharp relief the need for well-thought-out cyber-resilience plans

You could be getting more than you bargained for when you download that cheat tool promising quick wins

Malware operators collaborate with covert North Korean IT workers, posing a threat to both headhunters and job seekers

What you see is not always what you get as cybercriminals increasingly weaponize SVG files as delivery vectors for stealthy malware

Notorious APT group Turla collaborates with Gamaredon, both FSB-associated groups, to compromise high‑profile targets in Ukraine

Long known to be a sweet spot for cybercriminals, small businesses are more likely to be victimized by ransomware than large enterprises

HybridPetya is the fourth publicly known real or proof-of-concept bootkit with UEFI Secure Boot bypass functionality

UEFI copycat of Petya/NotPetya exploiting CVE-2024-7344 discovered on VirusTotal