LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor

AI scams are now hyper-realistic. But there’s one simple way to see through them.

Don’t panic if you spot an illegally created image or video of you online – there are ways to request its removal

Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's cybersecurity news

It’s getting cheaper and easier for cybercriminals to research potential victims. Here’s what’s still in your control.

Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap.

And will today’s surge in AI-driven vulnerability discovery eventually make tomorrow’s software safer?

The incident involving OpenAI models shows that autonomous hacks make human oversight more important, not less

AI took center stage, but the clearest lesson was less about what AI can do than about who is accountable when something goes wrong

AI tutors can offer useful support, but their quality and safeguards vary widely. Here’s what parents should check before handing one to a child.

OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a packed July roundup

The screenshot may look convincing, but it doesn’t necessarily prove that the payment, booking or conversation is genuine

ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI Secure Boot by exploiting decade-old vulnerabilities

A view of the H1 2026 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts.

AI is changing cybercrime, but SMB cyber readiness still largely depends on closing the familiar gaps

Three-day patching deadlines, exposed fuel-tank systems, scams costing billions of dollars, and social media bans for children all gave Tony plenty to unpack in June 2026

Your inbox is an identity system all of its own: whoever owns it may own a lot more

Your business may be small, but its attack surface is anything but. Readiness is the first step to resilience.

ESET Research analyzes Gamaredon’s new toolset and the group’s growing reliance on legitimate online services to hide its C&C infrastructure and exfiltrate stolen data

ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical analysis, infrastructure tracking, and affiliate-level insights

ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen

Many manufacturing plants depend on OT systems that stay in service for many years. That long run can hide significant cybersecurity risks.

ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness

A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages

A shift in operational pattern of the infamous Vietnam-aligned APT group

A company that's expecting a cyberattack but hasn’t actively prepared for it risks making the hardest decisions at the worst possible moment

Every organisation gets audited. The question is who does the auditing.

Your child’s first data breach may happen before they’ve even opened a bank account. Here’s how to keep their digital life safe.

In this roundup, Tony looks at attacks against Polish water treatment facilities, how AI-directed attacks failed in Mexico, and what Google believes is the first AI-generated zero-day exploit

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026

Using chatbots for medical advice could elicit hallucinations and even expose you to security and privacy risks. Here’s what’s at stake and how to stay safe.

The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compromise

Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and personal data

ESET researchers describe new tools and techniques that the Webworm APT group recently added to its arsenal

A complete decoupling from US technology is neither realistic nor necessary, but the changing environment does require nations and companies to reassess their relationships and dependencies

Conflict is a boon for opportunistic fraudsters. Look out for their ploys.

ESET researchers uncovered new activities attributed to FrostyNeighbor, updating its compromise chain to support the group’s continual cyberespionage operations

Smart glasses allow anyone to track and record the world around them. That could put your data and the privacy of those nearby at risk.

ESET researchers uncovered fraudulent apps on Google Play that claim to provide the call history “for any number” and had been downloaded more than seven million times before being taken down

How come it’s still possible to ‘secure’ an online account with a six-digit string?

ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via backdoor-laced Windows and Android games

Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 - here's some of what made the headlines this month

A breach claims the systems as well as the confidence that was, in retrospect, a major vulnerability

ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions

ESET researchers discover another iteration of NGate malware, this time possibly developed with the assistance of AI

An attack is what you see, but a business operation is what you’re up against

Ignoring a real breach notification invites risk, but falling for a bogus one could be even worse. Stop reacting on autopilot.

Your biggest risk may be a vendor you trust. How can SMBs map their third-party blind spots and build operational resilience?

If you’ve been a victim of fraud, you’re likely already a lead on a ‘sucker list’ – and if you’re not careful, your ordeal may be about to get worse.

Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy.