1+ week, 4+ day ago   (1112+ words) ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI Secure Boot by exploiting decade-old vulnerabilities The full list of the software products relying on the reported shims along with their affected versions is…...

3+ week, 1+ day ago   (583+ words) AI is changing cybercrime, but SMB cyber readiness still largely depends on closing the familiar gaps AI is changing attackers’ toolkits. It can help criminals write better lures, scale social engineering and speed up reconnaissance, all while generally lowering the…...

3+ week, 4+ day ago   (135+ words) Three-day patching deadlines, exposed fuel-tank systems, scams costing billions of dollars, and social media bans for children all gave Tony plenty to unpack in June 2026 It's that time of month when ESET Chief Security Evangelist Tony Anscombe looks back at…...

3+ week, 5+ day ago   (457+ words) Email is not just a means of communication, or yet another online account. In both our personal and work lives, it holds the keys to the kingdom: possibly even a mechanism to reset other account passwords and verify your identity....

1+ mon, 20+ hour ago   (805+ words) ESET Research analyzes Gamaredon’s new toolset and the group’s growing reliance on legitimate online services to hide its C&C infrastructure and exfiltrate stolen data In our latest research, we analyze Gamaredon’s activity during 2025, including new tools added to its…...

1+ mon, 2+ day ago   (1508+ words) ESET contributed to this effort by providing technical analyses, statistical information, known command and control (C&C) servers, encryption keys, campaign and build identifiers, and other threat intelligence collected during our long-term tracking of both malware families. ESET Research has been…...

1+ mon, 2+ week ago   (617+ words) Every organisation gets audited. The question is who does the auditing. Meanwhile, despite a steady drumbeat of news headlines on breaches at organisations like M&S, JLR, and Co-op (and most breaches never actually make it to the front pages),…...

1+ mon, 3+ week ago   (657+ words) Your child’s first data breach may happen before they’ve even opened a bank account. Here’s how to keep their digital life safe. When we talk about cybersecurity and digital safety in the context of our children, it’s often framed in…...

1+ mon, 3+ week ago   (176+ words) In this roundup, Tony looks at attacks against Polish water treatment facilities, how AI-directed attacks failed in Mexico, and what Google believes is the first AI-generated zero-day exploit It’s that time of month when ESET Chief Security Evangelist Tony Anscombe…...

1+ mon, 4+ week ago   (119+ words) An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026 ESET products protect our customers’ systems from the malicious activities described in this report. Intelligence shared here is based mostly on proprietary ESET…...