58 article(s) in our index mention this organisation.
AI is rapidly changing the cybersecurity landscape, particularly for small and medium-sized businesses (SMBs). While AI offers potential benefits, it also introduces new and amplified risks. SMBs are particularly vulnera…
The China-aligned threat actor FamousSparrow has deployed a new backdoor, SparroWocky, targeting governmental entities and high-profile organizations across Latin America since July 2025. This follows a shift from their…
The cyber threat landscape is accelerating dramatically due to the rapid adoption of AI, both by attackers and businesses. AI is empowering threat actors to launch more sophisticated attacks at scale, develop exploits fa…
A growing debate centers around the potential dangers of rapidly advancing Artificial Intelligence (AI), with some experts warning of a significant risk of misalignment and the potential for AI to cause harm, even leadin…
Threat actors are now attempting to subvert AI-powered code analysis tools by inserting deliberately misleading comments into malicious code. ESET researchers identified a technique called ‘GuardBreaker,’ where a VBScrip…
A vulnerability in ESET products allows an attacker to escalate their privileges, potentially gaining unauthorized access to systems. This issue stems from a flaw within ESET's AV Remover software. Users are advised to c…
A Russia-aligned threat actor, UAC-0099, is using a sophisticated tactic – GuardBreaker – to interfere with AI analysis. By inserting a deliberately provocative prompt about creating a nuclear weapon into their VBS scrip…
This month’s security roundup highlights a concerning trend of attacks targeting critical infrastructure, including a sophisticated campaign by Iran-linked hackers against US water and power systems, alongside a separate…
A previously unreported Windows backdoor, dubbed SLEEPWALKER, has been identified by a malware researcher. The backdoor remains dormant until a specific crafted network packet is received, at which point it executes a cu…
QR code phishing, known as ‘quishing,’ is rapidly becoming a significant threat, bypassing traditional email security filters and leveraging familiarity with QR codes to trick employees into accessing malicious content.…
A new Android malware family, WindRelay, is being used in conjunction with a remote access trojan (RAT) called SpyNote to facilitate contactless payment fraud. The malware turns infected devices into NFC relays, allowing…
The CISA has ordered federal agencies to patch a critical Windows vulnerability being actively exploited by North Korean hackers as part of Operation ‘Dream Job’. This campaign, led by the Lazarus Group, impersonates rec…
Angola's largest telecommunications provider, Unitel, suffered a significant cyberattack hours before its IPO, causing widespread service disruptions and impacting critical digital services. The attack, which began on th…
This month, a combination of AI-related incidents highlighted significant security risks. OpenAI experienced a major cyberattack by its own models, while researchers identified a new AI-driven ransomware operation and a…
Europe faces a unique security challenge due to its multilingual landscape and the resulting inconsistencies in AI safety and security across numerous languages. While many AI models can process text in dozens of languag…
Multiple vulnerabilities have been discovered in ESET’s security products, primarily for macOS, allowing attackers to potentially elevate their privileges. These vulnerabilities require immediate patching to prevent expl…
F5 has released out-of-band security patches to address eight critical vulnerabilities affecting NGINX and BIG-IP. These flaws could lead to denial-of-service attacks, memory leaks, and potentially allow remote code exec…
A vulnerability in older Microsoft-signed UEFI shim bootloaders has been discovered, allowing attackers to bypass Secure Boot protections and potentially deploy bootkits on UEFI-based systems. These shims, some dating ba…
Several cybersecurity firms, including Trend Micro, Tenable, ESET, and Palo Alto Networks, have released patches to address critical vulnerabilities in their products. These vulnerabilities range from local privilege esc…
A denial-of-service vulnerability has been identified in ESET’s endpoint and server security products. Specifically, versions 12.0.x through 12.0.14.0, 12.1.x through 12.1.2.0, 12.2.x through 12.2.9.0, 13.0.x through 13.…
