The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cybercrime has professionalized

A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and which generated more noise than real danger?

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2026 and Q3 2026

Here's the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little more than two minutes

ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a destructive attack against a Ukrainian grain firm

You can trust a social media platform and still get scammed by an ad running on it

If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious

Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe

Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next.

ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026

Other agency errors included an unchecked software bug that led to Terrorism Act detentions

Binance freezes funny money after compromise of engineer’s laptop linked to $6.3 billion of unauthorized trades

Embedded browsers are at the heart of the problem

Snoops 'likely still' have access to US government-affiliated network

Officials confirm this week’s tax deadlines extended to November as a result

Some adults may not need to prove it, but many will

'The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully'

Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS

Attackers probe another EBS bug, and ShinyHunters' PeopleSoft 0-day turns out to involve three vulns

Artem Stryzhak joined both gangs, which targeted businesses and a hospital during the pandemic