ESET researchers have uncovered an Android spyware campaign leveraging romance scam tactics to target individuals in Pakistan. The campaign uses a malicious app posing as a chat platform that allows users to initiate conversations with specific “girls” – fake profiles… Read More "Fake dating app used as lure in targeted spyware campaign in Pakistan"
A global campaign by Russian nation state operatives to access targets’ encrypted messaging apps has been uncovered by Dutch intelligence. Published on March 9, a joint missive from the Dutch domestic (AIVD) and military intelligence (MIVD) services warned that some of the… Read More "Russian Hackers Target WhatsApp and Signal Accounts"
Empowering cyber defenders with AI is critical to tilting the cybersecurity balance back in their favor as they battle cybercriminals and keep users safe. To help accelerate adoption of AI for cybersecurity workflows, we partnered with Airbus at DEF CON 33… Read More "Accelerating adoption of AI for cybersecurity at DEF CON 33"
Chainguard unveiled Factory 2.0, the second generation of its platform for maintaining hardened open source images and secure software artifacts, components, and images, at the Assemble conference in New York in March. The new framework replaces the original platform’s traditional,… Read More "Chainguard’s Factory 2.0 Hardens Software Supply Chain"
In this blog post, we provide more technical details related to our previous DynoWiper publication. Key points of the report: ESET researchers identified new data-wiping malware that we have named DynoWiper, used against an energy company in Poland. The tactics,… Read More "DynoWiper update: Technical analysis and attribution"
A data breach affecting 15,661 Ericsson Inc. employees and customers has been disclosed after attackers compromised a third-party service provider used by the company. The incident involved unauthorised access to files containing personal information, according to breach notifications filed with US… Read More "Ericsson Breach Exposes Data of 15k Employees and Customers"
One year from now, with the release of Chrome 154 in October 2026, we will change the default settings of Chrome to enable “Always Use Secure Connections”. This means Chrome will ask for the user’s permission before the first access… Read More "Google Online Security Blog: HTTPS by default"
The next frontier for biometric authentication may be upon us, and it involves the vibrations of one’s skull. Last week, a research team led by Rutgers University introduced a new biometric authentication software compatible with extended reality (XR) headsets —… Read More "Picking Up ‘Skull Vibrations’? Could Be XR Headset Authentication"
The trends from January offer useful clues about the risks and priorities that security teams are likely to contend with throughout the year 30 Jan 2026 The year got off to a busy start, with January offering an early snapshot… Read More "This month in security with Tony Anscombe – January 2026 edition"
Google Cloud has warned that threat actors targeting cloud environments now favor campaigns which gain initial access by exploiting software vulnerabilities over credential-based attacks. Published on 9 March, the Google Cloud Office of the CISO’s H1 2026 Google Cloud Threat… Read More "Cloud Attackers Now Prefer Vulnerability Exploits Over Credentials"
