ESET Research has discovered a new variant of the NGate malware family that abuses a legitimate Android application called HandyPay, instead of the previously leveraged NFCGate tool. The threat actors took the app, which is used to relay NFC data,… Read More "New NGate variant hides in a trojanized NFC payment app"
Managed IT software provider N-able has released a new hotfix that includes a patch for a critical remote code execution (RCE) vulnerability. CVE-2026-86218 is a critical pre-authentication RCE flaw in N-central, N-able’s remote monitoring and management platform. It was disclosed… Read More "N-able Releases Hotfix for Critical Remote Code Execution Flaw"
Cyber risk governance (also called cyber risk governance or governance, risk, and compliance — GRC) and cyber risk management are often used interchangeably, but they are actually very different parts of the way an organization achieves data protection. While cybersecurity… Read More "What is Cyber Risk Governance? Implementing Cyber Strategy"
Swati KhandelwalOct 09, 2026Cybercrime / Data Breach The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had… Read More "FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack"
MonsterCloud claimed to offer an alternative to paying the ransom. Its website said that, thanks to its decryption techniques, “our team specializes in helping businesses recover their data without succumbing to ransom demands.” However, the indictment alleges that rather than… Read More "Ransomware consultant said he would decrypt data, is accused of paying ransoms instead"
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions 23 Apr 2026 • , 6 min. read ESET researchers have discovered a previously undocumented China-aligned APT group that we named GopherWhisper.… Read More "GopherWhisper: A burrow full of malware"
The UK’s National Cyber Security Centre (NCSC) has warned that employees using unapproved AI tools can expose corporate data and create security risks that organizations may struggle to detect and manage. The NCSC blog post, published on September 7, said… Read More "NCSC Warns Shadow AI Creates New Security Risks"
Cybersecurity risk is the probability of exposure or loss resulting from a cyber attack or data breach on your organization. A better, more encompassing definition is the potential loss or harm related to technical infrastructure, use of technology or reputation… Read More "What is Cybersecurity Risk? A Thorough Definition"
Pwn2Own Ireland 2026 has come to an end, and participants earned more than $1.2 million for exploits targeting phones, printers, smart speakers, smart home hubs, a wellness device, AI infrastructure and coding tools, and cloud databases. The highest rewards were… Read More "Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own"
A typical investigation may begin with a network, endpoint, or deception signal. The analyst uses that evidence to identify the affected host or identity, examines endpoint activity, reconstructs related network communications, investigates lateral movement, searches historical telemetry for newly discovered… Read More "Data Breach Investigation with Fidelis"
