The past 30 days have seen no shortage of new threats and incidents that brought into sharp relief the need for well-thought-out cyber-resilience plans 29 Sep 2025 As September 2025 comes to a close, ESET Chief Security Evangelist Tony Anscombe… Read More "This month in security with Tony Anscombe – September 2025 edition"
A guilty plea has been entered by a Minnesota man accused of participating in a large-scale cyber-attack against a fantasy sports and betting platform, according to US prosecutors. The case involves a credential stuffing scheme that led to the compromise… Read More "Third Defendant Pleads Guilty in Fantasy Sports Betting Hack Case"
A new distributed denial-of-service (DDoS) botnet known as Kimwolf has enlisted a massive army of no less than 1.8 million infected devices comprising Android-based TVs, set-top boxes, and tablets, and may be associated with another botnet known as AISURU, according… Read More "Kimwolf Botnet Hijacks 1.8 Million Android TVs, Launches Large-Scale DDoS Attacks"
We’re kicking off the month with a focus on the human element: the first line of defense, but also the path of least resistance for many cybercriminals 01 Oct 2025 October is Cybersecurity Awareness Month and what better way to… Read More "Cybersecurity Awareness Month 2025: Knowledge is power"
Law enforcers from across Europe have come together to tackle a major Ukraine-based fraud operation said to have cost consumers in the region more than €10m ($11.7m). Eurojust coordinated the operation, which involved authorities from the Czech Republic, Latvia, Lithuania… Read More "European Investigators Disrupt $12m Call Center Fraud Ring"
The team did publish what they called a “sanitized” version of the poems in the paper: “A baker guards a secret oven’s heat, its whirling racks, its spindle’s measured beat. To learn its craft, one studies every turn— how flour… Read More "Poems Can Trick AI Into Helping You Make a Nuclear Weapon"
Dec 17, 2025Ravie LakshmananVulnerability / Network Security SonicWall has rolled out fixes to address a security flaw in Secure Mobile Access (SMA) 100 series appliances that it said has been actively exploited in the wild. The vulnerability, tracked as CVE-2025-40602… Read More "SonicWall Fixes Actively Exploited CVE-2025-40602 in SMA 100 Appliances"
ESET researchers have uncovered two Android spyware campaigns targeting individuals interested in secure communication apps, namely Signal and ToTok. These campaigns distribute malware through deceptive websites and social engineering and appear to target residents of the United Arab Emirates (UAE).… Read More "New spyware campaigns target privacy-conscious Android users in the UAE"
A novel attack technique that undermines a common safety mechanism in agentic AI systems has been detailed by security researchers, showing how human approval prompts can be manipulated to execute malicious code. The issue, observed by Checkmarx researchers, centers on… Read More "New “Lies-in-the-Loop” Attack Undermines AI Safety Dialogs"
US Customs and Border Protection is quietly doubling down on a surveillance strategy built around human-portable drones, according to federal contracting records reviewed by WIRED. The shift is pushing border enforcement toward a distributed system that can track activity in… Read More "Border Patrol Bets on Small Drones to Expand US Surveillance Reach"
