ESET APT Activity Report Q4 2024–Q1 2025 summarizes notable activities of selected advanced persistent threat (APT) groups that were documented by ESET researchers from October 2024 until the end of March 2025. The highlighted operations are representative of the broader… Read More "ESET APT Activity Report Q4 2024–Q1 2025"
Security researchers at Barracuda Networks have discovered two novel QR code phishing (quishing) techniques involving splitting malicious QR codes into two parts or embedding them into legitimate ones. They detailed their findings in a new report, Threat Spotlight: Split and… Read More "Hackers Weaponize QR Codes in New ‘Quishing’ Attacks"
Vendor due diligence (VDD) is a comprehensive security screening of a potential third-party vendor before forming a partnership. The assessment identifies whether a prospect is being honest about their security posture and outlines any potential security risks that could endanger… Read More "What is Vendor Due Diligence? Choosing Secure Vendors in 2025"
Aug 20, 2025The Hacker NewsArtificial Intelligence / Enterprise Security Do you know how many AI agents are running inside your business right now? If the answer is “not sure,” you’re not alone—and that’s exactly the concern. Across industries, AI agents… Read More "Discover and Control Shadow AI Agents in Your Enterprise Before Hackers Do"
Einem Sicherheitsforscher ist es gelungen, auf sensible Daten von Intel zu zugreifen. Mijansk786 – shutterstock.com Der Sicherheitsforscher Eaton Zveare meldete kürzlich, dass mindestens vier interne Websysteme des Chip-Herstellers Intel nicht ausreichend abgesichert waren. Dem Experten zufolge ermöglichten mehrere Schwachstellen, das… Read More "Forscher entdeckt offenen Zugang zu Intel-Mitarbeiterdaten"
ESET Chief Security Evangelist Tony Anscombe highlights key findings from the latest issue of the ESET APT Activity Report 19 May 2025 Today, the ESET research team released its latest issue of the APT Activity Report that details the operations… Read More "ESET APT Activity Report Q4 2024–Q1 2025: Key findings"
Warlock ransomware operators have extensively targeted the Microsoft SharePoint ToolShell vulnerability to hit victims globally, according to Trend Micro researchers. Warlock affiliates have used the widely reported flaw to compromise unpatched organizations at speed and depth via a sequence of… Read More "Warlock Ransomware Hitting Victims Globally Through SharePoint ToolShe"
Two-factor authentication (2FA) is a type of multi-factor authentication (MFA) used to verify users’ identities and provide an additional layer of account security. Users must enter two factors before they are allowed access to their online accounts to ensure they… Read More "What is Two-Factor Authentication (2FA)? Also Learn How it Works"
North Korean threat actors have been attributed to a coordinated cyber espionage campaign targeting diplomatic missions in their southern counterpart between March and July 2025. The activity manifested in the form of at least 19 spear-phishing emails that impersonated trusted… Read More "North Korea Uses GitHub in Diplomat Cyber Attacks as IT Worker Scheme Hits 320+ Firms"
This wide scope makes for a messy demarcation between ASPM and other security tool categories, further complicating the buying decision process. Caleb Sima wrote about this problem in 2024, stating that figuring out the risk of a particular asset isn’t… Read More "ASPM buyer’s guide: 7 products to help secure your applications"
