A phishing-as-a-service (PaaS) operation has continued generating new campaigns despite a coordinated takedown effort, with more than 700 new phishing pages identified within a month of the disruption. Group-IB said its researchers had tracked the Outsider Phishing Kit, operated by… Read More "Outsider Phishing Kit Survives Takedown With 700 New Pages"
The Blind Spot in Brand Protection: Why App Stores Slip Past Standard Monitoring
Most brand protection solutions rely on one assumption: scam activity happens on the open web. Security teams focus on catching fake domains, social profiles, marketplace listings, paste sites, and dark web forums. While that covers a lot of ground, it… Read More "The Blind Spot in Brand Protection: Why App Stores Slip Past Standard Monitoring"
Inside the inbox: Why cybercriminals want to break into your email account
Your inbox is an identity system all of its own: whoever owns it may own a lot more 29 Jun 2026 • , 5 min. read Email is not just a means of communication, or yet another online account. In… Read More "Inside the inbox: Why cybercriminals want to break into your email account"
Pegasus Zero-Click Exploit Infects Serbian Student Activist’s iPhone
A member of Serbia’s student protest movement has been infected with NSO Group’s Pegasus spyware through an iMessage zero-click exploit, according to a forensic investigation by the Citizen Lab and the SHARE Foundation. The Citizen Lab said it found high-confidence… Read More "Pegasus Zero-Click Exploit Infects Serbian Student Activist’s iPhone"
A Vendor Risk Assessment Questionnaire Template
You have a vendor waiting on a security sign-off, and the questionnaire you’d normally send is a spreadsheet someone built two roles ago. Half the questions don’t apply, and the ones that matter aren’t weighted. Download the free vendor risk… Read More "A Vendor Risk Assessment Questionnaire Template"
This month in security with Tony Anscombe – June 2026 edition
Three-day patching deadlines, exposed fuel-tank systems, scams costing billions of dollars, and social media bans for children all gave Tony plenty to unpack in June 2026 30 Jun 2026 It’s that time of month when ESET Chief Security Evangelist Tony… Read More "This month in security with Tony Anscombe – June 2026 edition"
G7 Urges Fast-Track on Quantum-Safe Cybersecurity Rules
The G7 is urging nations to accelerate the post-quantum cryptography (PQC) transition. As part of France’s 2026 G7 Presidency, the French National Cybersecurity Agency (ANSSI), chairing the G7 Cybersecurity Working Group, has spearheaded a new call to action urging governments… Read More "G7 Urges Fast-Track on Quantum-Safe Cybersecurity Rules"
SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug
Still, most major remote access vendors have taken their turn with a compromised product at least once, Ivanti, Fortinet, Citrix, and Cisco among them. “The internet-facing VPN appliance is the Achilles’ heel of the perimeter,” he noted. “Swapping vendors swaps… Read More "SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug"
Cyber readiness for SMBs: Getting the basics right
AI is changing cybercrime, but SMB cyber readiness still largely depends on closing the familiar gaps 03 Jul 2026 • , 5 min. read AI is changing attackers’ toolkits. It can help criminals write better lures, scale social engineering and… Read More "Cyber readiness for SMBs: Getting the basics right"
CISOs Must Update Incident Response Playbooks for Multimodal Deepfakes
Almost half of CISOs have reported at least one deepfake incident in the past 12 months, highlighting the need to update incident response playbooks to address multimodal deepfake threats. As the opening of the Gartner Security & Risk Management Summit… Read More "CISOs Must Update Incident Response Playbooks for Multimodal Deepfakes"