Start using a new app and you’ll often be asked to grant it permissions. But blindly accepting them could expose you to serious privacy and security risks. 27 Feb 2026 • , 5 min. read App permissions are almost like… Read More "Mobile app permissions (still) matter more than you may think"
A large-scale network of internet routers compromised by Russian hacking group APT28 to harvest credentials from victims of intelligence value has been taken down in the US. The US Department of Justice (DoJ) announced on April 7, that it teamed… Read More "US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers"
The North Korea-linked persistent campaign known as Contagious Interview has spread its tentacles by publishing malicious packages targeting the Go, Rust, and PHP ecosystems. “The threat actor’s packages were designed to impersonate legitimate developer tooling […], while quietly functioning as malware loaders,… Read More "N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust"
The gap between documentation and execution is well-documented. CISA’s cyber exercise guidance notes that discussion-based exercises alone are insufficient for validating operational readiness, yet that is what most organizations rely on. The Ponemon Institute reports that just over half of… Read More "The tabletop exercise grows up"
In this roundup, Tony looks at how opportunistic threat actors are taking advantage of weak authentication, unmanaged exposure, and popular AI tools 28 Feb 2026 With the second month of 2026 (almost) behind us, it’s time for ESET Chief Security… Read More "This month in security with Tony Anscombe – February 2026 edition"
Iranian-affiliated hackers have been attacking US critical national infrastructure (CNI) providers since last month, causing operational disruption and financial loss, the US government has revealed. A Cybersecurity and Infrastructure Security Agency (CISA) advisory on April 7 said the threat actors… Read More "Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT"
The education sector is notoriously short on cash, but rich in assets for threat actors to target. How can managed detection and response (MDR) help learning institutions regain the initiative? 04 Mar 2026 • , 5 min. read For the… Read More "How MDR can tip the balance in favor of schools"
A Europol-backed law enforcement operation has led to the dismantling of over 373,000 dark web sites advertising child sexual abuse material (CSAM) and cybercrime as a service (CaaS). The German-led Operation Alice ran from March 9-19 and initially targeted “Alice… Read More "Operation Alice Takes Down 370,000+ Dark Web Sites"
Thousands of men are members of Telegram groups and channels that advertise and sell hacking and surveillance services that can be used to harass friends, wives and girlfriends, and former partners, new research has uncovered. The findings, from a European… Read More "Men Are Buying Hacking Tools to Use Against Their Wives and Friends"
Iran-affiliated cyber actors are targeting internet-facing operational technology (OT) devices across critical infrastructures in the U.S., including programmable logic controllers (PLCs), cybersecurity and intelligence agencies warned Tuesday. “These attacks have led to diminished PLC functionality, manipulation of display data and, in some… Read More "Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs"
