I recently had, what I thought, was a unique brainwave. (Spoiler alert: it wasn’t, but please read on!) As a marketing leader at ESET UK, part of my role is to communicate how our powerful and comprehensive solutions can be… Read More "What Schrödinger can teach us about cybersecurity"
The US Federal Communications Commission (FCC) has extended the deadline for owners of banned internet routers to provide security updates to US-based users by two years. In March 2026, the Commission banned the import and sale of all “consumer-grade” internet… Read More "US: FCC Relaxes Foreign-Made Router Ban to Allow for Security Updates"
Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest… Read More "Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit"
Being seen as reliable is good for ‘business’ and ransomware groups care about ‘brand reputation’ just as much as their victims 11 Dec 2025 • , 4 min. read Black Hat Europe 2025 opened with a presentation by Max Smeets… Read More "Reputation is currency – even in the ransomware economy"
Cybercriminals have been using AI to identify and exploit a zero-day vulnerability successfully for the first time, Google Threat Intelligence Group (GTIG) has warned. Published on May 11, the GTIG AI Threat Tracker report said that “prominent” cybercrime threat actors… Read More "Hackers Observed Using AI to Develop Zero-Day for the First Time"
Behavioral Baseline Monitoring Learns normal workload behavior; flags only statistically significant deviations, not every anomaly Fileless attacks, lateral movement, insider threats Runtime Protection Evaluates process execution in context; auto-scaling and pipeline tasks are recognized as expected Memory-based exploits, malicious code… Read More "Cloud Workload Protection and False Positive Reduction"
In this case, it wasn’t the technology that was at fault, but a user: The intruder gained access to the system by taking over their account, according to DINUM, the French government’s interministerial digital directorate. DINUM said it has blocked… Read More "French government’s secure messaging system breached"
In 2024, ESET researchers noticed previously undocumented malware in the network of a Southeast Asian governmental entity. This led us to uncover even more new malware on the same system, none of which had substantial ties to any previously tracked… Read More "LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan"
A previously undocumented information stealer has been distributed through fake Claude Code installation pages, hijacking Chromium browsers to bypass App-Bound Encryption and exfiltrate cookies, passwords and payment data from developer workstations. The campaign was detailed on 11 May by Ontinue’s… Read More "Fake Claude Code Page Pushes PowerShell Stealer at Devs"
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy… Read More "In Other News: Google Security Layoffs, AudiA6 Takedown, $400 Million Coupang Fine"
