This year, AI agents took the center stage – as a defensive capability, but more pressingly as a risk many organizations haven’t caught up with 27 Mar 2026 That’s a wrap on the RSAC™ 2026 Conference. For its 35th edition,… Read More "RSAC 2026 wrap-up – Week in security with Tony Anscombe"
Organizations in India have been urged to patch actively exploited internet-facing vulnerabilities within 12 hours under new guidance that responds to the speed AI now brings to cyber-attacks. According to new guidance from the Indian Computer Emergency Response Team (CERT-In),… Read More "India’s CERT-In Sets 12-Hour Patch Deadline for Exposed Flaws"
The past four weeks have seen a slew of new cybersecurity wake-up calls that showed why every organization needs a well-thought-out cyber-resilience plan 31 Mar 2026 As March 2026 draws to a close, ESET Chief Security Evangelist Tony Anscombe looks… Read More "This month in security with Tony Anscombe – March 2026 edition"
An Android remote access trojan (RAT) that lets buyers build their own custom payloads without writing a line of code has been observed spreading through phishing campaigns across Brazil and beyond. According to new analysis from ESET, the malware, known… Read More "BTMOB Android RAT Spreads Through No-Code Builder Tooling"
Specifically, the post said, “allowScripts defaults to off: npm install will no longer execute preinstall, install or postinstall scripts from dependencies unless they are explicitly allowed in your project. This includes native node-gyp builds; a package with a binding.gyp and… Read More "GitHub finally pulls the plug on automatic install script execution for npm"
Fraudsters often target the accounts of the deceased or their grieving relatives. Here’s how to keep the scammers at bay. 01 Apr 2026 • , 5 min. read Can you imagine all of the things you’ll leave behind when your… Read More "Managing risks to your loved one’s digital estate"
The Chinese phishing-as-a-service (PhaaS) landscape has been rapidly growing in size and sophistication over the past few month, Google researchers have warned. Cyber threat actors operating mature phishing services, many of whom are likely tied to the broader Asian criminal… Read More "Chinese Threat Actors Shift to Live Credential Interception"
ServiceNow is informing customers that it has patched a vulnerability that appears to have been exploited. ServiceNow’s cloud-based platform is widely used by organizations for automating and managing workflows across IT service management, HR, customer service, and other enterprise operations.… Read More "ServiceNow Patches Vulnerability Exploited Against Some Customers"
The second flaw, CVE-2026-10520, is a command injection issue that can lead to remote code execution with root privileges on the underlying OS. Because the vulnerability can be exploited remotely without authentication, it is rated with the maximum CVSS severity… Read More "Ivanti patches critical Sentry flaws that lead to full device takeover"
If you’ve been a victim of fraud, you’re likely already a lead on a ‘sucker list’ – and if you’re not careful, your ordeal may be about to get worse. 10 Apr 2026 • , 5 min. read The worst… Read More "Here’s how to avoid a ‘second strike’"
