In 2024, ESET researchers noticed previously undocumented malware in the network of a Southeast Asian governmental entity. This led us to uncover even more new malware on the same system, none of which had substantial ties to any previously tracked… Read More "LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan"
Threat actors have targeted an open source maintainer to hijack one of the most popular npm packages and spread remote access Trojans (RATs). Axios is a JavaScript library downloaded over 100 million times a week and used as a dependency in… Read More "Hackers Hijack Axios npm Package to Spread RATs"
Under such conditions, expecting flawless human performance is unrealistic. Employees manage high volumes of communication while also combating deadlines and performance expectations. Senior leaders frequently make decisions with incomplete information, balancing urgency against risk to keep the business running. When… Read More "Security awareness is not a control: Rethinking human risk in enterprise security"
The mobile marketplace app has a growing number of users, but not all of them are genuine. Watch out for these common scams. 04 Feb 2026 • , 6 min. read OfferUp has been in business for nearly 15 years.… Read More "Here’s what you should know"
The impact of cyber-attacks on UK manufacturers extended well beyond Jaguar Land Rover (JLR) last year, with 78% of businesses suffering a serious incident, according to new data from ESET. The security vendor polled 500 senior decision-makers responsible for IT, OT,… Read More "Eight in 10 UK Manufacturers Hit by Cyber Incident in a Year"
Malicious versions of the highly popular Axios NPM library were distributed to millions in a fresh supply chain attack blamed on North Korean hackers. A promise-based HTTP client that supports asynchronous API requests from Node.js and browsers, Axios is used… Read More "Axios NPM Package Breached in North Korean Supply Chain Attack"
Ravie LakshmananApr 01, 2026Threat Intelligence / Software Security Google has formally attributed the supply chain compromise of the popular Axios npm package to a financially motivated North Korean threat activity cluster tracked as UNC1069. “We have attributed the attack to… Read More "Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069"
IT leaders are setting their operations strategies for 2026 with an eye toward agility, flexibility, and tangible business results. Download the January 2026 issue of the Enterprise Spotlight from the editors of CIO, Computerworld, CSO, InfoWorld, and Network World and… Read More "Enterprise Spotlight: Setting the 2026 IT Agenda"
Can you believe your ears? Increasingly, the answer is no. Here’s what’s at stake for your business, and how to beat the deepfakers. 23 Feb 2026 • , 4 min. read There was a time when we could believe everything… Read More "How to tell if a voice call is AI or not"
A set of newly identified vulnerabilities in the Linux security module AppArmor could allow attackers to gain root access, bypass system protections and trigger service outages across millions of systems. The issues, collectively named ‘CrackArmor,’ were discovered by the Qualys… Read More "CrackArmor Flaws Expose Linux Systems to Privilege Escalation"
