Nearly a dozen Unified Extensible Firmware Interface (UEFI) shim bootloaders signed by Microsoft allow attackers to bypass Secure Boot protections, ESET warns. Small, trusted pieces of software bridge a computer motherboard’s UEFI firmware and the operating system, typically a Linux… Read More "Old UEFI Shims Expose Systems to Secure Boot Bypass"
“Virtual patches require accurate detection signatures, they don’t remediate the underlying vulnerability, and they can create a false sense of closure that delays proper patching indefinitely,” Ferguson argues. “The risk is that temporary becomes permanent. The underlying vulnerability stays open,… Read More "Flaw surge fuels need for CISOs to rethink vulnerability management"
The Trump administration’s shift in tone and approach toward traditional allies has understandably unsettled many nations, raising doubts about U.S. reliability and concerns over dependence on American technology. Many had become used to China and Russia’s often belligerent tone, flexing their… Read More "The quest for greater tech independence"
The UK’s healthcare sector is being “stress-tested to breaking point,” with a tenfold increase in attacks during January-May 2026 compared to the whole of 2025, according to SonicWall. The security vendor’s data comes from its intrusion prevention system (IPS) sensors dispersed… Read More "UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks"
Cybersecurity companies Trend Micro, ESET, Tenable, and Tanium released product updates this month to patch severe vulnerabilities. Tenable told customers this week that it has fixed a critical-severity path traversal in the Tenable Agent. The security hole, tracked as CVE-2026-15265,… Read More "Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities"
ESET researchers analyzed the 2025 activity of Webworm, a China-aligned APT group that started out targeting organizations in Asia, but has recently shifted its focus to Europe. Even though this is our first public blogpost on the group, we have… Read More "Webworm: New burrowing techniques"
Cyber threat actors are targeting employees of Booking.com partner accommodations in Japan, using phishing emails that impersonate guest complaints and review requests to trick hotel staff into executing malicious files. The malware delivered through this campaign, TONResolver, is hosted on… Read More "Hackers Leverage Blockchain to Hit Japan’s Hotels Through Booking.com"
Using chatbots for medical advice could elicit hallucinations and even expose you to security and privacy risks. Here’s what’s at stake and how to stay safe. 27 May 2026 • , 5 min. read For better or worse, chatbots are… Read More "What to consider before asking an AI chatbot for health advice"
The ClickFix social engineering technique has become the leading means of cybercriminals delivering malware to victims. According to analysis by researchers at ReliaQuest, which examined cyber-attacks taking place between March 1 and May 31, 2026, ClickFix dominated malware delivery. ClickFix… Read More "ClickFix Now Cybercriminals’ Favorite Malware Delivery Technique"
ESET Research Threat Reports An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026 28 May 2026 • , 4 min. read ESET APT Activity Report Q4 2025–Q1 2026… Read More "ESET APT Activity Report Q4 2025–Q1 2026"
