Reusing passwords may feel like a harmless shortcut – until a single breach opens the door to multiple accounts 08 Jan 2026 • , 4 min. read Reusing the same password across multiple accounts may be convenient, but it sets… Read More "What it is and how to protect yourself"
In the UK, a small initiative aimed at helping small and medium enterprises (SMEs) tackle cybersecurity problems is scaling up as it prepares for a bigger future. The Cybersecurity Communities of Support (CyCOS) is a UK research-driven pilot launched by… Read More "Infosecurity Europe: CyCOS Project Expands to Support UK SMEs"
Google this week released a fresh Chrome 148 update that resolves 151 vulnerabilities, including 22 critical-severity flaws. Based on the paid bug bounties, the most severe of the resolved bugs are CVE-2026-9872 (out-of-bounds write issue in GPU) and CVE-2026-9873 (use-after-free… Read More "Chrome 148 Update Patches 151 Vulnerabilities"
Cybersecurity researchers have discovered a malicious NuGet package that masquerades as a C# software development kit for Sicoob, one of Brazil’s largest cooperative financial systems, to siphon client IDs and PFX certificates. According to Socket, versions 2.0.0 through 2.0.4 of… Read More "Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets"
The two code execution flaws share a single design weakness. Notepad++ stores user choices, such as the path to the command-line interpreter and the list of user-defined commands, inside XML files in the user’s profile directory. The editor reads those… Read More "Notepad++ vulnerabilities could enable arbitrary code execution on Windows systems"
Once again, data shows an uncomfortable truth: the habit of choosing eminently hackable passwords is alive and well 20 Jan 2026 • , 3 min. read ‘123456’ continues to reign supreme as the most commonly-used password among people across the… Read More "2025’s most common passwords were as predictable as ever"
Hacking groups linked to China have exploited the war in the Middle East in attempts to compromise maritime and energy companies in the region, cybersecurity researchers at ESET have warned. Published on May 28, the latest ESET APT Activity Report… Read More "Chinese Hackers Exploit Iran War to Target Maritime and Energy Firms"
ESET Research Threat Reports An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026 28 May 2026 • , 4 min. read ESET APT Activity Report Q4 2025–Q1 2026… Read More "ESET APT Activity Report Q4 2025–Q1 2026"
A malicious npm package has been caught leaking its own hardcoded GitHub token, a blunder that let researchers watch the operator’s data theft unfold from the inside. The package, named mouse5212-super-formatter, was identified by OX Security according to new analysis… Read More "AI-Generated npm Malware Leaks Its Own GitHub Token"
The North Korean state-sponsored threat actor known as Kimsuky (aka Velvet Chollima) has been attributed to a fresh set of cyber attacks targeting South Korean military and corporate entities through March and April 2026. “Kimsuky employed a range of tailored… Read More "Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels"
