Brazilian threat actors are aiming to steal banking credentials across Spanish-speaking countries, using highly wormable and slightly elusive infection techniques. As much as North Korea is known for large-scale cryptocurrency hacks and Israel dominates the spyware market, Brazil has become… Read More "Bank Trojan ‘Casbaneiro’ Worms Through Latin America"
Should verified identities become the standard online? Australia’s social media ban for under-16s shows why the question matters. 14 Jan 2026 • , 5 min. read New legislation in Australia makes it illegal for those under 16 to have a… Read More "Is it time for internet services to adopt identity verification?"
Salesforce has urged Experience Cloud customers to audit their website configurations after reports that a notorious threat group has already stolen data from hundreds of companies. The SaaS giant said that it had been tracking an increase in threat actor… Read More "ShinyHunters Targets Hundreds of Websites in New Salesforce Campaign"
To address this gap and help the ecosystem with deploying robust defenses, Google has supported academic research and developed test platforms to analyze DDR5 memory. Our effort has led to the discovery of new attacks and a deeper understanding of… Read More "Supporting Rowhammer research to protect the DRAM ecosystem"
The household toys and games manufacturer Hasbro suffered a recent cyberattack, but the company suggested it will continue to take orders and ship products, though the incident could result in some delays. In a tight-lipped 8-K filing with the Securities… Read More "Hasbro Attack May Take ‘Weeks’ to Remediate"
ESET researchers have uncovered an Android spyware campaign leveraging romance scam tactics to target individuals in Pakistan. The campaign uses a malicious app posing as a chat platform that allows users to initiate conversations with specific “girls” – fake profiles… Read More "Fake dating app used as lure in targeted spyware campaign in Pakistan"
A global campaign by Russian nation state operatives to access targets’ encrypted messaging apps has been uncovered by Dutch intelligence. Published on March 9, a joint missive from the Dutch domestic (AIVD) and military intelligence (MIVD) services warned that some of the… Read More "Russian Hackers Target WhatsApp and Signal Accounts"
Empowering cyber defenders with AI is critical to tilting the cybersecurity balance back in their favor as they battle cybercriminals and keep users safe. To help accelerate adoption of AI for cybersecurity workflows, we partnered with Airbus at DEF CON 33… Read More "Accelerating adoption of AI for cybersecurity at DEF CON 33"
Chainguard unveiled Factory 2.0, the second generation of its platform for maintaining hardened open source images and secure software artifacts, components, and images, at the Assemble conference in New York in March. The new framework replaces the original platform’s traditional,… Read More "Chainguard’s Factory 2.0 Hardens Software Supply Chain"
In this blog post, we provide more technical details related to our previous DynoWiper publication. Key points of the report: ESET researchers identified new data-wiping malware that we have named DynoWiper, used against an energy company in Poland. The tactics,… Read More "DynoWiper update: Technical analysis and attribution"
