After years spent finding and investigating data breaches, Greg Pollock admits that when he comes across yet another exposed database full of passwords and Social Security numbers, “I come to it with some fatigue.” But Pollock, director of research at… Read More "A Vast Trove of Exposed Social Security Numbers May Put Millions at Risk of Identity Theft"
Cloud-native architectures have fundamentally changed how organizations build, deploy, and scale applications. But they have also introduced new security challenges, especially when it comes to protecting workloads that span virtual machines, containers, Kubernetes, and serverless environments. As someone who works… Read More "From DevOps to Runtime: Engineering the Right CWPP Strategy for Your Cloud Environment"
Ravie LakshmananFeb 18, 2026Network Security / Enterprise Security Cybersecurity researchers have disclosed a critical security flaw in the Grandstream GXP1600 series of VoIP phones that could allow an attacker to seize control of susceptible devices. The vulnerability, tracked as CVE-2026-2329,… Read More "Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution"
Eine Sicherheitslücke in beliebten Chrome-Erweiterungen führt dazu, dass der Browserverlauf der Anwender offengelegt ist. 2lttgamingroom – shutterstock.com Ein Sicherheitsforscher mit dem Pseudonym „Q Continuum“ hat 287 Chrome-Erweiterungen entdeckt, die den Browserverlauf exfiltrieren. „Die Akteure hinter den Lecks sind vielfältig: Similarweb,… Read More "Millionen Chrome-Erweiterungen geben Browserverlauf preis"
Behind the polished exterior of many modern buildings sit outdated systems with vulnerabilities waiting to be found 12 Dec 2025 • , 3 min. read “A City of a Thousand Zero Days” is the partial title of a talk at… Read More "Was that device designed to be on the internet at all?"
A newly identified cryptojacking campaign that spreads through pirated software installers has been uncovered by researchers, revealing a multi-stage infection chain designed for persistence, stealth and maximum cryptocurrency mining output. The operation, discovered by security firm Trellix, centres on a… Read More "Cryptojacking Campaign Exploits Driver to Boost Monero Mining"
In 2025, navigating the digital seas still felt like a matter of direction. Organizations charted routes, watched the horizon, and adjusted course to reach safe harbors of resilience, trust, and compliance. In 2026, the seas are no longer calm between… Read More "Operating in a World of Permanent Instability"
The researchers stated that the threat has already affected users across multiple countries, infecting over 13,000 devices as of February, as detected by Kaspersky. “The highest numbers of the attacked users have been observed in Russia, Japan, Germany, Brazil, and… Read More "Keenadu: Android malware that comes preinstalled and can’t be removed by users"
As 2025 draws to a close, Tony looks back at the cybersecurity stories that stood out both in December and across the whole of this year 29 Dec 2025 As we close out 2025, it’s time for ESET Chief Security… Read More "This month in security with Tony Anscombe – December 2025 edition"
Russian-linked hacking group Fancy Bear (APT28) has reportedly exploited a recently disclosed vulnerability in Microsoft Office to conduct cyber-attacks against Ukrainian and EU organizations. The warning was published on February 2 by the Computer Emergency Response Team of Ukraine (CERT-UA),… Read More "Fancy Bear Exploits Microsoft Office Flaw in Ukraine, EU Cyber-Attacks"
