After a four-day security suspension, Progress has restored access to its ShareFile Storage Zones Controller. ShareFile is Progress’ flagship enterprise file-sharing service and Storage Zones Controller provides ShareFile customers with private data storage. Progress Software detected “a credible external security… Read More "Progress Restores ShareFile Storage Access After Exploit Concerns"
Join us today (July 15th) for the 2026 Cloud & Data Security Summit to learn the latest strategies, tools, and best practices for strengthening your cloud security posture and staying ahead of evolving cyber risks. Join the interactive summit from… Read More "Virtual Event Today: Cloud & Data Security Summit"
A malware framework called OkoBot has been running on Windows machines since April 2025, and one of its modules is built to con hardware wallet owners out of their recovery phrase. On an infected PC, the request comes from inside… Read More "OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps"
A year ago, ESET Research was part of two major operations that disrupted some of the leading cybercriminal operations at the time, Lumma Stealer and Danabot. More recently, our researchers are once again collaborating with private partners and law enforcement,… Read More "ESET takes part in Operation Endgame to disrupt Amadey and Stealc"
Attackers could bypass UEFI Secure Boot on a wide range of systems thanks to 11 Microsoft-signed UEFI shim bootloaders carrying vulnerabilities that have remained buried for more than a decade, according to new findings from ESET. ESET researchers reported the shims… Read More "Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass"
The US Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged immediate hardening of Microsoft SharePoint servers in light of recently disclosed zero-day vulnerabilities. The freshest of the exploited flaws is CVE-2026-56164, a privilege escalation issue that can be exploited… Read More "CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities"
The Hacker NewsJul 15, 2026Network Security / Enterprise Security For years, routing traffic through cloud proxies was good enough. Then work moved to the browser, AI entered the workflow, and the inspection model stopped keeping up. Enterprise workflows now live… Read More "SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough."
A move toward coordinated vulnerability response Prabhjyot Kaur, senior analyst at Everest Group, said Gold Eagle should be viewed as “a significant evolution” of existing vulnerability disclosure and government-industry coordination mechanisms rather than a replacement for them. “Its potential significance… Read More "White House launches AI-driven vulnerability clearinghouse to speed cyber remediation"
Cyberespionage has remained a constant feature of Russia’s war against Ukraine. ESET Research has long tracked Gamaredon, one of the most active Russia-aligned advanced persistent threat (APT) groups targeting Ukraine. The group, attributed by the Security Service of Ukraine (SSU)… Read More "Leveraging tunnels, workers, dead drops, and new alliances"
A six-month phishing operation has been tricking Windows and macOS users into installing legitimate remote monitoring and management (RMM) software through fake electronic greeting cards (eCards). According to new research published by Forescout on July 14, the campaign, which it… Read More "Phishing Campaign Abuses eCards to Deploy RMM Tools"
