.jpg?w=1140&resize=1140,855&ssl=1 "What Is Dark Web Monitoring?")
Dark web monitoring is the process of continuously scanning hidden areas of the internet, inaccessible through conventional search engines, to identify sensitive information that may have been leaked, stolen, or exposed. These leaks could include compromised passwords, credentials, intellectual property,… Read More "What Is Dark Web Monitoring?"
Microsoft-owned code-hosting platform GitHub on Wednesday morning confirmed that approximately 3,800 internal repositories were impacted in a supply chain attack. On Tuesday, the infamous hacking group TeamPCP, known for a series of recent supply chain attacks targeting the open source… Read More "GitHub Confirms Hack Impacting 3,800 Internal Repositories"
“Organizations should start by auditing their environment for the conditions that exist that leave them vulnerable to YellowKey,” said Eric Grenier, senior director analyst at Gartner. “They should also have a clear understanding of their risk acceptance in the case of… Read More "Microsoft is working on a patch for ‘YellowKey’ attack on Bitlocker, offers temporary fix"
In this blog post, we provide more technical details related to our previous DynoWiper publication. Key points of the report: ESET researchers identified new data-wiping malware that we have named DynoWiper, used against an energy company in Poland. The tactics,… Read More "DynoWiper update: Technical analysis and attribution"
A North Korea-aligned espionage group has compromised a regional gaming platform serving ethnic Koreans in China. The Windows and Android software hosted on the site was trojanized with a previously undocumented mobile backdoor. According to new analysis from ESET researchers, … Read More "North Korean APT Targets Yanbian Gamers via Trojanized Platform"
When an employee bypasses an “approved” tool for a frictionless, web-based alternative, they aren’t just being productive—they are effectively “hiring” a new vendor outside the scope of security governance. Multiply this across an entire enterprise, and you no longer have… Read More "The Shadow Supply Chain: A 72.9% Gap In Your Vendor Inventory"
The speed and sophistication of cyberattacks have outpaced traditional defense methods. Please join us online today from 11AM -4PM ET for the Threat Detection & Incident Response Summit. Don’t miss this virtual event as we explore how to cut through alert… Read More "Virtual Event Today: Threat Detection & Incident Response Summit"
As a result, Drupal urges admins using these applications to update them as well, whether or not the SQL injection vulnerability affects their systems. Helpfully, the Drupal fix issued today includes updates for both Symfony and Twig. The vulnerability in… Read More "Drupal admins rushing to patch maximum severity SQL injection vulnerability"
The trends from January offer useful clues about the risks and priorities that security teams are likely to contend with throughout the year 30 Jan 2026 The year got off to a busy start, with January offering an early snapshot… Read More "This month in security with Tony Anscombe – January 2026 edition"
A phishing campaign targeting more than 35,000 users across 13,000 organizations has been identified by the Microsoft Defender Research team. The large-scale credential theft campaign used fake internal compliance or regulatory communications as lures for the campaign. The lures in… Read More "Microsoft Flags Mass Phishing Campaign Using Fake Compliance Emails"
