After a quiet period since 2023, Chinese state-backed group TA416 has reemerged with a vengeance, launching a fresh wave of cyber espionage campaigns against European governments. Proofpoint researchers detected the group’s renewed activity in mid-2025, with multiple malware delivery campaigns… Read More "Chinese Hackers Target European Governments in Espionage Campaigns"
For years, cybersecurity has followed a familiar model: block malware, stop the attack. Now, attackers are moving on to what’s next. Threat actors now use malware less frequently in favor of what’s already inside your environment, including abusing trusted tools,… Read More "3 Reasons Attackers Are Using Your Trusted Tools Against You (And Why You Don’t See It Coming)"
These binaries retain their original metadata, but their altered names allow them to blend into the environment while performing malicious tasks like downloading additional payloads. “Microsoft Defender and other security solutions can leverage this metadata discrepancy as a detection signal,… Read More "WhatsApp malware campaign uses malicious VBS files to gain persistent access"
In 2024, ESET researchers noticed previously undocumented malware in the network of a Southeast Asian governmental entity. This led us to uncover even more new malware on the same system, none of which had substantial ties to any previously tracked… Read More "LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan"
Threat actors have targeted an open source maintainer to hijack one of the most popular npm packages and spread remote access Trojans (RATs). Axios is a JavaScript library downloaded over 100 million times a week and used as a dependency in… Read More "Hackers Hijack Axios npm Package to Spread RATs"
Under such conditions, expecting flawless human performance is unrealistic. Employees manage high volumes of communication while also combating deadlines and performance expectations. Senior leaders frequently make decisions with incomplete information, balancing urgency against risk to keep the business running. When… Read More "Security awareness is not a control: Rethinking human risk in enterprise security"
The mobile marketplace app has a growing number of users, but not all of them are genuine. Watch out for these common scams. 04 Feb 2026 • , 6 min. read OfferUp has been in business for nearly 15 years.… Read More "Here’s what you should know"
The impact of cyber-attacks on UK manufacturers extended well beyond Jaguar Land Rover (JLR) last year, with 78% of businesses suffering a serious incident, according to new data from ESET. The security vendor polled 500 senior decision-makers responsible for IT, OT,… Read More "Eight in 10 UK Manufacturers Hit by Cyber Incident in a Year"
Malicious versions of the highly popular Axios NPM library were distributed to millions in a fresh supply chain attack blamed on North Korean hackers. A promise-based HTTP client that supports asynchronous API requests from Node.js and browsers, Axios is used… Read More "Axios NPM Package Breached in North Korean Supply Chain Attack"
Ravie LakshmananApr 01, 2026Threat Intelligence / Software Security Google has formally attributed the supply chain compromise of the popular Axios npm package to a financially motivated North Korean threat activity cluster tracked as UNC1069. “We have attributed the attack to… Read More "Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069"
