ESET Research Threat Reports An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026 28 May 2026 • , 4 min. read ESET APT Activity Report Q4 2025–Q1 2026… Read More "ESET APT Activity Report Q4 2025–Q1 2026"
Wiz security researchers have linked a recent software supply chain attack which targeted the Rust programming ecosystem to state-sponsored North Korean threat actors. The campaign compromised several widely used open-source libraries hosted on the official Rust package registry, crates.io, embedding… Read More "North Korean Hackers Tied to Rust Supply Chain Attack"
The owner of a US company was charged with defrauding clients through a ransomware remediation scheme. Zohar Pinhasi, 50, the owner of MonsterCloud, a US and Israeli national also known as ‘Zack Silver’ and ‘Zack Green’, appeared in a New… Read More "Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme"
Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and agencies in 6 other countries said on October 8. The company, Integrity Technology Group,… Read More "FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails"
Or as Serhii Nikolaichuk, founder of The Capital Index, an engineering firm that builds attestation systems, puts it, everything behind what the CDNs have turned on, “the hop to the origin, service meshes, VPNs, SSH, and code signing, is invisible… Read More "Growing PQC at the edge belies deeper quantum-readiness challenges"
In this roundup, Tony looks at attacks against Polish water treatment facilities, how AI-directed attacks failed in Mexico, and what Google believes is the first AI-generated zero-day exploit 29 May 2026 It’s that time of month when ESET Chief Security… Read More "This month in security with Tony Anscombe – May 2026 edition"
A P2P botnet thought to have been running for over two decades, has suffered significant disruption thanks to a US-led law enforcement operation. Carried out on August 31, the operation against the Sality botnet brought together authorities from Bulgaria, Hungary,… Read More "International Operation Disrupts Sality P2P Botnet"
Splunk and SonicWall on Wednesday announced patches for multiple critical- and high-severity vulnerabilities in their products, including flaws that could lead to arbitrary code execution. SonicWall rolled out fixes for four vulnerabilities in its SMA1000 appliances, urging users to update… Read More "SonicWall and Splunk Patch Critical Vulnerabilities"
Once exploitability is understood, security teams need to consider what the affected asset exposes. The same vulnerability may exist on a development server containing test data and, on an authentication, system providing access to sensitive business applications. The technical weakness… Read More "Risk Prioritization: How Security Teams Decide What to Fix"
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The Tokyo-based center, which takes incident reports, based its October 8, 2026… Read More "Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks"
