Malware, trojans, stealers, botnets and spyware.
ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a destructive attack against a Ukrainian grain firm
Cisco Talos is aware of eight intermediate certificates belonging to the intermediate certificate authority, eMudhra.
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset.
Adversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Cisco Talos observed abuse of more than 25 legitimate platforms over the past year, exploiting the built-in trust of collaboration, file-sharing, payment...
Key Findings Introduction Antidetect browsers conceal their users’ digital identities, enabling a single operator or small team to simultaneously run thousands of isolated accounts across multiple platforms such as Facebook, Instagram, TikTok, YouTube,...
You can trust a social media platform and still get scammed by an ad running on it
Unit 42 details the top initial access vectors adversaries use to breach organizations, led by edge exploits, credential abuse and phishing The post Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026 appeared first on Unit 42 .
If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious
Our analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced credential theft. The post AI-Powered Espionage Campaign Targets Government Linux Infrastructure appeared first on Unit 42 .
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware. The post Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant appeared first on Unit 42 .
Unit 42 dissects a cyberattack targeting a European bank's IT infrastructure, delivering concrete defense strategies to help organizations detect and counter comparable threats. The post The Noise Inside the Network: How an Unsophisticated Attack Exposed a...
ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026
A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account
The cybersecurity market is often making it tougher for SMBs to keep threats at bay
Autonomous AI agents go on a hacking spree, and Microsoft ships what used to be a year's worth of security patches in one go – here's how to keep pace
When phishing can increasingly pass familiar checks, avoiding or limiting the damage depends on how quickly your company can detect and contain the attack
As AI lets anyone build software, here’s how to vet that shiny new app before it exposes your data
Crypto ATM scams often follow a predictable script – here’s how to recognize it and what to do if you’ve already been caught out
Fake giveaways, free Robux generators and lookalike login pages all target the same thing – your Roblox account
As AI opens new paths to company data while making familiar attacks faster and cheaper, SMBs need protection designed around the time and expertise available to operate it
North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.
Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images
ESET researchers document SparroWocky, the new flagship backdoor of the FamousSparrow APT group
Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.
As AI adoption expands the attack surface and adds to the security workload, businesses need automation backed by experts
LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor
AI scams are now hyper-realistic. But there’s one simple way to see through them.
Don’t panic if you spot an illegally created image or video of you online – there are ways to request its removal
It’s getting cheaper and easier for cybercriminals to research potential victims. Here’s what’s still in your control.
Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap.