REPORTS
Fresh threat intelligence we ingest from public vendor and research feeds — each report linked to its original source. Search, filter by source, and open the reference.
Reports
Newest first. Search, filter by source, open the original.
51 reports · page 1 of 2
eset · tlp:amber · 7/14/2026, 8:53:00 AM
Forgotten UEFI shims undermining Secure Boot ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI Secure Boot by exploiting decade-old vulnerabilities Forgotten UEFI shims undermining Secure Boot Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White paper…
Read original ↗https://www.welivesecurity.com/en/eset-research/forgotten-uefi-shims-undermining-secure-booteset · tlp:amber · 7/8/2026, 8:45:00 AM
ESET Threat Report H1 2026 A view of the H1 2026 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts. ESET Threat Report H1 2026 Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Ukraine crisis – Digital securit…
eset · tlp:amber · 7/3/2026, 12:36:41 PM
Cyber readiness for SMBs: Getting the basics right AI is changing cybercrime, but SMB cyber readiness still largely depends on closing the familiar gaps Cyber readiness for SMBs: Getting the basics right Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Ukraine crisis – Di…
Read original ↗https://www.welivesecurity.com/en/business-security/cyber-readiness-smbs-getting-basics-righteset · tlp:amber · 6/30/2026, 2:39:37 PM
This month in security with Tony Anscombe – June 2026 edition Three-day patching deadlines, exposed fuel-tank systems, scams costing billions of dollars, and social media bans for children all gave Tony plenty to unpack in June 2026 This month in security with Tony Anscombe – June 2026 edition Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Researc…
Read original ↗https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-june-2026eset · tlp:amber · 6/29/2026, 8:50:00 AM
Inside the inbox: Why cybercriminals want to break into your email account Your inbox is an identity system all of its own: whoever owns it may own a lot more Inside the inbox: Why cybercriminals want to break into your email account Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScienc…
Read original ↗https://www.welivesecurity.com/en/cybersecurity/inside-inbox-cybercriminals-want-break-email-accounteset · tlp:amber · 6/26/2026, 8:50:00 AM
SMB cyber readiness: the road to resilience starts here Your business may be small, but its attack surface is anything but. Readiness is the first step to resilience. SMB cyber readiness: the road to resilience starts here Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED …
Read original ↗https://www.welivesecurity.com/en/business-security/smb-cyber-readiness-road-resilience-starts-hereeset · tlp:amber · 6/25/2026, 8:45:00 AM
Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances ESET Research analyzes Gamaredon’s new toolset and the group’s growing reliance on legitimate online services to hide its C&C infrastructure and exfiltrate stolen data Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY…
Read original ↗https://www.welivesecurity.com/en/eset-research/gamaredon-2025-leveraging-tunnels-workers-dead-drops-new-allianceseset · tlp:amber · 6/24/2026, 12:35:24 PM
ESET takes part in Operation Endgame to disrupt Amadey and Stealc ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical analysis, infrastructure tracking, and affiliate-level insights ESET takes part in Operation Endgame to disrupt Amadey and Stealc Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH A…
Read original ↗https://www.welivesecurity.com/en/eset-research/eset-takes-part-operation-endgame-disrupt-amadey-stealceset · tlp:amber · 6/18/2026, 9:46:32 AM
Killing me gently: Inside Gentlemen’s EDR killer framework ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen Killing me gently: Inside Gentlemen’s EDR killer framework Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat repo…
Read original ↗https://www.welivesecurity.com/en/eset-research/killing-me-gently-inside-gentlemens-edr-killer-frameworkeset · tlp:amber · 6/17/2026, 8:45:00 AM
Protecting legacy OT systems against modern cyberthreats Many manufacturing plants depend on OT systems that stay in service for many years. That long run can hide significant cybersecurity risks. Cybersecurity for the long haul: Protecting legacy OT systems Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Th…
Read original ↗https://www.welivesecurity.com/en/critical-infrastructure/protecting-legacy-ot-systems-modern-threatseset · tlp:amber · 6/16/2026, 8:54:04 AM
FishMonger’s arsenal upgraded: SprySOCKS for Windows ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness FishMonger’s arsenal upgraded: SprySOCKS for Windows Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveSc…
Read original ↗https://www.welivesecurity.com/en/eset-research/fishmongers-arsenal-upgraded-sprysocks-windowseset · tlp:amber · 6/15/2026, 8:55:00 AM
EvilTokens: A phishing attack that doesn’t steal your password A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages EvilTokens: A phishing attack that doesn’t steal your password Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogpos…
Read original ↗https://www.welivesecurity.com/en/cybercrime/eviltokens-phishing-doesnt-steal-passwordeset · tlp:amber · 6/11/2026, 8:45:00 AM
OceanLotus: From external espionage to domestic targeting A shift in operational pattern of the infamous Vietnam-aligned APT group OceanLotus: From external espionage to domestic targeting Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Ukraine crisis – Digital security …
Read original ↗https://www.welivesecurity.com/en/eset-research/oceanlotus-external-espionage-domestic-targetingeset · tlp:amber · 6/10/2026, 9:00:00 AM
SMB cyber-readiness: What makes or breaks it A company that's expecting a cyberattack but hasn’t actively prepared for it risks making the hardest decisions at the worst possible moment SMB cyber-readiness: What makes or breaks it Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience F…
Read original ↗https://www.welivesecurity.com/en/business-security/smb-cyber-readiness-what-makes-breaks-iteset · tlp:amber · 6/9/2026, 8:50:00 AM
Cybercriminals: the 'auditors' you never hired Every organisation gets audited. The question is who does the auditing. Cybercriminals: the 'auditors' you never hired Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Ukraine crisis – Digital security resource center WeLiveP…
Read original ↗https://www.welivesecurity.com/en/business-security/cybercriminals-auditors-never-hiredeset · tlp:amber · 6/3/2026, 8:50:00 AM
Lessons for life: Why children’s data is a long-term identity risk Your child’s first data breach may happen before they’ve even opened a bank account. Here’s how to keep their digital life safe. Lessons for life: Why children’s data is a long-term identity risk Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White paper…
Read original ↗https://www.welivesecurity.com/en/kids-online/lessons-life-childrens-data-long-term-identity-riskeset · tlp:amber · 5/29/2026, 7:30:00 AM
This month in security with Tony Anscombe – May 2026 edition In this roundup, Tony looks at attacks against Polish water treatment facilities, how AI-directed attacks failed in Mexico, and what Google believes is the first AI-generated zero-day exploit This month in security with Tony Anscombe – May 2026 edition Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH…
Read original ↗https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-may-2026eset · tlp:amber · 5/28/2026, 8:45:00 AM
ESET APT Activity Report Q4 2025–Q1 2026 An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026 ESET APT Activity Report Q4 2025–Q1 2026 Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Ukraine crisis – Digit…
Read original ↗https://www.welivesecurity.com/en/eset-research/eset-apt-activity-report-q4-2025-q1-2026eset · tlp:amber · 5/27/2026, 8:50:00 AM
What to consider before asking an AI chatbot for health advice Using chatbots for medical advice could elicit hallucinations and even expose you to security and privacy risks. Here’s what’s at stake and how to stay safe. What to consider before asking an AI chatbot for health advice Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts…
Read original ↗https://www.welivesecurity.com/en/privacy/what-consider-asking-ai-chatbot-health-adviceeset · tlp:amber · 5/26/2026, 8:50:00 AM
BTMOB: A stealthy RAT burrowing deep into Android devices The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compromise BTMOB: A stealthy RAT burrowing deep into Android devices Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiv…
Read original ↗https://www.welivesecurity.com/en/malware/btmob-stealthy-rat-burrowing-deep-android-deviceseset · tlp:amber · 5/22/2026, 8:50:00 AM
Foul play: Fake FIFA websites target soccer fans looking for World Cup tickets, merchandise Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and personal data Foul play: Scams target soccer fans with fake World Cup tickets, merchandise Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blo…
Read original ↗https://www.welivesecurity.com/en/cybersecurity/foul-play-fake-fifa-world-cup-websites-ticketseset · tlp:amber · 5/20/2026, 8:40:00 AM
Webworm: New burrowing techniques ESET researchers describe new tools and techniques that the Webworm APT group recently added to its arsenal Webworm: New burrowing techniques Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Ukraine crisis – Digital security resource cent…
Read original ↗https://www.welivesecurity.com/en/eset-research/webworm-new-burrowing-techniqueseset · tlp:amber · 5/19/2026, 8:50:00 AM
The quest for greater tech independence A complete decoupling from US technology is neither realistic nor necessary, but the changing environment does require nations and companies to reassess their relationships and dependencies The quest for greater tech independence Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts Whit…
Read original ↗https://www.welivesecurity.com/en/cybersecurity/quest-greater-tech-independenceeset · tlp:amber · 5/15/2026, 8:50:00 AM
Why geopolitical turmoil is a gift for scammers, and how to stay safe Conflict is a boon for opportunistic fraudsters. Look out for their ploys. Why geopolitical turmoil is a gift for scammers, and how to stay safe Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Ukraine …
Read original ↗https://www.welivesecurity.com/en/scams/geopolitical-turmoil-gift-scammers-how-stay-safeeset · tlp:amber · 5/14/2026, 8:50:00 AM
FrostyNeighbor: Fresh mischief and digital shenanigans ESET researchers uncovered new activities attributed to FrostyNeighbor, updating its compromise chain to support the group’s continual cyberespionage operations FrostyNeighbor: Fresh mischief and digital shenanigans Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts Whi…
Read original ↗https://www.welivesecurity.com/en/eset-research/frostyneighbor-fresh-mischief-digital-shenaniganseset · tlp:amber · 5/11/2026, 8:55:00 AM
Eyes wide open: How to mitigate the security and privacy risks of smart glasses Smart glasses allow anyone to track and record the world around them. That could put your data and the privacy of those nearby at risk. Eyes wide open: How to mitigate the security and privacy risks of smart glasses Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Resear…
Read original ↗https://www.welivesecurity.com/en/privacy/eyes-wide-open-mitigate-security-privacy-risks-smart-glasseseset · tlp:amber · 5/7/2026, 8:51:19 AM
Fake call logs, real payments: How CallPhantom tricks Android users ESET researchers uncovered fraudulent apps on Google Play that claim to provide the call history “for any number” and had been downloaded more than seven million times before being taken down Fake call logs, real payments: How CallPhantom tricks Android users Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY…
Read original ↗https://www.welivesecurity.com/en/eset-research/fake-call-logs-real-payments-how-callphantom-tricks-android-userseset · tlp:amber · 5/7/2026, 7:00:00 AM
Fixing the password problem is as easy as 123456 How come it’s still possible to ‘secure’ an online account with a six-digit string? Fixing trivial passwords is as easy as 123456 Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Ukraine crisis – Digital security resource c…
Read original ↗https://www.welivesecurity.com/en/cybersecurity/fixing-password-problem-as-easy-as-123456eset · tlp:amber · 5/5/2026, 8:55:27 AM
A rigged game: ScarCruft compromises gaming platform in a supply-chain attack ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via backdoor-laced Windows and Android games A rigged game: ScarCruft compromises gaming platform in a supply-chain attack Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH …
Read original ↗https://www.welivesecurity.com/en/eset-research/rigged-game-scarcruft-compromises-gaming-platform-supply-chain-attackeset · tlp:amber · 4/30/2026, 9:00:00 AM
This month in security with Tony Anscombe – April 2026 edition Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 - here's some of what made the headlines this month This month in security with Tony Anscombe – April 2026 edition Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET R…
Read original ↗https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-april-2026eset · tlp:amber · 4/24/2026, 9:00:00 AM
The calm before the ransom: What you see is not all there is A breach claims the systems as well as the confidence that was, in retrospect, a major vulnerability The calm before the ransomware storm: What you see is not all there is Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience…
Read original ↗https://www.welivesecurity.com/en/ransomware/calm-ransom-what-you-see-is-not-all-there-iseset · tlp:amber · 4/23/2026, 8:59:18 AM
GopherWhisper: A burrow full of malware ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions GopherWhisper: A burrow full of malware Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Uk…
Read original ↗https://www.welivesecurity.com/en/eset-research/gopherwhisper-burrow-full-malwareeset · tlp:amber · 4/21/2026, 8:55:00 AM
New NGate variant hides in a trojanized NFC payment app ESET researchers discover another iteration of NGate malware, this time possibly developed with the assistance of AI New NGate variant hides in a trojanized NFC payment app Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEA…
Read original ↗https://www.welivesecurity.com/en/eset-research/new-ngate-variant-hides-in-a-trojanized-nfc-payment-appeset · tlp:amber · 4/20/2026, 9:00:00 AM
What the ransom note won’t say An attack is what you see, but a business operation is what you’re up against Ransomware’s back office: What the ransom note won’t say Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Ukraine crisis – Digital security resource center WeLiveP…
Read original ↗https://www.welivesecurity.com/en/ransomware/what-ransom-note-doesnt-sayeset · tlp:amber · 4/17/2026, 9:00:00 AM
That data breach alert might be a trap Ignoring a real breach notification invites risk, but falling for a bogus one could be even worse. Stop reacting on autopilot. Why that next data breach alert could be a trap Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Ukraine c…
Read original ↗https://www.welivesecurity.com/en/scams/data-breach-alert-might-be-trapeset · tlp:amber · 4/16/2026, 12:00:00 PM
Supply chain dependencies: Have you checked your blind spot? Your biggest risk may be a vendor you trust. How can SMBs map their third-party blind spots and build operational resilience? Supply chain dependencies: Have you checked your blind spot? Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat report…
Read original ↗https://www.welivesecurity.com/en/business-security/supply-chain-dependencies-have-you-checked-your-blind-spoteset · tlp:amber · 4/10/2026, 9:00:00 AM
Recovery scammers hit you when you’re down: Here’s how to avoid a second strike If you’ve been a victim of fraud, you’re likely already a lead on a ‘sucker list’ – and if you’re not careful, your ordeal may be about to get worse. Recovery scammers hit you when you’re down: Here’s how to avoid a ‘second strike’ Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH A…
Read original ↗https://www.welivesecurity.com/en/scams/recovery-scammers-hit-when-down-avoid-second-strikeeset · tlp:amber · 4/7/2026, 9:00:00 AM
As breakout time accelerates, prevention-first cybersecurity takes center stage Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy. As breakout time accelerates, prevention-first cybersecurity takes center stage Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About E…
Read original ↗https://www.welivesecurity.com/en/business-security/breakout-time-accelerates-prevention-first-cybersecurity-center-stageeset · tlp:amber · 4/1/2026, 9:00:00 AM
Digital assets after death: Managing risks to your loved one’s digital estate Fraudsters often target the accounts of the deceased or their grieving relatives. Here’s how to keep the scammers at bay. Digital assets after death: Managing risks to your loved one’s digital estate Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podca…
Read original ↗https://www.welivesecurity.com/en/cybersecurity/digital-assets-death-managing-risks-your-loved-ones-digital-estateeset · tlp:amber · 3/31/2026, 8:27:18 AM
This month in security with Tony Anscombe – March 2026 edition The past four weeks have seen a slew of new cybersecurity wake-up calls that showed why every organization needs a well-thought-out cyber-resilience plan This month in security with Tony Anscombe – March 2026 edition Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Pod…
Read original ↗https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-march-2026