Award-winning news, views, and insight from the ESET security community
ESET Research • 11 Jun 2026 • 11 min. read
ESET Research
OceanLotus: From external espionage to domestic targeting
Eric Howard • 20 May 2026 • 15 min. read
Webworm: New burrowing techniques
Damien Schaeffer • 14 May 2026 • 8 min. read
FrostyNeighbor: Fresh mischief and digital shenanigans
Business Security
Virtual machines, virtually everywhere – and with real security gaps
Cyber fallout from the Iran war: What to have on your radar
Scams
To the moon and hack: Fake SafeMoon app drops malware to spy on you
Cryptocurrencies rise and fall, but one thing stays the same – cybercriminals attempt to cash in on the craze
Martina López and Tomáš Foltýn • 06 Oct 2021
UEFI threats moving to the ESP: Introducing ESPecter bootkit
ESET research discovers a previously undocumented UEFI bootkit with roots going back all the way to at least 2012
Martin Smolár and Anton Cherepanov • 05 Oct 2021
Video
Week in security with Tony Anscombe
New ESET Threat Report is out – Cybersecurity Awareness Month begins today – What organizations should do to secure their VPNs
Editor • 01 Oct 2021
Digital Security
October is Cybersecurity Awareness Month! Why being cyber-smart matters
The campaign may last for a month, but we should remember that cybersecurity is a year-round affair
Amer Owaida • 01 Oct 2021
Hackers could force locked iPhones to make contactless payments
Flaws in Apple Pay and Visa could allow criminals to make arbitrary contactless payments – no authentication needed, research finds
Amer Owaida • 30 Sep 2021
Threat Reports
ESET Threat Report T2 2021
A view of the T2 2021 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts
Roman Kováč • 30 Sep 2021
CISA and NSA release guidance for securing VPNs
What your organization should consider when it comes to choosing a VPN solution and hardening it against attacks
Amer Owaida • 29 Sep 2021
Google releases emergency fix to plug zero-day hole in Chrome
The emergency release comes a mere three days after Google’s previous update that plugged another 19 security loopholes
Amer Owaida • 27 Sep 2021
ESET unmasks FamousSparrow APT group – Stopping cloud data leaks – European cybercrime ring busted
Editor • 24 Sep 2021
Bug in macOS Finder allows remote code execution
While Apple did issue a patch for the vulnerability, it seems that the fix can be easily circumvented
Amer Owaida • 23 Sep 2021
FamousSparrow: A suspicious hotel guest
Yet another APT group that exploited the ProxyLogon vulnerability in March 2021
Matthieu Faou and Tahseen Bin Taj • 23 Sep 2021
Plugging the holes: How to prevent corporate data leaks in the cloud
Misconfigurations of cloud resources can lead to various security incidents and ultimately cost your organization dearly. Here’s what you can do to prevent cloud configuration conundrums.
Phil Muncaster • 22 Sep 2021
Sign up for our newsletters