Award-winning news, views, and insight from the ESET security community
Alexandre Côté Cyr and Romain Dumont • 17 Sep 2026 • 17 min. read
ESET Research
Beware the SparroWock: The backdoor that bites, the commands that catch
Martin Smolár • 14 Jul 2026 • 20 min. read
Forgotten UEFI shims undermining Secure Boot
Zoltán Rusnák • 25 Jun 2026 • 10 min. read
Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances
Business Security
Virtual machines, virtually everywhere – and with real security gaps
Cyber fallout from the Iran war: What to have on your radar
Scams
Investors beware: AI-powered financial scams swamp social media
Can you tell the difference between legitimate marketing and deepfake scam ads? It’s not always as easy as you may think.
Phil Muncaster • 18 Aug 2025
Supply-chain dependencies: Check your resilience blind spot
Does your business truly understand its dependencies, and how to mitigate the risks posed by an attack on them?
Tony Anscombe • 12 Aug 2025
Kids Online
How the always-on generation can level up its cybersecurity game
Digital natives are comfortable with technology, but may be more exposed to online scams and other threats than they think
Phil Muncaster • 12 Aug 2025
Video
WinRAR zero-day exploited in espionage attacks against high-value targets
The attacks used spearphishing campaigns to target financial, manufacturing, defense, and logistics companies in Europe and Canada, ESET research finds
Editor • 11 Aug 2025
Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability
ESET Research discovered a zero-day vulnerability in WinRAR being exploited in the wild in the guise of job application documents; the weaponized archives exploited a path traversal flaw to compromise their targets
Anton Cherepanov, Peter Strýček, Damien Schaeffer • 11 Aug 2025
Black Hat USA 2025: Is a high cyber insurance premium about your risk, or your insurer’s?
A sky-high premium may not always reflect your company’s security posture
Tony Anscombe • 08 Aug 2025
Mobile Security
Android adware: What is it, and how do I get it off my device?
Is your phone suddenly flooded with aggressive ads, slowing down performance or leading to unusual app behavior? Here’s what to do.
Phil Muncaster • 08 Aug 2025
Black Hat USA 2025: Policy compliance and the myth of the silver bullet
Who’s to blame when the AI tool managing a company’s compliance status gets it wrong?
Tony Anscombe • 07 Aug 2025
Black Hat USA 2025: Does successful cybersecurity today increase cyber-risk tomorrow?
Success in cybersecurity is when nothing happens, plus other standout themes from two of the event’s keynotes
Podcasts
ESET Threat Report H1 2025: ClickFix, infostealer disruptions, and ransomware deathmatch
Threat actors are embracing ClickFix, ransomware gangs are turning on each other – toppling even the leaders – and law enforcement is disrupting one infostealer after another
ESET Research • 05 Aug 2025
Is your phone spying on you? | Unlocked 403 cybersecurity podcast (S2E5)
Here's what you need to know about the inner workings of modern spyware and how to stay away from apps that know too much
Editor • 01 Aug 2025
Privacy
Why the tech industry needs to stand firm on preserving end-to-end encryption
Restricting end-to-end encryption on a single-country basis would not only be absurdly difficult to enforce, but it would also fail to deter criminal activity
Tony Anscombe • 01 Aug 2025
Sign up for our newsletters