Cybersecurity research and insight for the AI era · Moving soon to the ESET Blog
Cybersecurity research and insight for the AI era · <a href='https://www.eset.com/blog/en/' target='_blank'>Moving soon to the ESET Blog</a>
Anton Cherepanov and Peter Strýček • 22 Oct 2026 • 16 min. read
ESET Research
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
Fernando Tavella • 08 Oct 2026 • 15 min. read
MATCHBOIL: New tricks, same old evil intentions
Alexandre Côté Cyr and Romain Dumont • 17 Sep 2026 • 17 min. read
Beware the SparroWock: The backdoor that bites, the commands that catch
Business Security
The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive
GuardBreaker: Derailing AI-assisted malware analysis with a code comment
The cyberthreat that drives businesses towards cyber risk insurance
Many smaller organizations are turning to cyber risk insurance, both to protect against the cost of a cyber incident and to use the extensive post-incident services that insurers provide
Tony Anscombe • 31 Jul 2024
Phishing targeting Polish SMBs continues via ModiLoader
ESET researchers detected multiple, widespread phishing campaigns targeting SMBs in Poland during May 2024, distributing various malware families
Jakub Kaloč • 30 Jul 2024
Digital Security
Beware of fake AI tools masking very real malware threats
Ever attuned to the latest trends, cybercriminals distribute malicious tools that pose as ChatGPT, Midjourney and other generative AI assistants
Phil Muncaster • 29 Jul 2024
Video
Telegram for Android hit by a zero-day exploit – Week in security with Tony Anscombe
Attackers abusing the EvilVideo vulnerability could share malicious Android payloads via Telegram channels, groups, and chats, all while making them appear as legitimate multimedia files
Editor • 26 Jul 2024
Building cyber-resilience: Lessons learned from the CrowdStrike incident
Organizations, including those that weren’t struck by the CrowdStrike incident, should resist the temptation to attribute the IT meltdown to exceptional circumstances
Tony Anscombe • 23 Jul 2024
The tap-estry of threats targeting Hamster Kombat players
ESET researchers have discovered threats abusing the success of the Hamster Kombat clicker game
Lukas Stefanko and Peter Strýček • 23 Jul 2024
Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android
ESET researchers discovered a zero-day Telegram for Android exploit that allows sending malicious files disguised as videos
Lukas Stefanko • 22 Jul 2024
How a signed driver exposed users to kernel-level threats – Week in Security with Tony Anscombe
A purported ad blocker marketed as a security solution leverages a Microsoft-signed driver that inadvertently exposes victims to dangerous threats
Editor • 21 Jul 2024
Beyond the blue screen of death: Why software updates matter
The widespread IT outages triggered by a faulty CrowdStrike update have put software updates in the spotlight. Here’s why you shouldn’t dread them.
Tomáš Foltýn • 19 Jul 2024
The complexities of cybersecurity update processes
If a software update process fails, it can lead to catastrophic consequences, as seen today with widespread blue screens of death blamed on a bad update by CrowdStrike
Tony Anscombe • 19 Jul 2024
HotPage: Story of a signed, vulnerable, ad-injecting driver
A study of a sophisticated Chinese browser injector that leaves more doors open!
Romain Dumont • 18 Jul 2024
Small but mighty: Top 5 pocket-sized gadgets to boost your ethical hacking skills
These five formidable bits of kit that can assist cyber-defenders in spotting chinks in corporate armors and help hobbyist hackers deepen their understanding of cybersecurity
David González Cuautle • 16 Jul 2024
Sign up for our newsletters