Award-winning news, views, and insight from the ESET security community
Jean-Ian Boutin • 19 May 2025 • 3 min. read
ESET Research
Threat Reports
ESET APT Activity Report Q4 2024–Q1 2025
Matthieu Faou • 15 May 2025 • 18 min. read
Operation RoundPress
Facundo Muñoz • 30 Apr 2025 • 11 min. read
TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks
Business Security
Ransomware
Resilience in the face of ransomware: A key to business survival
Making it stick: How to get the most out of cybersecurity training
Video
Week in security with Tony Anscombe
How IISpy spies on its victims and stays under the radar – IISerpent tampers with search engine results – How to avoid falling prey to ransomware
Editor • 13 Aug 2021
COVID-19
Examining threats to device security in the hybrid workplace
As employees split their time between office and off-site work, there’s a greater potential for company devices and data to fall into the wrong hands
Phil Muncaster • 12 Aug 2021
IISerpent: Malware-driven SEO fraud as a service
The last in our series on IIS threats introduces a malicious IIS extension used to manipulate page rankings for third-party websites
Zuzana Hromcová • 11 Aug 2021
Scams
Deepfakes – the bot made me do it
As deepfakes become indistinguishable from reality and the potential for the misuse of synthetic content is virtually endless, what can you do to avoid falling victim to deepfake fraud?
Tony Anscombe • 10 Aug 2021
Ransomware runs rampant, so how can you combat this threat?
A new paper explains how ransomware has become one of the top cyberthreats of the day and how your organization can avoid becoming the next victim
Ondrej Kubovič • 10 Aug 2021
Digital Security
DEF CON 29: Satellite hacking 101
How poking at the innards of satellites can make the future of cybersecurity in space more palatable
Cameron Camp • 09 Aug 2021
IISpy: A complex server-side backdoor with anti-forensic features
The second in our series on IIS threats dissects a malicious IIS extension that employs nifty tricks in an attempt to secure long-term espionage on the compromised servers
Zuzana Hromcová • 09 Aug 2021
ESET research dissects IIS web server threats – How IIStealer steals credit card data – The flood of spam in your inbox
Editor • 06 Aug 2021
Black Hat 2021: Lessons from a lawyer
Why companies and their security teams need to engage with a lawyer before an incident occurs
Tony Anscombe • 06 Aug 2021
Cybercrime
Black Hat 2021: Wanted posters for ransomware slingers
Is the net closing in on cyber-extortionists and can bounties on their collective heads ultimately help stem the ransomware scourge?
Cameron Camp • 06 Aug 2021
IIStealer: A server-side threat to e-commerce transactions
The first in our series on IIS threats looks at a malicious IIS extension that intercepts server transactions to steal credit card information
Zuzana Hromcová • 06 Aug 2021
Anatomy of native IIS malware
ESET researchers publish a white paper putting IIS web server threats under the microscope
Zuzana Hromcová and Anton Cherepanov • 06 Aug 2021
Sign up for our newsletters