ESET researchers have identified a new variant of NGate malware embedded within a trojanized NFC payment application, marking another evolution of the threat. The discovery suggests the malware may have been developed with AI assistance, indicating an escalation in the sophistication of its creation methods.
An attack is what you see, but a business operation is what you’re up against
Ignoring a real breach notification invites risk, but falling for a bogus one could be even worse. Stop reacting on autopilot.
Your biggest risk may be a vendor you trust. How can SMBs map their third-party blind spots and build operational resilience?
Threatlocker Review: Threatlocker is a security solution based on the Zero Trust model: We tested it against various malware, security attacks, simulations to see how it holds up in the real world.
Sensor Intel Series: March 2026 CVE Trends
New model is the first AI system to complete a difficult multistep infiltration challenge.
Fraud victims face heightened risk of secondary exploitation when scammers target them during recovery efforts using compiled "sucker lists" of prior victims. Recovery scams capitalize on victims' vulnerability and desire to recoup losses, potentially compounding financial and emotional harm. Understanding these targeting tactics is essential for victims to protect themselves from additional fraud attempts.
Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy.
If you squint and look at the CISA KEV list, you might think it's made up exclusively of vulnerabilities in file transfer solutions. While this would be wrong (and you shouldn’t squint, it’s bad for your eyes), file transfer solutions do play a decent
Fraudsters often target the accounts of the deceased or their grieving relatives. Here’s how to keep the scammers at bay.
The past four weeks have seen a slew of new cybersecurity wake-up calls that showed why every organization needs a well-thought-out cyber-resilience plan
Today, we woke up with a nagging feeling: what if Citrix had, in fact, patched multiple Memory Overread vulnerabilities as part of CVE-2026-3055? While we've been using our analysis from Part 1 (please read it first, as this post will be brief) to accurately identify exploitable
This year, AI agents took the center stage – as a defensive capability, but more pressingly as a risk many organizations haven't caught up with
Silver Fox is back in Japan, spoofing tax and HR emails timed to the one season when no one thinks twice about opening them
Cloud VMs offer unmatched speed, scale and flexibility – all of which could eventually count for little if they’re left to fend for themselves