UAT-7810, the Chinese APT behind a prolonged espionage infrastructure campaign, has added new backdoors to its arsenal.

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

A year ago, ESET Research was part of two major operations that disrupted some of the leading cybercriminal operations at the time, Lumma Stealer and Danabot. More recently, our researchers are once ...

Infostealers continue to be some of the most pervasive and impactful threats across the cybercrime ecosystem. They play a central role in intrusions, silently harvesting passwords, cookies, and ...

Learn the important things to back up before reinstalling your Linux system. SSH/GPG keys, dotfiles, packages, browser data, 2FA and more.

A new version of the RedHook Android malware abuses the Android Wireless Debugging (Wireless ADB) mechanism in a novel way to ...

This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

The terminal feel more effective and relevant to my workflow.

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

Eighteen new GNU releases in the last month (as of June 30, 2026): apl-2.0: GNU APL is a free interpreter for the programming language APL. It is an implementation of the ISO stan ...

Windows 11 might not be as great out of the box, but it gets close when you add a few programs.

Windows 11/10 has a lot of optional features intended primarily for business networks and servers. You can turn them on and off using the Windows Features Dialog. In this post, we will explain what ...