Hello.

Inside ESET NeoCortex, the cybersecurity model that will never go rogue. Defenders today process an overwhelming amount of raw data that needs to be boiled down to an understandable cybersecurity incident. Instead of just reiterating analysts’ findings and adding more noise, cybersecurity technologies should support them by identifying what matters and help them act before the attackers can achieve their goals. That is the problem ESET’s correlation engine ESET LiveCortex, an

A Nigerian cybersecurity advisory has warned of a malware campaign involving counterfeit software websites and malicious installers. The incident highlights why downloading familiar applications from unverified sources can expose computers and business networks to serious risks. Downloading software has become a routine part of using computers. Whether installing a browser, productivity application, PDF tool or device utility, users regularly search online for applications th

A fraudulent website impersonating Nigeria's device verification portal is attempting to exploit public trust. Here is what users need to know before sharing personal information online. Digital services have made it easier for Nigerians to access information, verify devices and complete important processes online. However, the growing reliance on these services has also created opportunities for cybercriminals to impersonate trusted institutions and exploit unsuspecting user

ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line ESET researchers have been tracking a Russia-aligned threat actor that we named Gorbag. While elements of the group’s tooling – most notably the GIFTEDCROOK infostealer, which CERT-UA attributes to UAC-0226 – have previously appeared in public reporting, Gorbag’s targeting and overall activity have remained largely unexamined. Acti

SMBs need guided onboarding and supervised protection to optimize their investments Cybersecurity for smaller businesses often suffers by being either underpowered or too complex. This tension can be challenging to resolve for small IT teams that may lack an in-house cyber expert. Understanding the problem is not the same as understanding where the solution lies. Effective SMB protection demands that vendors lead their customers through a clear onboarding process – and offer

The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cybercrime has professionalized Infostealers have become an established business, with developers who produce and maintain the product and paying customers who run their own campaigns with them. Amatera – which topped ESET’s infostealer detections in Latin America in the first half of 2026 but targets victims worldwide – shows what this professionalization loo

Cyber warranties may help cover incident costs, but terms matter. Learn what to check before counting on one. A cyber warranty is a contract in which a security vendor reimburses defined breach costs, provided the customer maintained the security controls the warranty requires. If a vendor has offered you a cyber warranty, you may be wondering whether it provides meaningful protection or is simply a marketing claim attached to a security product. While warranties can help of

Cyber insurance or cyber warranty? Learn how coverage, claims, and requirements differ—and why it matters. While cyber insurance is a regulated policy covering a broad range of breach losses, a cyber warranty is a vendor contract paying fixed amounts on defined triggers. Since both can provide financial support after a cyber incident, buyers may confuse their roles. That misunderstanding can lead to gaps in financial protection or unrealistic expectations during a claim. Cybe

A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and which generated more noise than real danger? The week leading up to October 25, 2026, was every cyber defender’s nightmare: a barrage of critical vulnerabilities in PHP and the Linux kernel, a compromised LiteLLM release, a maximum-severity flaw in GitLab, a Node.js Brotli flaw, and a certificate authority incident affecting

CAPTCHAs are a familiar sight for any internet user. But cybercriminals are exploiting the trust we place in them to deliver fake CAPTCHA scams designed to install malware or grant unwanted permissions. Here’s how they work, what’s at stake, and how to stay safe. Key takeaways A CAPTCHA that asks you to open Run, PowerShell, Terminal, Command Prompt, download a file, install an extension, or enable notifications is a fake CAPTCHA scam A CAPTCHA should keep you in the browser.