Hello.

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2026 and Q3 2026 ESET APT Activity Report Q2 2026–Q2 2026 summarizes notable activities of selected advanced persistent threat (APT) groups documented by ESET researchers between April and September 2026. The operations presented here reflect the broader threat landscape observed during this period and highlight some of its key trends and developments. They represent only a s

With cyber resilience, trust and digital sovereignty now deal makers in the security market, the certification of the ESET PROTECT solution as a leader in the EPR Comparative Report 2026 underlines consistent quality, cost and capability. ESET PROTECT Enterprise Cloud has secured a Certified Leader position in AV-Comparatives’ Endpoint Prevention and Response for the seventh year in a row. It’s one of four vendors out of 14 tested in the top right-hand corner of AV-C’s graph,

With attacks constantly knocking at SMBs’ doors, MSPs have an opportunity to become strategic resilience partners. Why would a company partner with an MSP? Beyond the obvious IT support, there is a security angle, which is slowly making its way to the forefront of more boardroom conversations. But security by itself is not the only thing pushing customers toward MSPs. The wider issue is the environment in which companies now operate. Cyberattacks intersect with geopolitical t

ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a destructive attack against a Ukrainian grain firm Executive summary This report analyzes activity during which UAC‑0099 gained initial access on July 16th, 2025 and handed it off to Sandworm, which then conducted a data-wiping attack on September 17th, 2025. It particularly focuses on the MythicRatatoskr backdoor,

You can trust a social media platform and still get scammed by an ad running on it Fraudulent ads have been around for about as long as the advertising industry. Today, they often reach you through social media feeds, apps and search results you use every day, and the platforms showing them can also (inadvertently) help build them. In September, the US Federal Trade Commission (FTC) asked whether platforms should be required to stop impersonation scam ads from ever reaching c

If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious In September, reports emerged that a Virginia woman had been submerged by a flood of emails. Hundreds of automated messages poured in over a 24-hour period, including newsletters and promotions she’d never signed up to. But this was no ordinary spam campaign. The real reason behind the inbox blitz was to bury a legitimate email from the victim’s bank warning her ab

Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next. Publicly reported data breaches hit an all-time high in the US last year, with over 3,300 incidents recorded and nearly 280 million victim notices mailed out. But are all of these worth the paper they’re written on? Increasingly, they lack crucial details. As the volume of data breach incidents increases, there’s a growing chance that you’ll be caught up

Two critical security vulnerabilities in PHP have triggered urgent warnings for website owners and IT teams worldwide. The technology behind a large part of the internet is facing a serious security challenge. PHP, a programming language widely used to build websites and web applications, has been affected by two critical vulnerabilities that could allow attackers to take control of vulnerable servers remotely. The flaws, identified as CVE-2026-109618 and CVE-2026-109619 and

Gartner® explores how geopolitical, regulatory, and tech risks reshape European digital control. Significant changes in the geopolitical landscape are increasingly forcing European businesses to reconsider their technology dependencies. Questions about who controls critical services, which laws apply, and whether access could be disrupted or even halted have become part of the business continuity planning conversation. Conversations around digital sovereignty have expanded be

ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026 ESET researchers have documented the evolution of the MATCHBOIL malware, a custom C# downloader wielded by the Russia-aligned UAC-0099 APT group. The malware is used to download a payload from the group’s C&C server, install it, and establish its persistence. Although MATCHBOIL was first documented by CERT-UA in August 2025, our research indicates that it has been in development since at l