Hello.

ESET Research analyzes a DNS hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method At ESET, we have been tracking the DarkVigil toolset (also known as FDMTP) and its operator, the SlippyNunchucks threat actor, since 2025. Across the campaigns we have analyzed, one behavior has remained consistent: DarkVigil implants are typically deployed through popular Chinese applications. By abusing these applications, the SlippyNunchucks threa

Temu is a legitimate, recognized online marketplace, and that makes it a target for scammers. This article talks about marketing place risks and related scams, and shows you how to spot fake offers and scam links. There’s a big difference between online shopping and visiting a mall. Bricks-and-mortar retailers need to be located near their customers. They need to buy and stock products in multiple locations, and they are physically present if you have a problem. Online retail

To connect or not to connect? That is the question. It’s Monday, 10 a.m. The weekend fog has finally lifted. Blue- and white-collar workers are settling into the rhythm of the day, their keyboard click-clacks blending with the low rumble of trams carrying hundreds of people beneath the office windows. The city is awake, moving, functioning. Then everything stops. Screens go dark. Keyboards fall silent. Trams screech to a halt. Phones come out. Emergency alerts follow: The loc

Inside ESET NeoCortex, the cybersecurity model that will never go rogue. Defenders today process an overwhelming amount of raw data that needs to be boiled down to an understandable cybersecurity incident. Instead of just reiterating analysts’ findings and adding more noise, cybersecurity technologies should support them by identifying what matters and help them act before the attackers can achieve their goals. That is the problem ESET’s correlation engine ESET LiveCortex, an

ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line ESET researchers have been tracking a Russia-aligned threat actor that we named Gorbag. While elements of the group’s tooling – most notably the GIFTEDCROOK infostealer, which CERT-UA attributes to UAC-0226 – have previously appeared in public reporting, Gorbag’s targeting and overall activity have remained largely unexamined. Acti

SMBs need guided onboarding and supervised protection to optimize their investments Cybersecurity for smaller businesses often suffers by being either underpowered or too complex. This tension can be challenging to resolve for small IT teams that may lack an in-house cyber expert. Understanding the problem is not the same as understanding where the solution lies. Effective SMB protection demands that vendors lead their customers through a clear onboarding process – and offer

The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cybercrime has professionalized Infostealers have become an established business, with developers who produce and maintain the product and paying customers who run their own campaigns with them. Amatera – which topped ESET’s infostealer detections in Latin America in the first half of 2026 but targets victims worldwide – shows what this professionalization loo

Cyber warranties may help cover incident costs, but terms matter. Learn what to check before counting on one. A cyber warranty is a contract in which a security vendor reimburses defined breach costs, provided the customer maintained the security controls the warranty requires. If a vendor has offered you a cyber warranty, you may be wondering whether it provides meaningful protection or is simply a marketing claim attached to a security product. While warranties can help of

Cyber insurance or cyber warranty? Learn how coverage, claims, and requirements differ—and why it matters. While cyber insurance is a regulated policy covering a broad range of breach losses, a cyber warranty is a vendor contract paying fixed amounts on defined triggers. Since both can provide financial support after a cyber incident, buyers may confuse their roles. That misunderstanding can lead to gaps in financial protection or unrealistic expectations during a claim. Cybe

A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and which generated more noise than real danger? The week leading up to October 25, 2026, was every cyber defender’s nightmare: a barrage of critical vulnerabilities in PHP and the Linux kernel, a compromised LiteLLM release, a maximum-severity flaw in GitLab, a Node.js Brotli flaw, and a certificate authority incident affecting