Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers

The proliferation of new top-level domains (TLDs) has exacerbated a well-known security weakness: Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didn't exist at the time. Meaning, they are…

Before and during the 2024 Paris Olympics, authorities faced cybersecurity threats from a wide number of vectors. Here's how their defenses held up.

ESET Research uncovers Android malware that relays NFC data from victims’ payment cards, via victims’ mobile phones, to the device of a perpetrator waiting at an ATM.

The US government has filed a lawsuit against Georgia Tech for alleged cybersecurity violations as a Department of Defense contractor

Browser credential harvesting is an unusual activity for a ransomware group

YouTube’s new AI troubleshooting tool is designed to help users recover and secure their accounts after they’ve been hacked

Liverpool fans were the most frequent and highest-value targets for ticket scams last season, losing over £17,000 to fraudsters

Malware called NGate allows criminals to steal near field communication data from Android phones. The data is sent to the fraudsters before being used to steal cash.

The malware is a customized variant of the powerful open source XenoRAT information stealing malware often deployed by Kimsuky and other DPRK APTs.

The release of new NIST quantum-proof cryptography standards signals it's time for cybersecurity teams to get serious about preparing for the rise of quantum threats.

The disclosure of CVE-2024-28987 means that, in two weeks, there have been two critical bugs and corresponding patches for SolarWinds' less-often-discussed IT help desk software.

Ticket scams are costing football fans close to £200 a season, on average, according to a report.

Collaboration with security teams, making cybersecurity a core principle of business strategy, and investing in defenses better position organizations to thwart threats and ensure business continuity.

The malware builds on a near-field communication tool in combination with phishing and social engineering to steal cash.

The guidance is part of a coordinated, global effort to eradicate living-off-the-land techniques used against critical infrastructure.

ESET researchers have recently revealed an uncommon type of phishing campaign using Progressive Web Apps (PWAs) that targeted the clients of a prominent Czech bank.