o Why tech-savvy leadership is key to cyber insurance readiness By www.welivesecurity.com Published On :: Wed, 07 Aug 2024 09:00:00 +0000 Having knowledgeable leaders at the helm is crucial for protecting the organization and securing the best possible cyber insurance coverage Full Article
o Top 6 Craigslist scams: Don’t fall for these tricks By www.welivesecurity.com Published On :: Mon, 12 Aug 2024 09:00:00 +0000 Here’s how to spot and dodge scams when searching for stuff on the classified ads website that offers almost everything under the sun Full Article
o Black Hat USA 2024: How cyber insurance is shaping cybersecurity strategies By www.welivesecurity.com Published On :: Thu, 08 Aug 2024 14:40:36 +0000 Cyber insurance is not only a safety net, but it can also be a catalyst for advancing security practices and standards Full Article
o Why scammers want your phone number By www.welivesecurity.com Published On :: Tue, 13 Aug 2024 09:00:00 +0000 Your phone number is more than just a way to contact you – scammers can use it to target you with malicious messages and even exploit it to gain access to your bank account or steal corporate data Full Article
o Black Hat USA 2024: All eyes on election security By www.welivesecurity.com Published On :: Fri, 09 Aug 2024 13:07:56 +0000 In this high-stakes year for democracy, the importance of robust election safeguards and national cybersecurity strategies cannot be understated Full Article
o Black Hat USA 2024 recap – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 09 Aug 2024 13:53:46 +0000 Unsurprisingly, many discussions revolved around the implications of the CrowdStrike outage, including the lessons it may have offered for bad actors Full Article
o Be careful what you pwish for – Phishing in PWA applications By www.welivesecurity.com Published On :: Tue, 20 Aug 2024 09:00:00 +0000 ESET analysts dissect a novel phishing method tailored to Android and iOS users Full Article
o The great location leak: Privacy risks in dating apps By www.welivesecurity.com Published On :: Mon, 12 Aug 2024 14:51:08 +0000 What if your favorite dating, social media or gaming app revealed your exact coordinates to someone you’d rather keep at a distance? Full Article
o NGate Android malware relays NFC traffic to steal cash By www.welivesecurity.com Published On :: Thu, 22 Aug 2024 09:00:00 +0000 Android malware discovered by ESET Research relays NFC data from victims’ payment cards, via victims’ mobile phones, to the device of a perpetrator waiting at an ATM Full Article
o How a BEC scam cost a company $60 million – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 16 Aug 2024 11:01:54 +0000 Business email compromise (BEC) has once again proven to be a costly issue, with a company losing $60 million in a wire transfer fraud scheme Full Article
o How regulatory standards and cyber insurance inform each other By www.welivesecurity.com Published On :: Wed, 21 Aug 2024 09:00:00 +0000 Should the payment of a ransomware demand be illegal? Should it be regulated in some way? These questions are some examples of the legal minefield that cybersecurity teams must deal with Full Article
o Exploring Android threats and ways to mitigate them | Unlocked 403 cybersecurity podcast (ep. 5) By www.welivesecurity.com Published On :: Mon, 26 Aug 2024 09:00:00 +0000 The world of Android threats is quite vast and intriguing. In this episode, Becks and Lukáš demonstrate how easy it is to take over your phone, with some added tips on how to stay secure Full Article
o Old devices, new dangers: The risks of unsupported IoT tech By www.welivesecurity.com Published On :: Tue, 27 Aug 2024 09:00:00 +0000 In the digital graveyard, a new threat stirs: Out-of-support devices becoming thralls of malicious actors Full Article
o PWA phishing on Android and iOS – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 23 Aug 2024 09:00:00 +0000 Phishing using PWAs? ESET Research's latest discovery might just ruin some users' assumptions about their preferred platform's security Full Article
o Analysis of two arbitrary code execution vulnerabilities affecting WPS Office By www.welivesecurity.com Published On :: Wed, 28 Aug 2024 09:00:00 +0000 Demystifying CVE-2024-7262 and CVE-2024-7263 Full Article
o The key considerations for cyber insurance: A pragmatic approach By www.welivesecurity.com Published On :: Wed, 04 Sep 2024 09:00:00 +0000 Would a more robust cybersecurity posture impact premium costs? Does the policy offer legal cover? These are some of the questions organizations should consider when reviewing their cyber insurance options Full Article
o In plain sight: Malicious ads hiding in search results By www.welivesecurity.com Published On :: Tue, 03 Sep 2024 09:00:00 +0000 Sometimes there’s more than just an enticing product offer hiding behind an ad Full Article
o Stealing cash using NFC relay – Week in Security with Tony Anscombe By www.welivesecurity.com Published On :: Wed, 28 Aug 2024 14:01:52 +0000 The discovery of the NGate malware by ESET Research is another example of how sophisticated Android threats have become Full Article
o CosmicBeetle steps up: Probation period at RansomHub By www.welivesecurity.com Published On :: Tue, 10 Sep 2024 09:00:00 +0000 CosmicBeetle, after improving its own ransomware, tries its luck as a RansomHub affiliate Full Article
o ESET Research Podcast: HotPage By www.welivesecurity.com Published On :: Thu, 05 Sep 2024 09:26:54 +0000 ESET researchers discuss HotPage, a recently discovered adware armed with a highest-privilege, yet vulnerable, Microsoft-signed driver Full Article
o Bitcoin ATM scams skyrocket – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 06 Sep 2024 10:25:42 +0000 The schemes disproportionately victimize senior citizens, as those aged 60 or over were more than three times as likely as younger adults to fall prey to the scams Full Article
o 6 common Geek Squad scams and how to defend against them By www.welivesecurity.com Published On :: Wed, 11 Sep 2024 09:00:00 +0000 Learn about the main tactics used by scammers impersonating Best Buy’s tech support arm and how to avoid falling for their tricks Full Article
o ESET Research Podcast: EvilVideo By www.welivesecurity.com Published On :: Tue, 17 Sep 2024 09:00:00 +0000 ESET researchers discuss how they uncovered a zero-day Telegram for Android exploit that allowed attackers to send malicious files posing as videos Full Article
o Cyberespionage the Gamaredon way: Analysis of toolset used to spy on Ukraine in 2022 and 2023 By www.welivesecurity.com Published On :: Thu, 26 Sep 2024 09:00:00 +0000 ESET Research has conducted a comprehensive technical analysis of Gamaredon’s toolset used to conduct its cyberespionage activities focused in Ukraine Full Article
o CosmicBeetle joins the ranks of RansomHub affiliates – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 13 Sep 2024 10:21:33 +0000 ESET researchers also find that CosmicBeetle attempts to exploit the notoriety of the LockBit ransomware gang to advance its own ends Full Article
o Understanding cyber-incident disclosure By www.welivesecurity.com Published On :: Wed, 18 Sep 2024 09:02:40 +0000 Proper disclosure of a cyber-incident can help shield your business from further financial and reputational damage, and cyber-insurers can step in to help Full Article
o Influencing the influencers | Unlocked 403 cybersecurity podcast (ep. 6) By www.welivesecurity.com Published On :: Thu, 19 Sep 2024 09:00:00 +0000 How do analyst relations professionals sort through the noise to help deliver the not-so-secret sauce for a company's success? We spoke with ESET's expert to find out. Full Article
o Time to engage: How parents can help keep their children safe on Snapchat By www.welivesecurity.com Published On :: Tue, 24 Sep 2024 09:00:00 +0000 Here’s what parents should know about Snapchat and why you should take some time to ensure your children can stay safe when using the app Full Article
o FBI, CISA warning over false claims of hacked voter data – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 20 Sep 2024 11:03:10 +0000 With just weeks to go before the US presidential election, the FBI and the CISA are warning about attempts to sow distrust in the electoral process Full Article
o Don’t panic and other tips for staying safe from scareware By www.welivesecurity.com Published On :: Wed, 25 Sep 2024 09:00:00 +0000 Keep your cool, arm yourself with the right knowledge, and other tips for staying unshaken by fraudsters’ scare tactics Full Article
o Cybersecurity Awareness Month needs a radical overhaul – it needs legislation By www.welivesecurity.com Published On :: Tue, 01 Oct 2024 09:00:00 +0000 Despite their benefits, awareness campaigns alone are not enough to encourage widespread adoption of cybersecurity best practices Full Article
o Gamaredon's operations under the microscope – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 27 Sep 2024 13:26:04 +0000 ESET research examines the group's malicious wares as used to spy on targets in Ukraine in the past two years Full Article
o Separating the bee from the panda: CeranaKeeper making a beeline for Thailand By www.welivesecurity.com Published On :: Wed, 02 Oct 2024 13:00:00 +0000 ESET Research details the tools and activities of a new China-aligned threat actor, CeranaKeeper, focusing on massive data exfiltration in Southeast Asia Full Article
o Why system resilience should mainly be the job of the OS, not just third-party applications By www.welivesecurity.com Published On :: Tue, 01 Oct 2024 13:00:00 +0000 Building efficient recovery options will drive ecosystem resilience Full Article
o Mind the (air) gap: GoldenJackal gooses government guardrails By www.welivesecurity.com Published On :: Mon, 07 Oct 2024 09:00:00 +0000 ESET Research analyzed two separate toolsets for breaching air-gapped systems, used by a cyberespionage threat actor known as GoldenJackal Full Article
o Telekopye transitions to targeting tourists via hotel booking scam By www.welivesecurity.com Published On :: Thu, 10 Oct 2024 08:55:00 +0000 ESET Research shares new findings about Telekopye, a scam toolkit used to defraud people on online marketplaces, and newly on accommodation booking platforms Full Article
o The complexities of attack attribution – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 04 Oct 2024 11:55:10 +0000 Attributing a cyberattack to a specific threat actor is a complex affair, as evidenced by new ESET research published this week Full Article
o Cyber insurance, human risk, and the potential for cyber-ratings By www.welivesecurity.com Published On :: Tue, 08 Oct 2024 09:00:00 +0000 Could human risk in cybersecurity be managed with a cyber-rating, much like credit scores help assess people’s financial responsibility? Full Article
o Aspiring digital defender? Explore cybersecurity internships, scholarships and apprenticeships By www.welivesecurity.com Published On :: Mon, 14 Oct 2024 09:00:00 +0000 The world needs more cybersecurity professionals – here are three great ways to give you an ‘in’ to the ever-growing and rewarding security industry Full Article
o Quishing attacks are targeting electric car owners: Here’s how to slam on the brakes By www.welivesecurity.com Published On :: Tue, 15 Oct 2024 09:00:00 +0000 Ever alert to fresh money-making opportunities, fraudsters are blending physical and digital threats to steal drivers’ payment details Full Article
o GoldenJackal jumps the air gap … twice – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 11 Oct 2024 13:28:05 +0000 ESET research dives deep into a series of attacks that leveraged bespoke toolsets to compromise air-gapped systems belonging to governmental and diplomatic entities Full Article
o Embargo ransomware: Rock’n’Rust By www.welivesecurity.com Published On :: Wed, 23 Oct 2024 09:00:00 +0000 Novice ransomware group Embargo is testing and deploying a new Rust-based toolkit Full Article
o Protecting children from grooming | Unlocked 403 cybersecurity podcast (ep. 7) By www.welivesecurity.com Published On :: Wed, 16 Oct 2024 09:00:00 +0000 “Hey, wanna chat?” This innocent phrase can take on a sinister meaning when it comes from an adult to a child online – and even be the start of a predatory relationship Full Article
o Google Voice scams: What are they and how do I avoid them? By www.welivesecurity.com Published On :: Mon, 21 Oct 2024 09:00:00 +0000 Watch out for schemes where fraudsters trick people into sharing verification codes so they can gain access to their phone numbers Full Article
o Don't become a statistic: Tips to help keep your personal data off the dark web By www.welivesecurity.com Published On :: Tue, 29 Oct 2024 10:00:00 +0000 You may not always stop your personal information from ending up in the internet’s dark recesses, but you can take steps to protect yourself from criminals looking to exploit it Full Article
o CloudScout: Evasive Panda scouting cloud services By www.welivesecurity.com Published On :: Mon, 28 Oct 2024 10:00:00 +0000 ESET researchers discovered a previously undocumented toolset used by Evasive Panda to access and retrieve data from cloud services Full Article
o Threat actors exploiting zero-days faster than ever – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 18 Oct 2024 12:10:04 +0000 The average time it takes attackers to weaponize a vulnerability, either before or after a patch is released, shrank from 63 days in 2018-2019 to just five days last year Full Article
o ESET Research Podcast: CosmicBeetle By www.welivesecurity.com Published On :: Thu, 24 Oct 2024 09:00:00 +0000 Learn how a rather clumsy cybercrime group wielding buggy malicious tools managed to compromise a number of SMBs in various parts of the world Full Article
o Tony Fadell: Innovating to save our planet | Starmus highlights By www.welivesecurity.com Published On :: Mon, 28 Oct 2024 10:30:00 +0000 As methane emissions come under heightened global scrutiny, learn how a state-of-the-art satellite can pinpoint their sources and deliver the insights needed for targeted mitigation efforts Full Article
o How to remove your personal information from Google Search results By www.welivesecurity.com Published On :: Wed, 30 Oct 2024 10:00:00 +0000 Have you ever googled yourself? Were you happy with what came up? If not, consider requesting the removal of your personal information from search results. Full Article