re Introducing Nimfilt: A reverse-engineering tool for Nim-compiled binaries By www.welivesecurity.com Published On :: Thu, 23 May 2024 09:30:00 +0000 Available as both an IDA plugin and a Python script, Nimfilt helps to reverse engineer binaries compiled with the Nim programming language compiler by demangling package and function names, and applying structs to strings Full Article
re Mandatory reporting of ransomware attacks? – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 24 May 2024 13:11:17 +0000 As the UK mulls new rules for ransomware disclosure, what would be the wider implications of such a move, how would cyber-insurance come into play, and how might cybercriminals respond? Full Article
re ESET World 2024: Big on prevention, even bigger on AI By www.welivesecurity.com Published On :: Wed, 29 May 2024 09:30:00 +0000 What is the state of artificial intelligence in 2024 and how can AI level up your cybersecurity game? These hot topics and pressing questions surrounding AI were front and center at the annual conference. Full Article
re AI in HR: Is artificial intelligence changing how we hire employees forever? By www.welivesecurity.com Published On :: Thu, 30 May 2024 09:30:00 +0000 Much digital ink has been spilled on artificial intelligence taking over jobs, but what about AI shaking up the hiring process in the meantime? Full Article
re What happens when facial recognition gets it wrong – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 31 May 2024 13:45:32 +0000 A facial recognition system misidentifies a woman in London as a shoplifter, igniting fresh concerns over the technology's accuracy and reliability Full Article
re ESET Research Podcast: APT Activity Report Q4 2023–Q1 2024 By www.welivesecurity.com Published On :: Fri, 14 Jun 2024 09:30:00 +0000 The I-SOON data leak confirms that this contractor is involved in cyberespionage for China, while Iran-aligned groups step up aggressive tactics following the Hamas-led attack on Israel in 2023 Full Article
re Preventative defense tactics in the real world By www.welivesecurity.com Published On :: Mon, 17 Jun 2024 09:30:00 +0000 Don’t get hacked in the first place – it costs far less than dealing with the aftermath of a successful attack Full Article
re Hacktivism is evolving – and that could be bad news for organizations everywhere By www.welivesecurity.com Published On :: Wed, 19 Jun 2024 09:30:00 +0000 Hacktivism is nothing new, but the increasingly fuzzy lines between traditional hacktivism and state-backed operations make it a more potent threat Full Article
re Hijacked: How hacked YouTube channels spread scams and malware By www.welivesecurity.com Published On :: Mon, 01 Jul 2024 09:30:00 +0000 Here’s how cybercriminals go after YouTube channels and use them as conduits for fraud – and what you should watch out for when watching videos on the platform Full Article
re ESET Threat Report H1 2024 By www.welivesecurity.com Published On :: Thu, 27 Jun 2024 09:30:00 +0000 A view of the H1 2024 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts Full Article
re Buying a VPN? Here’s what to know and look for By www.welivesecurity.com Published On :: Tue, 25 Jun 2024 09:30:00 +0000 VPNs are not all created equal – make sure to choose the right provider that will help keep your data safe from prying eyes Full Article
re The long-tail costs of a data breach – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 21 Jun 2024 11:54:09 +0000 Understanding and preparing for the potential long-tail costs of data breaches is crucial for businesses that aim to mitigate the impact of security incidents Full Article
re Cyber insurance as part of the cyber threat mitigation strategy By www.welivesecurity.com Published On :: Wed, 26 Jun 2024 11:31:29 +0000 Why organizations of every size and industry should explore their cyber insurance options as a crucial component of their risk mitigation strategies Full Article
re Key trends shaping the threat landscape in H1 2024 – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 28 Jun 2024 13:13:12 +0000 Learn about the types of threats that 'topped the charts' and the kinds of techniques that bad actors leveraged most commonly in the first half of this year Full Article
re Should ransomware payments be banned? – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 12 Jul 2024 12:30:20 +0000 Blanket bans on ransomware payments are a much-debated topic in cybersecurity and policy circles. What are the implications of outlawing the payments, and would the ban be effective? Full Article
re Hello, is it me you’re looking for? How scammers get your phone number By www.welivesecurity.com Published On :: Mon, 15 Jul 2024 11:45:35 +0000 Your humble phone number is more valuable than you may think. Here’s how it could fall into the wrong hands – and how you can help keep it out of the reach of fraudsters. Full Article
re The tap-estry of threats targeting Hamster Kombat players By www.welivesecurity.com Published On :: Tue, 23 Jul 2024 09:00:00 +0000 ESET researchers have discovered threats abusing the success of the Hamster Kombat clicker game Full Article
re How a signed driver exposed users to kernel-level threats – Week in Security with Tony Anscombe By www.welivesecurity.com Published On :: Sun, 21 Jul 2024 07:24:11 +0000 A purported ad blocker marketed as a security solution leverages a Microsoft-signed driver that inadvertently exposes victims to dangerous threats Full Article
re Beyond the blue screen of death: Why software updates matter By www.welivesecurity.com Published On :: Fri, 19 Jul 2024 16:20:11 +0000 The widespread IT outages triggered by a faulty CrowdStrike update have put software updates in the spotlight. Here’s why you shouldn’t dread them. Full Article
re Building cyber-resilience: Lessons learned from the CrowdStrike incident By www.welivesecurity.com Published On :: Tue, 23 Jul 2024 12:23:39 +0000 Organizations, including those that weren’t struck by the CrowdStrike incident, should resist the temptation to attribute the IT meltdown to exceptional circumstances Full Article
re Beware of fake AI tools masking very real malware threats By www.welivesecurity.com Published On :: Mon, 29 Jul 2024 09:00:00 +0000 Ever attuned to the latest trends, cybercriminals distribute malicious tools that pose as ChatGPT, Midjourney and other generative AI assistants Full Article
re The cyberthreat that drives businesses towards cyber risk insurance By www.welivesecurity.com Published On :: Wed, 31 Jul 2024 09:00:00 +0000 Many smaller organizations are turning to cyber risk insurance, both to protect against the cost of a cyber incident and to use the extensive post-incident services that insurers provide Full Article
re AI and automation reducing breach costs – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 02 Aug 2024 11:30:15 +0000 Organizations that leveraged AI and automation in security prevention cut the cost of a data breach by $2.22 million compared to those that didn't deploy these technologies Full Article
re Why tech-savvy leadership is key to cyber insurance readiness By www.welivesecurity.com Published On :: Wed, 07 Aug 2024 09:00:00 +0000 Having knowledgeable leaders at the helm is crucial for protecting the organization and securing the best possible cyber insurance coverage Full Article
re Black Hat USA 2024 recap – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 09 Aug 2024 13:53:46 +0000 Unsurprisingly, many discussions revolved around the implications of the CrowdStrike outage, including the lessons it may have offered for bad actors Full Article
re Be careful what you pwish for – Phishing in PWA applications By www.welivesecurity.com Published On :: Tue, 20 Aug 2024 09:00:00 +0000 ESET analysts dissect a novel phishing method tailored to Android and iOS users Full Article
re The great location leak: Privacy risks in dating apps By www.welivesecurity.com Published On :: Mon, 12 Aug 2024 14:51:08 +0000 What if your favorite dating, social media or gaming app revealed your exact coordinates to someone you’d rather keep at a distance? Full Article
re NGate Android malware relays NFC traffic to steal cash By www.welivesecurity.com Published On :: Thu, 22 Aug 2024 09:00:00 +0000 Android malware discovered by ESET Research relays NFC data from victims’ payment cards, via victims’ mobile phones, to the device of a perpetrator waiting at an ATM Full Article
re How regulatory standards and cyber insurance inform each other By www.welivesecurity.com Published On :: Wed, 21 Aug 2024 09:00:00 +0000 Should the payment of a ransomware demand be illegal? Should it be regulated in some way? These questions are some examples of the legal minefield that cybersecurity teams must deal with Full Article
re Exploring Android threats and ways to mitigate them | Unlocked 403 cybersecurity podcast (ep. 5) By www.welivesecurity.com Published On :: Mon, 26 Aug 2024 09:00:00 +0000 The world of Android threats is quite vast and intriguing. In this episode, Becks and Lukáš demonstrate how easy it is to take over your phone, with some added tips on how to stay secure Full Article
re In plain sight: Malicious ads hiding in search results By www.welivesecurity.com Published On :: Tue, 03 Sep 2024 09:00:00 +0000 Sometimes there’s more than just an enticing product offer hiding behind an ad Full Article
re Stealing cash using NFC relay – Week in Security with Tony Anscombe By www.welivesecurity.com Published On :: Wed, 28 Aug 2024 14:01:52 +0000 The discovery of the NGate malware by ESET Research is another example of how sophisticated Android threats have become Full Article
re ESET Research Podcast: HotPage By www.welivesecurity.com Published On :: Thu, 05 Sep 2024 09:26:54 +0000 ESET researchers discuss HotPage, a recently discovered adware armed with a highest-privilege, yet vulnerable, Microsoft-signed driver Full Article
re AI security bubble already springing leaks By www.welivesecurity.com Published On :: Mon, 16 Sep 2024 09:00:00 +0000 Artificial intelligence is just a spoke in the wheel of security – an important spoke but, alas, only one Full Article
re ESET Research Podcast: EvilVideo By www.welivesecurity.com Published On :: Tue, 17 Sep 2024 09:00:00 +0000 ESET researchers discuss how they uncovered a zero-day Telegram for Android exploit that allowed attackers to send malicious files posing as videos Full Article
re Cyberespionage the Gamaredon way: Analysis of toolset used to spy on Ukraine in 2022 and 2023 By www.welivesecurity.com Published On :: Thu, 26 Sep 2024 09:00:00 +0000 ESET Research has conducted a comprehensive technical analysis of Gamaredon’s toolset used to conduct its cyberespionage activities focused in Ukraine Full Article
re Understanding cyber-incident disclosure By www.welivesecurity.com Published On :: Wed, 18 Sep 2024 09:02:40 +0000 Proper disclosure of a cyber-incident can help shield your business from further financial and reputational damage, and cyber-insurers can step in to help Full Article
re Time to engage: How parents can help keep their children safe on Snapchat By www.welivesecurity.com Published On :: Tue, 24 Sep 2024 09:00:00 +0000 Here’s what parents should know about Snapchat and why you should take some time to ensure your children can stay safe when using the app Full Article
re Don’t panic and other tips for staying safe from scareware By www.welivesecurity.com Published On :: Wed, 25 Sep 2024 09:00:00 +0000 Keep your cool, arm yourself with the right knowledge, and other tips for staying unshaken by fraudsters’ scare tactics Full Article
re Cybersecurity Awareness Month needs a radical overhaul – it needs legislation By www.welivesecurity.com Published On :: Tue, 01 Oct 2024 09:00:00 +0000 Despite their benefits, awareness campaigns alone are not enough to encourage widespread adoption of cybersecurity best practices Full Article
re Gamaredon's operations under the microscope – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 27 Sep 2024 13:26:04 +0000 ESET research examines the group's malicious wares as used to spy on targets in Ukraine in the past two years Full Article
re Why system resilience should mainly be the job of the OS, not just third-party applications By www.welivesecurity.com Published On :: Tue, 01 Oct 2024 13:00:00 +0000 Building efficient recovery options will drive ecosystem resilience Full Article
re Aspiring digital defender? Explore cybersecurity internships, scholarships and apprenticeships By www.welivesecurity.com Published On :: Mon, 14 Oct 2024 09:00:00 +0000 The world needs more cybersecurity professionals – here are three great ways to give you an ‘in’ to the ever-growing and rewarding security industry Full Article
re Quishing attacks are targeting electric car owners: Here’s how to slam on the brakes By www.welivesecurity.com Published On :: Tue, 15 Oct 2024 09:00:00 +0000 Ever alert to fresh money-making opportunities, fraudsters are blending physical and digital threats to steal drivers’ payment details Full Article
re Embargo ransomware: Rock’n’Rust By www.welivesecurity.com Published On :: Wed, 23 Oct 2024 09:00:00 +0000 Novice ransomware group Embargo is testing and deploying a new Rust-based toolkit Full Article
re Protecting children from grooming | Unlocked 403 cybersecurity podcast (ep. 7) By www.welivesecurity.com Published On :: Wed, 16 Oct 2024 09:00:00 +0000 “Hey, wanna chat?” This innocent phrase can take on a sinister meaning when it comes from an adult to a child online – and even be the start of a predatory relationship Full Article
re Google Voice scams: What are they and how do I avoid them? By www.welivesecurity.com Published On :: Mon, 21 Oct 2024 09:00:00 +0000 Watch out for schemes where fraudsters trick people into sharing verification codes so they can gain access to their phone numbers Full Article
re Threat actors exploiting zero-days faster than ever – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 18 Oct 2024 12:10:04 +0000 The average time it takes attackers to weaponize a vulnerability, either before or after a patch is released, shrank from 63 days in 2018-2019 to just five days last year Full Article
re ESET Research Podcast: CosmicBeetle By www.welivesecurity.com Published On :: Thu, 24 Oct 2024 09:00:00 +0000 Learn how a rather clumsy cybercrime group wielding buggy malicious tools managed to compromise a number of SMBs in various parts of the world Full Article
re How to remove your personal information from Google Search results By www.welivesecurity.com Published On :: Wed, 30 Oct 2024 10:00:00 +0000 Have you ever googled yourself? Were you happy with what came up? If not, consider requesting the removal of your personal information from search results. Full Article