Malwarebytes

Signal users targeted in backup-stealing phishing attacks

Fri, 29 May 2026 12:07:24 GMT

Cybercriminals are impersonating Signal Support to steal backup recovery keys, giving them access to victims' entire message archives.

Carnival confirms data breach impacting nearly 6 million

Thu, 28 May 2026 12:04:52 GMT

Cruise giant Carnival has suffered yet another data breach, with ShinyHunters claiming to have stolen personal data affecting nearly 6 million people.

Your Windows PC has a security deadline in June 2026

Thu, 28 May 2026 11:03:43 GMT

Windows is replacing old Secure Boot certificates, and some older PCs could miss future security protections if the update fails.

Fake ChatGPT download site infects Windows and Mac users with malware

Thu, 28 May 2026 10:18:26 GMT

Searching for ChatGPT? This fake download site serves malware to both Windows and Mac users, using separate payloads tailored to each platform.

Kali365 phishing kit bypasses MFA and steals Microsoft logins

Wed, 27 May 2026 11:41:54 GMT

The FBI has warned that attackers are using a new phishing kit to gain long-term access to Microsoft Outlook, Teams, and OneDrive accounts.

Company bragged phone mics could listen to conversations. They couldn’t.

Wed, 27 May 2026 09:56:26 GMT

Cox Media said it could spy on users through their devices and use the information for targeted advertising, except it wasn't true.

Fake LinkedIn emails abuse Adobe to track victims

Wed, 27 May 2026 09:32:09 GMT

Phishers are stealing LinkedIn credentials while abusing Adobe Target to track victims and redirect them to real LinkedIn pages.

Fake software on GitHub and SourceForge distribute Deno RAT

Tue, 26 May 2026 13:07:09 GMT

We found fake installers and plugins for ChatGPT, Claude, AutoTune, and other popular software that can give attackers full control over your device.

700+ education and tech websites hijacked in huge ClickFix malware campaign

Tue, 26 May 2026 10:46:28 GMT

Hackers are abusing a Ghost CMS website flaw to serve fake Cloudflare verification pages that pressure users into infecting their own PCs.

Scammers pretending to be Microsoft had help from US executives

Tue, 26 May 2026 10:01:25 GMT

Court documents reveal how tech support scammers relied on infrastructure supplied by a US business.

A week in security (May 18 – May 24)

Mon, 25 May 2026 07:02:00 GMT

A list of topics we covered in the week of May 18 to May 24 of 2026

Update Chrome now: Critical bugs could let attackers run code

Fri, 22 May 2026 12:10:36 GMT

This Chrome update fixes critical flaws attackers could exploit through malicious websites, but not the “Browser Fetch” vulnerability.

Microsoft Defender vulnerabilities are being exploited in the wild

Thu, 21 May 2026 17:36:52 GMT

CISA added seven known exploited vulnerabilities to its KEV catalog, including two Microsoft Defender flaws.

TikTok, YouTube, and Roblox face scrutiny, but age gates won’t fix child safety

Thu, 21 May 2026 11:08:37 GMT

Ofcom says TikTok and YouTube are "not safe enough" for children, but simply adding stricter age checks is not the answer.

Catch spyware in the act with Windows Webcam Monitoring

Thu, 21 May 2026 10:19:18 GMT

Know when a program tries to access your webcam so you can allow or block, in real time.

Researchers left AI agents alone in a virtual town and watched it all unravel

Thu, 21 May 2026 10:01:54 GMT

Told not to commit crimes, the AI agents mostly did anyway. Arson, violence, romance, self-deletion, and general chaos quickly ensued.

Fake malware-signing service Fox Tempest dismantled by Microsoft

Wed, 20 May 2026 15:33:02 GMT

The service let malware authors sign malicious files with fraudulent Microsoft-issued certificates to bypass security checks.

Firefox 151 packs big privacy upgrades into a small update

Wed, 20 May 2026 11:46:48 GMT

Firefox 151 adds major privacy improvements and fixes high-priority security vulnerabilities, making this an update you shouldn’t ignore.

Biometrics, diagnoses, and bank details exposed in major healthcare breach

Tue, 19 May 2026 15:56:38 GMT

NYC Health + Hospitals says attackers accessed its systems for months through a third-party vendor compromise, affecting at least 1.8 million people.

Facebook scam promises cheap Aldi meat boxes, steals payment info instead

Tue, 19 May 2026 12:46:13 GMT

A fake Aldi “meat box” offer spreading on Facebook tricks victims into handing over personal and payment info.

ESET - WeLiveSecurity

This month in security with Tony Anscombe – May 2026 edition

Fri, 29 May 2026 07:30:00 +0000

In this roundup, Tony looks at attacks against Polish water treatment facilities, how AI-directed attacks failed in Mexico, and what Google believes is the first AI-generated zero-day exploit

ESET APT Activity Report Q4 2025–Q1 2026

Thu, 28 May 2026 08:45:00 +0000

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026

What to consider before asking an AI chatbot for health advice

Wed, 27 May 2026 08:50:00 +0000

Using chatbots for medical advice could elicit hallucinations and even expose you to security and privacy risks. Here’s what’s at stake and how to stay safe.

BTMOB: A stealthy RAT burrowing deep into Android devices

Tue, 26 May 2026 08:50:00 +0000

The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compromise

Foul play: Fake FIFA websites target soccer fans looking for World Cup tickets, merchandise

Fri, 22 May 2026 08:50:00 +0000

Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and personal data

Webworm: New burrowing techniques

Wed, 20 May 2026 08:40:00 +0000

ESET researchers describe new tools and techniques that the Webworm APT group recently added to its arsenal

The quest for greater tech independence

Tue, 19 May 2026 08:50:00 +0000

A complete decoupling from US technology is neither realistic nor necessary, but the changing environment does require nations and companies to reassess their relationships and dependencies

Why geopolitical turmoil is a gift for scammers, and how to stay safe

Fri, 15 May 2026 08:50:00 +0000

Conflict is a boon for opportunistic fraudsters. Look out for their ploys.

FrostyNeighbor: Fresh mischief and digital shenanigans

Thu, 14 May 2026 08:50:00 +0000

ESET researchers uncovered new activities attributed to FrostyNeighbor, updating its compromise chain to support the group’s continual cyberespionage operations

Eyes wide open: How to mitigate the security and privacy risks of smart glasses

Mon, 11 May 2026 08:55:00 +0000

Smart glasses allow anyone to track and record the world around them. That could put your data and the privacy of those nearby at risk.

ESET - Support News

ESET Server Security for Microsoft Windows Server version 13 feature update

Thu, 28 May 2026 08:00 GMT

A feature update of ESET Server Security for Microsoft Windows Server version 13.0.12005.0 has been released.

ESET Cloud Office Security version 747 has been released

Thu, 21 May 2026 08:00 GMT

ESET Cloud Office Security version 747 has been released.

ESET Management Agent version for Windows version 13.0.1400.0 for ESET PROTECT On-Prem has been released for ESET PROTECT On-Prem 11.x and 12.x

Tue, 13 May 2026 14:00 GMT

ESET Management Agent version for Windows version 13.0.1400.0 for ESET PROTECT On-Prem has been released for ESET PROTECT On-Prem 11.x and 12.x.