Latest cybersecurity reporting from selected sources.

Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from cyber-attacks

China-linked Webworm APT expands beyond Asia, targeting European government organizations and refining its cyber espionage tactics, according to ESET research

Trend Micro believe security teams should anticipate increased Vidar 2.0 prevalence in campaigns through Q4 2025

While still in development, PromptLock is described as the “first known AI-powered ransomware” by ESET researchers

Avast researchers shared a step-by-step guide to decrypt files for victims of FunkSec ransomware

The ClickFix social engineering technique has become the second most common attack vector, behind only phishing, according to ESET research

Researchers at ESET observed strengthened cyber-offensive activity from Russian groups, especially against Ukrainian and European entities

New ESET research reveals that 73% of UK educational institutions experienced at least one cyber-attack or breach in the past five years

Trend Micro detailed how attackers are using a fake proof-of-concept for a critical Microsoft vulnerability, designed to steal sensitive data from security researchers

Trend Micro’s Zero Day Initiative hands out over $1m in awards for Pwn2Own competitors, who found more than 70 zero-day flaws

The recently discovered Embargo ransomware group is using Rust-based custom tools to overcome victims’ security defenses, ESET researchers have observed

Researchers at Avast found a flaw in the cryptographic schema of the DoNex ransomware and have been sending out decryptor keys to victims since March 2024

Trend Micro research claims CISOs are often ignored or dismissed as “nagging” by their board

Kaspersky said cybercriminals harvested 50.9 login credentials per infected device in 2023

ESET researchers said the attackers strategically leveraged the Monlam Festival, targeting individuals associated with Tibetan Buddhism

ESET researchers reveal a Russian threat actor has targeted Ukrainian citizens with PYSOPs messages warning of impacts such as food and medicine shortages from the war

ESET Research reported the vulnerability to the Roundcube team on October 12

ESET researchers suggested Asylum Ambuscade has been active since 2020

Kaspersky report that the implant specifically targets iOS devices via a malicious iMessage attachment

Kaspersky researchers said sections of the CloudWizard code were identical to CommonMagic