CyberSecure Specialist

Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies

Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user’s Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet’s access to more than 10 million additional compromised systems, including other Internet of Things (IoT) products such as Android-based…

Read More

Revolve Data Breach Impacts at Least 180,000 People

Online fashion retailer Revolve is notifying at least 180,000 individuals that their personal and payment card information was stolen in a data breach. The incident occurred on September 11 and involved unauthorized access to certain systems, including the company’s online shopping platform. Immediately after learning of the cyberattack, Revolve initiated incident response and contained and remediated the unauthorized activity. The company’s investigation into the incident determined that the hackers may have accessed and exfiltrated the…

Read More

Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations

Northstar Security, a startup developing AI agents for security teams, has emerged from stealth mode with $7 million in seed funding. Wing Venture Capital led the round. MVP, Outliers, and cybersecurity veterans Gerhard Eschelbeck, Renaud Deraison, and Justin Somaini also invested. The company ingests data from existing security and IT tools to build what it calls a Security Context Graph. Updated in real time, the graph shows how identities, assets, applications, vulnerabilities, and business systems…

Read More

This month in security with Tony Anscombe – October 2026 edition

The PHP2Shell disclosure and other major cybersecurity news this month brought into relief the need for well-thought-out cyber-readiness plans 30 Oct 2026 With October coming to a close, ESET Chief Security Evangelist Tony Anscombe reviews some of the top cybersecurity stories that made the news over the month. At the same time, he offers insights that the latest wave of incidents hold for your company’s, or your own, cyber-defenses. Here’s Tony’s rundown of some of…

Read More

Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

A Syrian man tied to the Syrian Electronic Army (SEA) has received a 42-month prison sentence in the US, more than 12 years after he was first charged. Ahmad Umar Agha, who used the online handle Th3Pr0, was sentenced on Thursday by a federal court in the Eastern District of Virginia. According to the Justice Department, he evaded US authorities for more than a decade. Prosecutors say the hacking conspiracy Agha took part in was…

Read More

Amatera: How the prolific infostealer works and spreads

Infostealers have become an established business, with developers who produce and maintain the product and paying customers who run their own campaigns with them. Amatera – which topped ESET’s infostealer detections in Latin America in the first half of 2026 but targets victims worldwide – shows what this professionalization looks like in practice. Like many other infostealers, Amatera goes after a range of data spanning login credentials, session cookies, tokens, crypto wallet information, messaging data,…

Read More

Fresh WordPress Vulnerability in Attackers’ Crosshairs

Threat actors started exploiting a new high-severity WordPress vulnerability within hours of patches rolling out, Defiant warns. Patched on October 28 in WordPress 7.1.4, the security defect impacts the WordPress update process and can be exploited for remote code execution. According to Defiant, it is a race condition in WordPress’s Core update process that can be exploited without authentication. The attack complexity, however, is high. No CVE identifier has been assigned to the vulnerability yet.…

Read More

Lessons from Cybersecurity Black Week

The week leading up to October 25, 2026, was every cyber defender’s nightmare: a barrage of critical vulnerabilities in PHP and the Linux kernel, a compromised LiteLLM release, a maximum-severity flaw in GitLab, a Node.js Brotli flaw, and a certificate authority incident affecting TLS trust. A few years ago, a backlog like this would have filled a defender’s to-do list for a whole month. In the age of AI, all of this was reported within…

Read More

ESET APT Activity Report Q2 2026–Q3 2026

ESET Research An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2026 and Q3 2026 Jean-Ian Boutin 28 Oct 2026  •  , 6 min. read ESET APT Activity Report Q2 2026–Q2 2026 summarizes notable activities of selected advanced persistent threat (APT) groups documented by ESET researchers between April and September 2026. The operations presented here reflect the broader threat landscape observed during this period and highlight some…

Read More

Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net

Hackers have stolen the personal information of current and former So-net and Plala internet subscribers in Japan, Sony Network Communications announced on October 27. Nearly 2.6 million records were impacted. The attackers broke into the So-net member database on October 19. The company first spotted the intrusion on October 23, then took the targeted server offline and cut off traffic coming from the attackers. By the following day, its investigators had confirmed that personal data…

Read More