Hello.

CAPTCHAs are a familiar sight for any internet user. But cybercriminals are exploiting the trust we place in them to deliver fake CAPTCHA scams designed to install malware or grant unwanted permissions. Here’s how they work, what’s at stake, and how to stay safe. Key takeaways A CAPTCHA that asks you to open Run, PowerShell, Terminal, Command Prompt, download a file, install an extension, or enable notifications is a fake CAPTCHA scam A CAPTCHA should keep you in the browser.

Let’s go beyond endpoint security, shall we? Organizations spend a lot of time and money preventing threats. They deploy security controls, patch systems, and train employees, generally, trying to make life difficult for attackers. And yet, 22% of all incidents are still caused by a lack of security monitoring. Wait, what? Yes, this surprising fact comes from the ESET SMB Cyber Readiness Index 2026. What’s more, nearly half of all the surveyed SMBs experienced at least one i

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2026 and Q3 2026 ESET APT Activity Report Q2 2026–Q2 2026 summarizes notable activities of selected advanced persistent threat (APT) groups documented by ESET researchers between April and September 2026. The operations presented here reflect the broader threat landscape observed during this period and highlight some of its key trends and developments. They represent only a s

With cyber resilience, trust and digital sovereignty now deal makers in the security market, the certification of the ESET PROTECT solution as a leader in the EPR Comparative Report 2026 underlines consistent quality, cost and capability. ESET PROTECT Enterprise Cloud has secured a Certified Leader position in AV-Comparatives’ Endpoint Prevention and Response for the seventh year in a row. It’s one of four vendors out of 14 tested in the top right-hand corner of AV-C’s graph,

With attacks constantly knocking at SMBs’ doors, MSPs have an opportunity to become strategic resilience partners. Why would a company partner with an MSP? Beyond the obvious IT support, there is a security angle, which is slowly making its way to the forefront of more boardroom conversations. But security by itself is not the only thing pushing customers toward MSPs. The wider issue is the environment in which companies now operate. Cyberattacks intersect with geopolitical t

ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a destructive attack against a Ukrainian grain firm Executive summary This report analyzes activity during which UAC‑0099 gained initial access on July 16th, 2025 and handed it off to Sandworm, which then conducted a data-wiping attack on September 17th, 2025. It particularly focuses on the MythicRatatoskr backdoor,

You can trust a social media platform and still get scammed by an ad running on it Fraudulent ads have been around for about as long as the advertising industry. Today, they often reach you through social media feeds, apps and search results you use every day, and the platforms showing them can also (inadvertently) help build them. In September, the US Federal Trade Commission (FTC) asked whether platforms should be required to stop impersonation scam ads from ever reaching c

If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious In September, reports emerged that a Virginia woman had been submerged by a flood of emails. Hundreds of automated messages poured in over a 24-hour period, including newsletters and promotions she’d never signed up to. But this was no ordinary spam campaign. The real reason behind the inbox blitz was to bury a legitimate email from the victim’s bank warning her ab

Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next. Publicly reported data breaches hit an all-time high in the US last year, with over 3,300 incidents recorded and nearly 280 million victim notices mailed out. But are all of these worth the paper they’re written on? Increasingly, they lack crucial details. As the volume of data breach incidents increases, there’s a growing chance that you’ll be caught up

Two critical security vulnerabilities in PHP have triggered urgent warnings for website owners and IT teams worldwide. The technology behind a large part of the internet is facing a serious security challenge. PHP, a programming language widely used to build websites and web applications, has been affected by two critical vulnerabilities that could allow attackers to take control of vulnerable servers remotely. The flaws, identified as CVE-2026-109618 and CVE-2026-109619 and