WeLiveSecurity

Here's the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little more than two minutes

ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a destructive attack against a Ukrainian grain firm

You can trust a social media platform and still get scammed by an ad running on it

If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious

Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe

Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next.

ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026

A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account

The cybersecurity market is often making it tougher for SMBs to keep threats at bay

Autonomous AI agents go on a hacking spree, and Microsoft ships what used to be a year's worth of security patches in one go – here's how to keep pace

Con artists are targeting timeshare owners who want out – and some victims are hit twice

When phishing can increasingly pass familiar checks, avoiding or limiting the damage depends on how quickly your company can detect and contain the attack

As AI lets anyone build software, here’s how to vet that shiny new app before it exposes your data

Crypto ATM scams often follow a predictable script – here’s how to recognize it and what to do if you’ve already been caught out

Fake giveaways, free Robux generators and lookalike login pages all target the same thing – your Roblox account

As AI opens new paths to company data while making familiar attacks faster and cheaper, SMBs need protection designed around the time and expertise available to operate it

Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images

ESET researchers document SparroWocky, the new flagship backdoor of the FamousSparrow APT group

As AI adoption expands the attack surface and adds to the security workload, businesses need automation backed by experts

LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor