Universal Bucket Hijacking Technique for Cloud Data Exfiltration
Executive Summary We recently identified a bucket hijacking technique impacting multiple services across major cloud service providers (CSPs). The attack […]
Security
Close Encounters of the Human Kind
Welcome to this week’s Threat Source newsletter. I love a Spielberg summer. His ability to imbue a sense of wonder,
The Gentlemen RaaS: rapid growth and a new ransomware variant
Introduction This year saw the emergence of The Gentlemen, a prominent example of a group operating under the ransomware-as-a-service (RaaS)
WinRAR flaw could allow attackers to take control of your computer
Rarlab has released a new version of the popular WinRAR tool to patch a vulnerability that can be abused in
ESET takes part in Operation Endgame to disrupt Amadey and Stealc
A year ago, ESET Research was part of two major operations that disrupted some of the leading cybercriminal operations at
US lifts export controls on Anthropic’s frontier cybersecurity AI models
Anthropic restored global access to its Fable 5 model on Wednesday, ending a roughly three-week shutdown that began with the
Apple Security Update Fixes 30+ Flaws In IOS 26.5.2
The latest Apple Security Update brings fixes for more than 30 security vulnerabilities in iOS 26.5.2 and iPadOS 26.5.2, addressing
Experts Warn: Passwords Still Winning Despite Passwordless Push
Today marks International Passwordless Day, an annual observance held on 23 June, the birthday of mathematician Alan Turing, whose foundational
Security Affairs newsletter Round 584 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 584 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini July 05, 2026 A new round of
OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat
Executive Summary OpenClaw is an AI agent that executes third-party skills from ClawHub, its dedicated marketplace. Skills are markdown-driven packages