What You Can’t See Will Breach You
Why Continuous Visibility Is the Core of Modern Prevention In cybersecurity, visibility is everything. And yet, most organizations operate in…
Security
SharePoint under fire: ToolShell attacks hit organizations worldwide
The ToolShell bugs are being exploited by cybercriminals and APT groups alike, with the US on the receiving end of…
Friday Squid Blogging: Stable Quasi-Isodynamic Designs
Yet another SQUID acronym: “Stable Quasi-Isodynamic Design.” It’s a stellarator for a fusion nuclear power plant.
ToolShell: Remote Code Execution in Microsoft SharePoint (CVE-2025-53770)
On July 19, 2025, a critical remote code execution (RCE) vulnerability (CVE-2025-53770, also referred to as ToolShell) was publicly disclosed,…
Hackers Weaponize SharePoint 0-Day: Widespread Exploitation Ongoing
A critical zero-day vulnerability chain, called “ToolShell,” is actively exploited in Microsoft SharePoint Server on-premises environments. This sophisticated attack vector…
Subliminal Learning in AIs
Today’s freaky LLM behavior: We study subliminal learning, a surprising phenomenon where language models learn traits from model-generated data that…
Rogue CAPTCHAs: Look out for phony verification pages spreading malware
Before rushing to prove that you’re not a robot, be wary of deceptive human verification pages as an increasingly popular…
ToolShell: An all-you-can-eat buffet for threat actors
ESET Research has been monitoring attacks involving the recently discovered ToolShell zero-day vulnerabilities
DDoS Attack – Everything You Need to Know
Imagine your business website grinding to a halt. But it’s not the usual suspects, a technical glitch or human error,…
Streamline Endpoint Security and Compliance at Scale
Security service providers are under increasing pressure to do more with less time. Clients expect faster response, tighter control, and…