News & Map

This month in security with Tony Anscombe – May 2026 edition

In this roundup, Tony looks at attacks against Polish water treatment facilities, how AI-directed attacks failed in Mexi...

Sustainment under strike and sabotage: Contested logistics in the Wider North

Executive summary Introduction As the landscape for logistics continues to evolve, we must adapt to the new reality and ...

ESET APT Activity Report Q4 2025–Q1 2026

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026

Foreign control of antibiotic supply: American and European import reliance and systemic vulnerabilities

Executive summary CONTEXT KEY FINDINGS RECOMMENDATIONS To reduce dependence on foreign-controlled antibiotics supply cha...

Risky Business #839 -- TeamPCP stole GitHub's internal repos

On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: TeamP...

Starships are meant to eventually fly

Last week marked both the first flight of the latest version of SpaceX's Starship as well as the release of the company'...

Fear and panic in orbit around the Red Planet: Missions to Phobos and Deimos

While most concepts for missions to Mars have focused on the planet itself, some have instead planned to explore its two...

Reassessing NASA procurement strategy: A hybrid approach

NASA is using a mix of cost-plus and fixed-price contracts for its missions, but each approach as advantages and disadva...

BTMOB: A stealthy RAT burrowing deep into Android devices

The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compro...

Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability

Written by: Takahiro Sugiyama, Peter Revelant, Mathew Potaczek Introduction In late 2025, Mandiant responded to a securi...

2 PhaaS 2 Furious: The Evolution of Chinese-Language Phishing Services

While Russian-speaking threat actors have historically dominated the phishing-as-a-service (PhaaS) landscape, a rival ec...

Why Javier Milei’s inflation ‘miracle’ in Argentina is more of a mirage

Economist Can Cinar talks to The Conversation Weekly podcast about how Javier Milei’s policies to cut inflation are maki...

Webworm: New burrowing techniques

ESET researchers describe new tools and techniques that the Webworm APT group recently added to its arsenal

Risky Business #838 -- GitHub investigates possible breach

On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: GitHu...

Israel the lonely

The country is not as isolated as its critics hope, but it is alienating some true friends

The quest for greater tech independence

A complete decoupling from US technology is neither realistic nor necessary, but the changing environment does require n...

Space launch and reentry environmental concerns are real, but can be mitigated

The sharp increase in launches has led to warnings about the environmental impacts of emissions from those launches and ...

The Isaacman honeymoon

Despite a budget request that proposed steep cuts to NASA, administrator Jared Isaacman still remains popular on Capitol...

Welcome to BlackFile: Inside a Vishing Extortion Operation

Written by: Austin Larsen, Tyler McLellan, Genevieve Stark, Dan Ebreo Introduction Google Threat Intelligence Group (GTI...

FrostyNeighbor: Fresh mischief and digital shenanigans

ESET researchers uncovered new activities attributed to FrostyNeighbor, updating its compromise chain to support the gro...

Risky Business #837 -- GitHub Actions footgun claims TanStack

On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: Mini ...

GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access

Executive Summary Since our February 2026 report on AI-related threat activity, Google Threat Intelligence Group (GTIG) ...

After Gateway: the case for a middle power lunar consortium

NASA's decision to effectively cancel the lunar Gateway has forced international partners who had been working on its co...

Flagships on a budget

NASA's next astrophysics flagship mission, the Nancy Grace Roman Space Telescope, is under budget and ahead of schedule ...

Strategy is easy, but logistics is hard. Golden Dome proves it.

The Golden Dome missile defense system will require major space-based capabilities, from sensors to interceptors. Bharat...

Three steps forward but one step back

NASA's revisions to its Artemis lunar exploration architecture have won widespread support in the space industry. Dale S...

Tokyo Trial debunks notorious Yasukuni Shrine's inverted narrative

America’s submarine dominance is under threat

Naval mockery of China is turning to alarm

Fake call logs, real payments: How CallPhantom tricks Android users

ESET researchers uncovered fraudulent apps on Google Play that claim to provide the call history “for any number” and ha...

Risky Business #836 -- You can't patch the bugpocalypse

On this week’s show, Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin. They discuss the week...

A rigged game: ScarCruft compromises gaming platform in a supply-chain attack

ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via back...

The Moonbase moment

The centerpiece of NASA's new lunar exploration plans is a lunar base announced at an event in March. Jeff Foust reports...

Governance is always late to the party. Here's why that's not an accident.

Regulation of space activities aways appears to lag their technical and economic feasibility. G. Theresa Quitto-Dickerso...

The global scramble for ports

The investment frenzy is driven by anxiety about China’s tightening grip on supply chains

This month in security with Tony Anscombe – April 2026 edition

Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most ...

Risky Business #835 -- Why the Fast16 malware is badass

On this week’s show, Patrick Gray and James Wilson are joined by special guest-host Dmitri Alperovitch. They discuss the...

To fight Russia, Europe needs Ukraine

It is risky to let Ukraine into the EU. It’s more dangerous to keep it out

The great launch constraint

Blue Origin's New Glenn suffered a failure on its third launch last week when an upper stage malfunction placed its payl...

A Fortress Moon for cislunar security

Cislunar space is evolving from one of primarily scientific interest to one with more strategic importance. Alan Dugger ...

Redefining success in space diplomacy: emerging space nations in the Artemis Era and the case of Turkey

The role of space in diplomacy is changing as countries shift from seeking technical dominance to influence over governa...