m Statement on New York Times Article Regarding Sackler Family Donations to NAS By Published On :: Mon, 23 Apr 2023 04:00:00 GMT The news article suggests that the donations from the Sacklers presented a conflict of interest for the National Academies’ studies on chronic pain, opioid use, and ways to combat the opioid epidemic. The Sackler funds were never used to support an advisory study on these issues. Full Article
m The Untapped Potential of Computing and Cognition in Tackling Climate Change By Published On :: Tue, 25 Apr 2023 04:00:00 GMT A new NAE Perspective by Adiba M. Proma, Robert M. Wachter, and Ehsan Hoque discusses how helping people change their behaviors may be where technology can have its greatest impact on climate change. Full Article
m Reports & Events Monthly Calendar - May 2023 By Published On :: Fri, 28 Apr 2023 04:00:00 GMT Full Article
m Tackling Inequities in Emerging Technologies By Published On :: Thu, 04 May 2023 04:00:00 GMT Read highlights from a recent webinar hosted by the National Academies’ New Voices program, which explored how to make developments in emerging technologies more equitable in multiple fields including artificial intelligence, biotechnology, and energy. Full Article
m Gaps in the Systems That Support NIH-Funded Research Using Nonhuman Primates Are Undermining U.S. Biomedical Research and Public Health Readiness, Says New Report By Published On :: Thu, 04 May 2023 04:00:00 GMT Research funded by NIH that uses nonhuman primates is critical to the nation’s ability to respond adequately to public health emergencies and carry out high-impact biomedical research, but gaps in the systems that support research using these animal models are undermining national health emergency readiness. Full Article
m Untangling the hiring dilemma: How security solutions free up HR processes By www.welivesecurity.com Published On :: Tue, 21 May 2024 09:30:00 +0000 The prerequisites for becoming a security elite create a skills ceiling that is tough to break through – especially when it comes to hiring skilled EDR or XDR operators. How can businesses crack this conundrum? Full Article
m The who, where, and how of APT attacks – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 17 May 2024 16:09:11 +0000 This week, ESET experts released several research publications that shine the spotlight on a number of notable campaigns and broader developments on the threat landscape Full Article
m Introducing Nimfilt: A reverse-engineering tool for Nim-compiled binaries By www.welivesecurity.com Published On :: Thu, 23 May 2024 09:30:00 +0000 Available as both an IDA plugin and a Python script, Nimfilt helps to reverse engineer binaries compiled with the Nim programming language compiler by demangling package and function names, and applying structs to strings Full Article
m Mandatory reporting of ransomware attacks? – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 24 May 2024 13:11:17 +0000 As the UK mulls new rules for ransomware disclosure, what would be the wider implications of such a move, how would cyber-insurance come into play, and how might cybercriminals respond? Full Article
m AI in HR: Is artificial intelligence changing how we hire employees forever? By www.welivesecurity.com Published On :: Thu, 30 May 2024 09:30:00 +0000 Much digital ink has been spilled on artificial intelligence taking over jobs, but what about AI shaking up the hiring process in the meantime? Full Article
m The murky world of password leaks – and how to check if you’ve been hit By www.welivesecurity.com Published On :: Mon, 03 Jun 2024 09:30:00 +0000 Password leaks are increasingly common and figuring out whether the keys to your own kingdom have been exposed might be tricky – unless you know where to look Full Article
m What happens when facial recognition gets it wrong – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 31 May 2024 13:45:32 +0000 A facial recognition system misidentifies a woman in London as a shoplifter, igniting fresh concerns over the technology's accuracy and reliability Full Article
m The job hunter’s guide: Separating genuine offers from scams By www.welivesecurity.com Published On :: Thu, 06 Jun 2024 09:30:00 +0000 $90,000/year, full home office, and 30 days of paid leave for a junior data analyst – what's not to like? Except that these kinds of job offers are only intended to trick unsuspecting victims into giving up their data. Full Article
m 560 million Ticketmaster customer data for sale? – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 07 Jun 2024 14:04:40 +0000 Ticketmaster seems to have experienced a data breach, with the ShinyHunters hacker group claiming to have exfiltrated 560 million customer data Full Article
m How Arid Viper spies on Android users in the Middle East – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 14 Jun 2024 11:58:03 +0000 The spyware, called AridSpy by ESET, is distributed through websites that pose as various messaging apps, a job search app, and a Palestinian Civil Registry app Full Article
m Hacktivism is evolving – and that could be bad news for organizations everywhere By www.welivesecurity.com Published On :: Wed, 19 Jun 2024 09:30:00 +0000 Hacktivism is nothing new, but the increasingly fuzzy lines between traditional hacktivism and state-backed operations make it a more potent threat Full Article
m My health information has been stolen. Now what? By www.welivesecurity.com Published On :: Thu, 20 Jun 2024 09:30:00 +0000 As health data continues to be a prized target for hackers, here's how to minimize the fallout from a breach impacting your own health records Full Article
m Hijacked: How hacked YouTube channels spread scams and malware By www.welivesecurity.com Published On :: Mon, 01 Jul 2024 09:30:00 +0000 Here’s how cybercriminals go after YouTube channels and use them as conduits for fraud – and what you should watch out for when watching videos on the platform Full Article
m The long-tail costs of a data breach – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 21 Jun 2024 11:54:09 +0000 Understanding and preparing for the potential long-tail costs of data breaches is crucial for businesses that aim to mitigate the impact of security incidents Full Article
m Cyber insurance as part of the cyber threat mitigation strategy By www.welivesecurity.com Published On :: Wed, 26 Jun 2024 11:31:29 +0000 Why organizations of every size and industry should explore their cyber insurance options as a crucial component of their risk mitigation strategies Full Article
m No room for error: Don’t get stung by these common Booking.com scams By www.welivesecurity.com Published On :: Wed, 03 Jul 2024 09:30:00 +0000 From sending phishing emails to posting fake listings, here’s how fraudsters hunt for victims while you’re booking your well-earned vacation Full Article
m AI in the workplace: The good, the bad, and the algorithmic By www.welivesecurity.com Published On :: Tue, 02 Jul 2024 09:30:00 +0000 While AI can liberate us from tedious tasks and even eliminate human error, it's crucial to remember its weaknesses and the unique capabilities that humans bring to the table Full Article
m Key trends shaping the threat landscape in H1 2024 – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 28 Jun 2024 13:13:12 +0000 Learn about the types of threats that 'topped the charts' and the kinds of techniques that bad actors leveraged most commonly in the first half of this year Full Article
m Small but mighty: Top 5 pocket-sized gadgets to boost your ethical hacking skills By www.welivesecurity.com Published On :: Tue, 16 Jul 2024 09:30:00 +0000 These five formidable bits of kit that can assist cyber-defenders in spotting chinks in corporate armors and help hobbyist hackers deepen their understanding of cybersecurity Full Article
m 5 common Ticketmaster scams: How fraudsters steal the show By www.welivesecurity.com Published On :: Tue, 09 Jul 2024 09:30:00 +0000 Scammers gonna scam scam scam, so before hunting for your tickets to a Taylor Swift gig or other in-demand events, learn how to stop fraudsters from leaving a blank space in your bank account Full Article
m Social media and teen mental health – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Thu, 04 Jul 2024 14:31:24 +0000 Social media sites are designed to make their users come back for more. Do laws restricting children's exposure to addictive social media feeds have teeth or are they a political gimmick? Full Article
m Understanding IoT security risks and how to mitigate them | Unlocked 403 cybersecurity podcast (ep. 4) By www.welivesecurity.com Published On :: Wed, 10 Jul 2024 09:30:00 +0000 As security challenges loom large on the IoT landscape, how can we effectively counter the risks of integrating our physical and digital worlds? Full Article
m Should ransomware payments be banned? – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 12 Jul 2024 12:30:20 +0000 Blanket bans on ransomware payments are a much-debated topic in cybersecurity and policy circles. What are the implications of outlawing the payments, and would the ban be effective? Full Article
m Hello, is it me you’re looking for? How scammers get your phone number By www.welivesecurity.com Published On :: Mon, 15 Jul 2024 11:45:35 +0000 Your humble phone number is more valuable than you may think. Here’s how it could fall into the wrong hands – and how you can help keep it out of the reach of fraudsters. Full Article
m The tap-estry of threats targeting Hamster Kombat players By www.welivesecurity.com Published On :: Tue, 23 Jul 2024 09:00:00 +0000 ESET researchers have discovered threats abusing the success of the Hamster Kombat clicker game Full Article
m Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android By www.welivesecurity.com Published On :: Mon, 22 Jul 2024 09:00:00 +0000 ESET researchers discovered a zero-day Telegram for Android exploit that allows sending malicious files disguised as videos Full Article
m The complexities of cybersecurity update processes By www.welivesecurity.com Published On :: Fri, 19 Jul 2024 12:28:24 +0000 If a software update process fails, it can lead to catastrophic consequences, as seen today with widespread blue screens of death blamed on a bad update by CrowdStrike Full Article
m How a signed driver exposed users to kernel-level threats – Week in Security with Tony Anscombe By www.welivesecurity.com Published On :: Sun, 21 Jul 2024 07:24:11 +0000 A purported ad blocker marketed as a security solution leverages a Microsoft-signed driver that inadvertently exposes victims to dangerous threats Full Article
m Beyond the blue screen of death: Why software updates matter By www.welivesecurity.com Published On :: Fri, 19 Jul 2024 16:20:11 +0000 The widespread IT outages triggered by a faulty CrowdStrike update have put software updates in the spotlight. Here’s why you shouldn’t dread them. Full Article
m Building cyber-resilience: Lessons learned from the CrowdStrike incident By www.welivesecurity.com Published On :: Tue, 23 Jul 2024 12:23:39 +0000 Organizations, including those that weren’t struck by the CrowdStrike incident, should resist the temptation to attribute the IT meltdown to exceptional circumstances Full Article
m Phishing targeting Polish SMBs continues via ModiLoader By www.welivesecurity.com Published On :: Tue, 30 Jul 2024 09:00:00 +0000 ESET researchers detected multiple, widespread phishing campaigns targeting SMBs in Poland during May 2024, distributing various malware families Full Article
m Beware of fake AI tools masking very real malware threats By www.welivesecurity.com Published On :: Mon, 29 Jul 2024 09:00:00 +0000 Ever attuned to the latest trends, cybercriminals distribute malicious tools that pose as ChatGPT, Midjourney and other generative AI assistants Full Article
m Telegram for Android hit by a zero-day exploit – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 26 Jul 2024 11:57:23 +0000 Attackers abusing the EvilVideo vulnerability could share malicious Android payloads via Telegram channels, groups, and chats, all while making them appear as legitimate multimedia files Full Article
m AI and automation reducing breach costs – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 02 Aug 2024 11:30:15 +0000 Organizations that leveraged AI and automation in security prevention cut the cost of a data breach by $2.22 million compared to those that didn't deploy these technologies Full Article
m Top 6 Craigslist scams: Don’t fall for these tricks By www.welivesecurity.com Published On :: Mon, 12 Aug 2024 09:00:00 +0000 Here’s how to spot and dodge scams when searching for stuff on the classified ads website that offers almost everything under the sun Full Article
m Why scammers want your phone number By www.welivesecurity.com Published On :: Tue, 13 Aug 2024 09:00:00 +0000 Your phone number is more than just a way to contact you – scammers can use it to target you with malicious messages and even exploit it to gain access to your bank account or steal corporate data Full Article
m Black Hat USA 2024 recap – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 09 Aug 2024 13:53:46 +0000 Unsurprisingly, many discussions revolved around the implications of the CrowdStrike outage, including the lessons it may have offered for bad actors Full Article
m NGate Android malware relays NFC traffic to steal cash By www.welivesecurity.com Published On :: Thu, 22 Aug 2024 09:00:00 +0000 Android malware discovered by ESET Research relays NFC data from victims’ payment cards, via victims’ mobile phones, to the device of a perpetrator waiting at an ATM Full Article
m How a BEC scam cost a company $60 million – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 16 Aug 2024 11:01:54 +0000 Business email compromise (BEC) has once again proven to be a costly issue, with a company losing $60 million in a wire transfer fraud scheme Full Article
m How regulatory standards and cyber insurance inform each other By www.welivesecurity.com Published On :: Wed, 21 Aug 2024 09:00:00 +0000 Should the payment of a ransomware demand be illegal? Should it be regulated in some way? These questions are some examples of the legal minefield that cybersecurity teams must deal with Full Article
m Exploring Android threats and ways to mitigate them | Unlocked 403 cybersecurity podcast (ep. 5) By www.welivesecurity.com Published On :: Mon, 26 Aug 2024 09:00:00 +0000 The world of Android threats is quite vast and intriguing. In this episode, Becks and Lukáš demonstrate how easy it is to take over your phone, with some added tips on how to stay secure Full Article
m PWA phishing on Android and iOS – Week in security with Tony Anscombe By www.welivesecurity.com Published On :: Fri, 23 Aug 2024 09:00:00 +0000 Phishing using PWAs? ESET Research's latest discovery might just ruin some users' assumptions about their preferred platform's security Full Article
m The key considerations for cyber insurance: A pragmatic approach By www.welivesecurity.com Published On :: Wed, 04 Sep 2024 09:00:00 +0000 Would a more robust cybersecurity posture impact premium costs? Does the policy offer legal cover? These are some of the questions organizations should consider when reviewing their cyber insurance options Full Article
m In plain sight: Malicious ads hiding in search results By www.welivesecurity.com Published On :: Tue, 03 Sep 2024 09:00:00 +0000 Sometimes there’s more than just an enticing product offer hiding behind an ad Full Article
m Stealing cash using NFC relay – Week in Security with Tony Anscombe By www.welivesecurity.com Published On :: Wed, 28 Aug 2024 14:01:52 +0000 The discovery of the NGate malware by ESET Research is another example of how sophisticated Android threats have become Full Article