The Iran War: What You Need to Know
Insikt Group tracks the cyber, physical, and geopolitical components of the US-Israeli strikes on Iran — with continuously updated threat analysis and scenar...
research
20 articles
This month in security with Tony Anscombe – April 2026 edition
Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 - here's some ...
Risk Scenarios for the US’s Strategic Pivot
The United States (US) is shifting toward a more force-driven security strategy primarily relying on military operations and economic pressure to counter tra...
Building with AI: Here's What No Briefing Will Tell You
What building with AI for three months revealed about four leadership blind spots executives can't afford to ignore: the comprehension gap, eroding competiti...
Extending Ruzzy with LibAFL
LibAFL is all the rage in the fuzzing community these days, especially with LLVM’s libFuzzer being placed in maintenance mode. Written in Rust, LibAFL claims...
The Money Mule Solution: What Every Scam Has in Common
Learn how mule account intelligence — not tactic-tracking — is the most effective lever for preventing APP fraud before funds move.
Lazarus Doesn't Need AGI
Explore the 2026 Claude Mythos breach, supply chain risks, and the $2B+ crypto theft pipeline.
The calm before the ransom: What you see is not all there is
A breach claims the systems as well as the confidence that was, in retrospect, a major vulnerability
From Overwhelmed to Autonomous: Rethinking Threat Intelligence in 2026
For most security teams today, volume and access to intelligence isn’t the problem. It’s the speed at which they can turn that intelligence into action.
Trailmark turns code into graphs
We’re open-sourcing Trailmark, a library that parses source code into a queryable call graph of functions, classes, call relationships, and semantic metadata...
GopherWhisper: A burrow full of malware
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions
Critical minerals and cyber operations
Learn how critical minerals and rare earth elements (REEs) are evolving from commodities into strategic flashpoints. Explore the geopolitical risks of China’...
Today, trust is the superpower that makes innovation possible
How better intelligence and collaboration can unlock new opportunities for growth and greater financial health for more people.
Evolution of Chinese-Language Guarantee Telegram Marketplaces
Chinese-language, Telegram-based “guarantee” marketplaces are increasingly popular among Chinese-speaking criminal groups despite the widely publicized shutd...
AI Hype vs. Reality: Is AI Really Rewriting the Vulnerability Equation?
AI vulnerability research and discovery capabilities are improving, but they have not changed the fundamentals of vulnerability management.
New NGate variant hides in a trojanized NFC payment app
ESET researchers discover another iteration of NGate malware, this time possibly developed with the assistance of AI
Emerging Enterprise Security Risks of AI
Agentic AI adoption is accelerating rapidly as enterprise software and applications increasingly incorporate task-specific AI agents, enabling autonomous exe...
What the ransom note won’t say
An attack is what you see, but a business operation is what you’re up against
We beat Google’s zero-knowledge proof of quantum cryptanalysis
Two weeks ago, Google’s Quantum AI group published a zero-knowledge proof of a quantum circuit so optimized, they concluded that first-generation quantum com...
That data breach alert might be a trap
Ignoring a real breach notification invites risk, but falling for a bogus one could be even worse. Stop reacting on autopilot.