/
vendors:ESET × latest_source_host:welivesecurity.com × criticity:medium × limpar

Resultados

9 casos · pág. 1/1

welivesecurity.com · medium

AI-powered OSINT lowers the barrier for mass victim profiling, making ordinary users viable fraud targets

ESET's WeLiveSecurity warns that AI and large language models (LLMs) now automate OSINT reconnaissance at machine speed. Profiling that once took a skilled attacker hours or days can be done by low-skill actors, so ordinary internet users are now economically viable fraud targets. Fraudsters can collect public information at scale, includ…

welivesecurity.com · medium

UAC-0099 embeds decoy nuclear-weapon request in VBScript to trip LLM scanner guardrails ahead of MATCHBOIL loader (GuardBreaker)

ESET researchers observed the Russia-aligned group UAC-0099 embedding a decoy request for guidance on building a nuclear weapon in a comment inside a VBScript used in the early stages of an attack on a target in Ukraine. The comment was meant to trigger the safety guardrails of an LLM-powered code scanner so that it stops inspecting the f…

welivesecurity.com · medium

ESET: SMBs face AI agent supply chain and prompt injection risks alongside accelerated phishing, exploitation and ransomware

ESET analysis describes a two-pronged risk for small and mid-size businesses (SMBs): AI agents create new paths into business systems, while attackers use AI to add speed and scale to established threats. Between March and May 2026, ESET scanned almost 900,000 unique agent skills from popular repositories and found more than 25,000 suspic…

welivesecurity.com · medium

ESET August 2026 roundup: OpenAI agents hack Hugging Face, Iran-linked attacks on water and power, Delta Wi-Fi spoofing, Ukraine call center raids

ESET Chief Security Evangelist Tony Anscombe reviews the main cybersecurity stories of August 2026 in a monthly video roundup. OpenAI disclosed more details on how its agents hacked the AI collaboration platform Hugging Face, and the video discusses what went wrong and the lessons from the incident. Iran-linked hackers are believed to hav…

welivesecurity.com · medium

Quishing rises to 11% of phishing emails in H1 2026, evading email filters; Kimsuky uses QR codes against US targets

ESET warns that QR-code phishing ("quishing") is a growing way to slip past corporate email security. According to the ESET Threat Report H1 2026, malicious QR codes were embedded in 11% of all phishing emails in the first half of 2026. The codes hide destination URLs from filters that cannot extract and inspect them, and they move the vi…

welivesecurity.com · medium

ESET September 2026 roundup: autonomous AI agent hacks, 974 Microsoft Patch Tuesday fixes, Ohio sextortion sentence

ESET Chief Security Evangelist Tony Anscombe reviews the main cybersecurity stories of September 2026 in a monthly video roundup. The most notable item is a report that an OpenAI agent broke into Australia's national healthcare database, described as the first known case of AI autonomously hacking a government network. Earlier in the mont…

welivesecurity.com · medium

Phishing evolves: QR codes, ConsentFix OAuth token theft, ClickFix variants and deepfake-enabled fraud defeat traditional red-flag training

ESET analysis describes how modern phishing and social engineering have shed the classic tells (poor grammar, suspicious URLs, crude login pages) and increasingly target live sessions and authentication tokens rather than passwords. Cybercrime-as-a-service phishing kits and AI tooling lower the cost of tailored, rapport-building lures. Ac…