ESET

12/11/2025

Empower your organisation with an all-in-one cybersecurity training solution designed to protect what matters most.

ESET Cybersecurity Awareness Training meets insurance and compliance standards, keeps employees engaged through interactive modules, animations, and quizzes, and builds real-world cybersecurity skills through practical scenarios.

Turn awareness into action — because your strongest defence starts with your people:

www.idss.co.zw
[email protected]
[email protected]

12/11/2025

Shadow AI is fast becoming one of the biggest blind spots in cybersecurity.

From chatbots to browser plugins, unsanctioned AI tools are integrating into daily workflows without IT oversight. The risks?

🚨 Data exposure
🚨 Hidden security gaps
🚨 Compliance violations

Learn more: https://www.welivesecurity.com/en/business-security/shadow-ai-security-blind-spot/

11/11/2025

ESET Research's Q2 and Q3 2025 findings reveal Advanced Persistent Threat groups using modular and stealthy malware for sophisticated cyberattacks.

Key points:

✅ BloodAlchemy: Shared backdoor used for data theft and network moves
✅ Kalambur: Trojans in legitimate installs for covert access
✅ Wibag: Android spyware disguised as YouTube targeting major apps
✅ Mobile spyware detections up 40% YoY, signalling rising mobile threats

Learn more:

This issue of the ESET APT Activity Report reviews notable activities of APT groups that were documented by ESET researchers from April 2025 to September 2025.

11/11/2025

Between April and September 2025, ESET Research tracked dozens of advanced persistent threat (APT) operations across the globe. These attacks targeted multiple industries, focusing on espionage, data theft, and disruption.

🎯 Spearphishing remained the leading initial infection vector, with over 60% of detected APT intrusions starting through phishing or email-based compromise.

This issue of the ESET APT Activity Report reviews notable activities of APT groups that were documented by ESET researchers from April 2025 to September 2025.

30/10/2025

29/10/2025

Safer Internet Day is an excellent way to close out Cybersecurity Awareness Month by reinforcing the importance of ongoing vigilance and best practices.

Rather than being a one-off event, the habits and cybersecurity measures promoted on Safer Internet Day, such as strong passwords, employee training, and regular software updates, should be maintained year-round.

For businesses, this continued commitment helps protect sensitive data, reduce risk, and build trust with customers. Keeping these practices alive beyond the month ensures a safer, more resilient digital environment for everyone.

23/10/2025

Shadow IT refers to the use of technology systems, devices, software, or services within a business without the knowledge or approval of the central IT department.

This includes personal devices used in Bring Your Own Device (BYOD) policies, unsanctioned cloud services, and software applications adopted by employees independently to boost productivity.

For more information, read this blog article on welivesecurity https://www.eset.com/blog/en/business-topics/prevention-and-awareness/what-is-shadow-it/

22/10/2025

Cyber hygiene is fundamental to effective cybersecurity, involving proactive measures to strengthen defenses against diverse threats. By following these practices, organisations build a resilient security posture capable of withstanding evolving cyber risks.

22/10/2025

More than just reducing risk, cyber hygiene cultivates a culture of security awareness and readiness across the organisation. It enables both users and IT teams to stay alert to vulnerabilities and respond swiftly to emerging threats. Key elements include:

✔️ Enforcing strong password security to prevent unauthorised access
✔️ Implementing Multi-Factor Authentication (MFA) to add an extra layer of defence
✔️ Fostering vigilance and swift response to rapidly contain and mitigate threats

This proactive attitude is crucial for protecting sensitive data, maintaining business continuity, and reducing the impact of security incidents.

06/10/2025

Over time, social engineering attacks have become increasingly sophisticated, involving thorough research on victims, personalised messaging, and multi-stage tactics designed to build trust and improve the chances of success.

Watch this video by Tony Anscombe, Chief Security Evangelist at ESET, as he discusses the human element.

For more information, read this blog piece by ESET welivesecurity https://www.welivesecurity.com/en/eset-research/deceptivedevelopment-from-primitive-crypto-theft-to-sophisticated-ai-based-deception/