ESET Threat Blog

SC Magazine's Dan Raywood and I were talking about a claim by Nir Zuk, CTO of Palo Alto Networks, that "Anti-virus is dead because it is unable to detect attacks properly and is incapable of working on mobile devices…" As you might expect, I don't by any means agree that AV is a dead parrot, … Read More…

Forensic software developer PassWare announced a new version of its eponymous software forensics kit on Tuesday. Already several news sources are writing about how the program can automatically obtain the login password from a locked or sleeping Mac simply by plugging in a USB flash drive containing their software and connecting it to another computer … Read More…

My latest blog for SC Magazine's Cybercrime Corner looked at the recent APT (Advanced Persistent Threat) attack on RSA, in the light of Uri Rivner's blog on the implementation of the attack. 
Unfortunately, the exact nature of the target and damage remains somewhat obscure, so while I certainly consider Rivner's blog worth reading, I also found myself clarifying … Read More…

This morning I wrote a long and - I hope - carefully-considered piece for Security Week on Stuxnet and the whether it constitutes a nation state attack on Iran. [Update, 26th September: I hear that article will be available today or tomorrow.]
Actually, I was asked on Friday for a quotable quote or two on the topic, but I … Read More…