Exchange for breakfast: Turla’s Cereal tricks are not for kids

ESET’s November–July 2026 security research feed covers Turla’s Cereal toolset and Exchange email collection, DNS hijacking via Sogou Input Method, Russia-aligned espionage against Ukraine, infostealers and backdoors, phishing and scams, critical PHP vulnerabilities, AI and supply-chain risks, and vulnerable UEFI shims that can bypass Secure Boot. The feed includes both threat intelligence and general security guidance; several entries describe active or high-impact malware and vulnerability activity.