Virtual machines, virtually everywhere – and with real security gaps
2026-03-26T08:51:39Z•df41afdc12b7e9f340b7e3d55225020f0fc5e9fb5a4522c352759c741d5010f9
account-recoveryandroid-malwarecloud-securitycloud-workload-securitycredential-stuffingcve-2025-50165deepfakesdynowiperedr-killersendpoint-detection-responsefacial-recognition-bypassgenai-malwareincident-responseiot-securitylongnosedgoblinpromptspyransomwaresandwormscamssednitvirtual-machinesvulnerable-driverswiper-malwareworkload-visibility
What happened
ESET's WeLiveSecurity feed aggregates research and guidance covering a broad set of current threats and defensive topics: cloud/VM and workload security gaps, account recovery guidance, and misuse of vulnerable drivers to disable EDR. Notable research includes discovery of PromptSpy (the first known Android malware abusing generative AI), technical analysis of DynoWiper data‑wiper and Sandworm attribution for a Poland power‑grid incident, resurgence of Sednit, and the China‑aligned LongNosedGoblin APT. ESET also revisited a critical Windows Imaging Component vulnerability (CVE-2025-50165) and,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- eset_welivesecurity
- Record identifier
- df41afdc12b7e9f340b7e3d55225020f0fc5e9fb5a4522c352759c741d5010f9
- Enrichment time
- 2026-03-26T08:51:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.