Gen Blogs | Home

Reports

Threat Report H1 2026

Attackers spent the first half of 2026 abusing trust that already exists: hotel workflows, messaging sessions, browser data, developer tools, AI agents, payment habits and identity signals.

Featured image for Threat Report H1 2026

Research

Inside the JDownloader Supply-Chain Attack: An r77 Rootkit Bot That Kills Your Antivirus

Threat Research Team

May 11, 2026 • 20 min read

Inside the JDownloader Supply-Chain Attack: An r77 Rootkit Bot That Kills Your Antivirus

Research

Chasing an Angry Spark

Threat Research Team

April 14, 2026 • 29 min read

Research

Remus: Unmasking The 64-bit Variant of the Infamous Lumma Stealer

Vojtěch Krejsa & 1 others

April 7, 2026 • 34 min read

Remus: Unmasking The 64-bit Variant of the Infamous Lumma Stealer

News

Keep up with Gen news as we create technology solutions for people to take full advantage of the digital world safely, privately, and confidently.

View All News

Explore News Topics

Latest in News

Family of Brands

How AI Can Power Your Online Presence

How Norton Revamp helps people build a consistent, trustworthy voice online.

Iskander Sanchez-Rola

March 19, 2026 • 5 min read

Company News

Leading the Way for AI Agent Safety

Shaping the standards for a safer, freer Agentic Era

Luis Corrons

March 5, 2026 • 11 min read

Company News

Introducing AARTS: An Open Standard for AI Agent Runtime Safety

AARTS standardizes how AI agent platforms expose security events, enabling portable runtime protection across the growing agent ecosystem

Jakub Křoustek

March 5, 2026 • 8 min read

Introducing AARTS: An Open Standard for AI Agent Runtime Safety

Company News

Gen Agent Trust Hub Introduces Agent Detection and Response: The Missing Security Layer for Agentic AI

Inside the Gen Agent Trust Hub, ADR turns trust signals into real-world protection.

Jakub Křoustek

March 4, 2026 • 6 min read

Gen Agent Trust Hub Introduces Agent Detection and Response: The Missing Security Layer for Agentic AI

Company News

Introducing Sage: Safety for Agents

Closing the growing security gap between what Al agents can do and what keeps them in check

Threat Research Team

February 19, 2026 • 6 min read

Company News

The trust layer for the agentic era

Bringing transparent risk ratings to the AI skills ecosystem to help developers build boldly and users move confidently

Luis Corrons

February 17, 2026 • 2 min read

Family of Brands

16 independent security awards show how Gen builds protection that scales

Measuring what matters: Security, responsibility and what comes next

Alisha Robinson

January 23, 2026 • 4 min read

16 independent security awards show how Gen builds protection that scales

Family of Brands

From helpful AI to harmful deepfakes: Where video scams cross the line

From accessibility and creativity to financial scams and identity theft, the difference is not the technology but the intent

Threat Research Team

January 6, 2026 • 10 min read

From helpful AI to harmful deepfakes: Where video scams cross the line

Family of Brands

Spotting the Fakes: How Norton’s Media Shield and Video Analyzer Help You Fight Deepfake Scams

Real-time protection meets real-world deception. Norton’s AI-powered tools help you tell truth from trick.

Luis Corrons

October 17, 2025 • 3 min read

Spotting the Fakes: How Norton’s Media Shield and Video Analyzer Help You Fight Deepfake Scams

Family of Brands

Deepfake detected: How Norton and Qualcomm are leveling up scam defense

With Qualcomm’s NPU-powered AI and Norton’s deepfake detection, your next PC could be your strongest digital defense

Amit Sharma

June 24, 2025 • 3 min read

Deepfake detected: How Norton and Qualcomm are leveling up scam defense

Insights

Explore all our Gen™ blog insights. Discover the latest cybersecurity reports and research, and learn from the experts with our leadership perspectives.

View All Insights

Explore Insights Topics

Latest in Insights

Research

A 12 KB Backdoor Hid Its C2 Domain in desktop.ini Whitespace

A hand-written Windows backdoor stored its command-and-control domain as the number of trailing spaces in a fake desktop.ini, and we found it on exactly one machine.

Milánek

August 14, 2026 • 2 min read

A 12 KB Backdoor Hid Its C2 Domain in desktop.ini Whitespace

Research

The phishing link that died on purpose

A single expired URL exposed a phishing campaign built around Mailer-Go, Cloudflare Workers and an EvilTokens OneDrive lure.

Jan Kořínek

August 11, 2026 • 10 min read

Reports

Threat Report H1 2026

Attackers spent the first half of 2026 abusing trust that already exists: hotel workflows, messaging sessions, browser data, developer tools, AI agents, payment habits and identity signals.

Threat Research Team

July 15, 2026 • 1 min read

Research

Fake invoices are moving from inboxes to shopping apps

Scammers are using order-tracking apps to place fake receipts where users expect to see real purchases, then pushing them to call fake support numbers.

Luis Corrons & 1 others

June 24, 2026 • 9 min read

Fake invoices are moving from inboxes to shopping apps

Research

Inside Vidar’s ABE Bypass: From Memory Scanning to APC Injections

A Technical Walkthrough of How Vidar Defeats Application-Bound Encryption

Vojtěch Krejsa

June 18, 2026 • 13 min read

Inside Vidar’s ABE Bypass: From Memory Scanning to APC Injections

Research

Your flight was cancelled. Is the refund message real?

Travel disruption gives scammers the one thing they need most: a believable reason to rush you

Luis Corrons

June 17, 2026 • 8 min read

Your flight was cancelled. Is the refund message real?

Research

Fake hiring pages abuse FIFA and other major brands to steal work credentials

Scammers are copying recruitment and calendar-booking flows to make fake Google and Facebook sign-ins look routine.

Luis Corrons

June 11, 2026 • 8 min read

Fake hiring pages abuse FIFA and other major brands to steal work credentials

Research

Who's Really Using Your Home Internet Connection?

Your home connection could be routing traffic for strangers. Here's how residential proxy networks work, how devices get enrolled and what our telemetry reveals about the risks for consumers.

Jan Rubín

June 11, 2026 • 9 min read

Who's Really Using Your Home Internet Connection?

Research

GoFlateLoader: A Widespread Golang Loader Delivering Multiple Infostealers

 Intentionally Inflated Go Binaries That Use Massive PE Overlays to Bypass Detection

Vojtěch Krejsa

June 10, 2026 • 11 min read

GoFlateLoader: A Widespread Golang Loader Delivering Multiple Infostealers

Research

When Hotel Scams Know Your Booking: 350 Compromised Accommodations Across 50 Countries

After our first report, Booking.com began warning customers that reservation data had been accessed. Our continuing investigation shows how criminals are using that data at scale.

Luis Corrons & 1 others

May 28, 2026 • 19 min read

When Hotel Scams Know Your Booking: 350 Compromised Accommodations Across 50 Countries

People & Impact

At Gen, we're driven by the positive impact we can have on all the communities in which we live and work. Explore stories on our efforts to make that impact a reality.

View All People & Impact

Explore People & Impact Topics