All posts

Trojanized HID devices as well as surveilling or malicious cables are serious threats that can be used to compromise even air-gapped systems.

What makes startups dependent on data protection for success?

Our proactive security technologies uncovered an attempt to exploit another zero-day vulnerability in win32k.sys.

A look at the complexities of public attribution and why nation-states doing it will have real-world implications.

The Microsoft Office threat landscape, and the technologies that help us catch related zero-day exploits, were the focus of this talk at the SAS 2019 conference.

A new APT attack targets the diplomatic mission of an Asian country.

A cybergang that specializes in cyberespionage, with its campaign mostly limited to the Middle East and countries in central Asia.

How criminals use data harvested from users’ devices to fool antifraud systems and siphon money from victims’ accounts.

A story from RSAC 2019 on how domain fronting is used to disguise communications between an infected machine and a command server.

Everyone knows that EXE files can be dangerous for computers running Windows. But it turns out that EXE files can infect macOS too.

Our new version of Kaspersky Endpoint Security Cloud combines time-proven security technologies with the flexibility of a software-as-a-service model.

Commercial spying apps — stalkerware — are not malware in the proper sense of the term, but it’s better to avoid using them anyway.

Do you use plugins on your website? Make sure they are updated regularly.

To reduce the attack surface you can block many vulnerable features of software. The question is, how can you do that but not interfere with business-processes?

Malware is often distributed in files disguised as episodes of popular TV series. We talk about the most dangerous TV series and how to spot the threat.

A new protective technology will keep your ATM safe on the physical level and guarantee you additional income in cash.

At RSAC 2019, a SANS Institute instructor talked about how DNS manipulations can be used to hijack a company’s IT infrastructure.

Attackers display active interest in MSPs, exploiting vulnerabilities to infect their clients with cryptomalware.

Hundreds of thousands of tokens and cryptographic keys have been discovered on GitHub. We explain why this is bad and how to avoid a leak.

A bug in WinRAR allows malefactors to gain full control over your device. All they need you to do is unpack a rigged RAR file.

Researchers at RSAC 2019 reported on the current vulnerability landscape and built a model that helps with effective patching strategy.