Kaspersky official blog

A curious case of spear-phishing email techniques employed on a mass scale.

Wi-Fi sensing lets you monitor motion in your home – without cameras or motion sensors. We weigh the pros and cons of this increasingly popular technology.

Why advanced attackers are interested in your home Wi-Fi access points, and how they maintain control over your devices.

We break down the Common Vulnerability Scoring System: what it’s for, how it’s used in practice, and why the Base Score is just the beginning — not the end — of vulnerability assessment.

How the research tool Defendnot disables Microsoft Defender by registering a fake antivirus, and why you shouldn’t always trust what your operating system says.

Scammers have figured out how to send text messages that actually bypass cellular networks. How does illicit “SMS blasting” work, why does it matter for travelers, and how to stay safe.

This is a story of how a blockchain developer lost US$500 000 to a fake Solidity extension from the Open VSX marketplace.

Google has rolled out an update for Android that gives Gemini access to your Phone, Messages, WhatsApp, and Utilities data without your explicit consent. Here’s a detailed guide on how to disable these permissions.

Adjust your daily routines to leave as little data about yourself online as possible.

How cybercriminals can exploit your online store — and how to stop them.

We’ve made a guide to the best apps for travelers.

Funny hacks that became internet legends: talking traffic lights, a high-school Rickroll, robot vacuums on the rampage, a Lenovo defacement, and a Burger King hijack.

How integrated industrial cybersecurity solutions protect OT networks and reduce the cost of critical incidents.

This guide dives into using passkeys to sign in from someone else’s computer, storing them on a removable device, and transferring between devices.

Drawing from INTERPOL’s just-released Africa Cyberthreat Assessment Report, we identify which threats most often target developing businesses – and how to stop them.

The current approaches organizations employ to manage cybersecurity, and the strategies they adopt to navigate an increasingly unpredictable threat environment

Can you ditch passwords entirely for passkeys? We explore when it’s possible, and when it’s still a challenge.

Researchers have found several vulnerabilities in the Sitecore CMS platform that enable unauthenticated remote code execution (RCE).

This marks the second time we’ve found a stealer Trojan in the App Store.

First, don’t panic. Second, change your passwords. What else? Read this blogpost to protect your accounts.

Researchers have found a vulnerability that allows attackers to get root privileges on most Linux distributions.