All posts

How to apply Secure by Design ideas when rolling out AI agents.

Christopher Nolan’s The Odyssey has wrapped up its triumphant run in theaters, but it won’t be available digitally until November 17. That makes it the perfect bait for malware like MovieReaper, which spreads through torrents. Let’s see what cybersecurity lessons we can learn from the story of the cunning king of Ithaca — and how to avoid falling victim to a Trojan horse yourself.

Spammers automatically register hundreds of near-identical domains to fool security solutions. We can block those domains automatically, too.

On October 21, two PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed, affecting nearly 70% of websites worldwide. But if you think this’s only an admins’ headache, read on: we explain why your photos, music, archives, games, NAS and smart-home systems may be at risk, and how to protect your data and devices.

PHP developers have released patches for two critical vulnerabilities that could allow an attacker to remotely execute arbitrary code on the server without authentication.

AI has learned how to quickly gather scattered details about a person, link their accounts together, and turn a digital footprint into a detailed dossier. We look at how artificial intelligence is changing doxing — and what you can do to make deanonymization harder.

People, processes, and technology: if a company has gaps in its defenses, they most likely come from one of these three areas. We walk through a real-world breach, and explain how to stand up to attackers without hiring a huge team or needing to vastly increase the security budget.

Let’s look at how to use AI as a resume editor without oversharing to build a document that gets past automated screening systems and catches a recruiter’s eye.

Microsoft’s October Patch Tuesday bulletin is breaking records again — it addresses 1,414 vulnerabilities. Here’s what you need to know.

We look at an unusual eavesdropping method that leverages the fundamental physical properties of electronic components.

In April, our experts investigated the PAYLOAD campaign — where the leverage wasn’t data encryption but a malicious AD group policy object.

We examine the impact of AI dependency on an organization’s cybersecurity.

Scammers are promising downloads of leaked copies of GTA VI, early access to the game, or a chance to become a beta tester. Here’s how you can spot these schemes and avoid falling into the trap.

Google has released its September security update for Pixel smartphones – fixing 110 vulnerabilities. One of the vulnerabilities appears to be being used actively in targeted attacks.

A company may regularly use a vulnerability scanner, but dangerous vulnerabilities will still remain in its infrastructure. We explain why this happens, and what to do about it.

University students sometimes don’t see the practical value of what they’re studying, and aren’t always sure what to do next. Kaspersky Academy’s free “Cybersecurity. Entry Level” course can help them pick up in-demand skills directly from Kaspersky experts.

Get the most speed, reliability, and convenience out of your VPN by putting it on your router. Here’s a look at the real benefits of specific VPN setup scenarios for your whole home network.

CVE-2026-87902, a new critical vulnerability in the WordPress core, is already being actively exploited in real-world attacks.

What tokenomics is, and how the value of AI tokens has become a cybersecurity issue.

Hiding your Wi-Fi network name might seem like a smart security move, but in practice it does more harm than good. Let’s take a look at how it works, what side effects it can have, and how to properly secure your home Wi-Fi.

We believe that investing in cybersecurity, like any other investment, should pay off. This post explains what a small company needs to make its security setup work for the business instead of staying a formality.