Stan Kaminsky

How attackers gain access to corporate services without stealing passwords or cookies: we’re analyzing the Shadow Token via Remote Debug technique used in ToddyCat APT attacks.

Researchers have shown that a single text message can trick Gemini into opening the windows of your house or launching a Zoom call, or poisoning its own long-term memory. How do you protect yourself against these attacks?

An inside look at the inner workings and hidden pitfalls of platforms offering dirt-cheap access to top-tier AI models.

How to detect and block unauthorized AI tools in an organization.

A guide to detecting and blocking built-in AI features in popular software products.

High-level strategies for locking down popular AI tools that are either unneeded or outright banned under corporate policy.

Attempts at hijacking AI resources are now taking place on an industrial scale. How is AI infrastructure being targeted, and what defensive measures should you implement?

How law enforcement and intelligence agencies leverage data from connected vehicles, and what your car might be leaking about you.

Building a functional app without programming skills is now a possibility, but maintaining it and ensuring cybersecurity remains a challenge. Here are several protective measures that even non-technical creators can implement.

How the AirSnitch vulnerability family threatens corporate networks, and what changes you need to make to your network architecture and settings to stay protected.

How to manage vulnerabilities when developing or using open-source software.

How the AI boom and increasing reliance on open-source components are piling up corporate security debt — and what you can actually do about it.

Tired of hallucinations in AI overviews, and have no clue as to why or how Copilot suddenly appeared on your PC? Here’s a guide to switching off those intrusive AI features in popular services.

What corporate security teams should do about the “viral” AI agent.

Breaking down core cybersecurity terms that colleagues often interpret differently or incorrectly.

NFC relay attacks, pre-installed Trojans, and other nasties ruining the Android experience in 2026.

The top-10 risks of deploying autonomous AI agents, and our mitigation recommendations.

Breaking down the WhisperPair attack, which allows victims to be tracked via ordinary Bluetooth headphones.

What is the year 2038 problem — also known as “Unix Y2K” — and how to prepare corporate IT systems for it?

Crooks are impersonating your brand to attack customers, partners, and employees. How do you spot — and stop — an attack of the clones?

How criminals exploit the familiar “tap your phone to pay” feature to steal your money.