signs of phishing Honest phishing: the alert is fake, the attack is real An Office 365 security alert as bait in a phishing email.
cryptography Where and how post-quantum cryptography is being used in 2024 Where and why quantum-resistant cryptography has already been implemented, and what compatibility issues it caused.
encryption The first post-quantum encryption standards The U.S. National Institute of Standards and Technology (NIST) has issued the first post-quantum encryption standards — FIPS 203, FIPS 204, and FIPS 205.
side-channel A scientific approach to eavesdropping via HDMI A paper from Uruguayan scientists lays out a highly technical and impractical method of spying on computer monitors.
office Safe use of LibreOffice A guide to securely setting up the free office suite for organizations.
SIEM Expanding the functionality of our SIEM system Detection of techniques for disabling or modifying a local firewall, and other enhancements to the Kaspersky Unified Monitoring and Analysis Platform.
Windows How to guard against Windows downgrade attacks Windows Downdate is an attack that can roll back updates to your OS to reintroduce vulnerabilities and allow attackers to take full control of your system. How to mitigate the risk?
vulnerabilities Which devices on your network are most vulnerable? How to protect the less obvious parts of your IT infrastructure (and from what) — from printers and video surveillance kit to insulin pumps.
phishing Automated phishing Telegram bot sells subscriptions to phishing tools to hack Microsoft 365 accounts, including 2FA bypass.
2FA How the adversary-in-the-middle technique is used in spearphishing attacks Cybercriminals are using AitM techniques to compromise accounts of company executives. How do they do this, and how to protect against it?
products Why compare From and Reply-To? A simple technology that significantly improves email protection.
strategy How to minimize software update risks Today we tell you about our practices for releasing new products, and also updating existing releases, which reduce the risk of large-scale incidents.
AI How to prepare corporate cybersecurity for all-seeing AI assistants Although Microsoft has radically revised the rollout plan for its controversial Recall feature, cybersecurity teams can’t afford to ignore the issue of “AI onlookers.
failure Global outage due to Friday’s release of CrowdStrike The story of how CrowdStrike released an update on a Friday and brought down thousands, tens of thousands, or maybe even hundreds of thousands of computers around the world.
vulnerabilities Zero-day vulnerability in Internet Explorer A zero-day vulnerability actively exploited by attackers has been discovered in Internet Explorer — the browser that Microsoft supposedly laid to rest over a year ago.
SIEM What SIEM is and how it protects medium-sized businesses Medium-sized businesses increasingly find themselves on the receiving end of targeted attacks. What tools does one need when basic security proves inadequate?
malware Attack on cybersecurity researchers: pseudo-exploit for regreSSHion Someone is targeting security experts using an archive that allegedly contains an exploit for the regreSSHion vulnerability.
supply-chain attack Remove Polyfill.io from your website The JavaScript CDN service Polyfill.io has started spreading malicious code. Remove the service’s script from your website.
vulnerabilities regreSSHion vulnerability in OpenSSH A new vulnerability allows remote attackers to gain root privileges on Linux servers. How easy is it for CVE-2024-6387 to be exploited – and how to prevent it