expertise Kaspersky Expertise Centers Today we talk about our five main centers of expertise and their contribution to Kaspersky’s products, threat intelligence and expert cybersecurity services.
phishing Phishing on GitHub through job offers to… developers Developers’ accounts are being hijacked using fake job offers sent from a legitimate GitHub address.
compliance What is the NIS 2 Directive, and how to prepare for it The updated EU Network and Information Security Directive (NIS 2) came into force in January 2023. Member states have until October 17, 2024, to transpose it into national law. What does this mean, and how to prepare for it?
biometrics Hidden dangers of biometric authentication devices Based on our analysis of ZKTeco vulnerabilities, we dissect the risks associated with biometric authentication.
Ransomware ShrinkLocker ransomware employing BitLocker for encryption Our experts have discovered ransomware they’ve dubbed “ShrinkLocker”, which encrypts infected computers’ drives using BitLocker — a utility built into Windows.
phishing Phishing using FB infrastructure stealing business-account passwords Cybercriminals are using genuine Facebook infrastructure to send phishing emails threatening to block accounts.
SIEM The evolution of the SIEM system We’re expanding the capabilities of the Kaspersky Unified Monitoring and Analysis SIEM system by adding new normalizers and correlation rules.
email E-mail attacks on the hotel business Threat actors are targeting hotel staff with malicious and phishing e-mails.
Linux Malware scanner for Linux systems We’ve released a free application that allows you to scan Linux systems for known cyberthreats.
vulnerabilities Exploited vulnerabilities in 2023 and 2024 Today we discuss which services and applications should be patched first, and what attackers are focusing on.
locks Unsaflok: vulnerable locks on three million hotel room doors dormakaba Saflok locks — used on around three million doors across 13,000 hotels — are vulnerable to an attack that involves forging electronic keycards.
SIEM How to increase the efficiency of SIEM What’s new in Kaspersky Unified Monitoring and Analysis Platform 3.0.3.
phishing Two-stage Dropbox spear phishing Cybercriminals prey on corporate credentials by sending phishing links through Dropbox after priming the victim.
KL ICS CERT Critical vulnerabilities in Telit Cinterion M2M modems Kaspersky ICS-CERT experts have discovered several critical vulnerabilities in Telit Cinterion M2M modems, which are used in millions of devices.
security services Top 10 cyberattack techniques used against organizations What are the most common MITRE ATT&CK techniques encountered in real-world incidents — and how to neutralize them? We investigate using statistics from Incident Response and MDR services!
passwords What is a credential stuffing attack? A credential stuffing attack is one of the most effective ways to take control of accounts. Here’s how it works and what you should do to protect your company.
MTFBWY The Bad Batch: Tantiss base security Cybersecurity measures of Tantiss base as depicted in the third season of “Star Wars: The Bad Batch”
leaks Dropbox warns about a Dropbox Sign breach Dropbox has shared a report on a data breach in the Dropbox Sign e-signature service. What does this mean for users, and what should they do?
transparency Global Transparency Initiative update, April 2024 Expanding Global Transparency Initiative by opening Istanbul Transparency Center and launching a Transparency Lab together with Boğaziçi University
email How spammers exploit hijacked corporate domains By hijacking domains with CNAME records and exploiting forgotten SPF records, attackers seize domains and use them for their own purposes.
thin clients Why a thin client is better than a workstation? We explain why it’s preferable to use a thin client (especially running the updated Kaspersky Thin Client 2.0) in virtual desktop infrastructure