CCC Hacking a train: a 37С3 talk Ethical hackers told 37C3 how they found a few eye-openers while breaking DRM to fix trains.
Google Google OAuth and phantom accounts Google OAuth allows to create phantom Google accounts — uncontrollable by corporate Google Workspace administrators.
passwords Securing cloud providers’ SSO Single sign-on is supposed to enhance corporate security, but it’s essential that cloud vendors have the information security team’s back.
strategy The principle of least privilege: what is it and why is it needed? What’s the principle of least privilege, why’s it needed, and how does it help secure corporate information assets?
iOS Operation Triangulation: talk on 37С3 Detailed analysis of Operation Triangulation, the most sophisticated attack our experts have ever seen, presented at 37C3 conference.
vulnerabilities LogoFAIL attack: using image files to attack computers A serious vulnerability in UEFI firmware relevant to a large number of modern computers, and even servers.
scam Hacked hotel accounts on Booking.com Attackers are hijacking hotel accounts on Booking.com, and stealing their clients’ banking data through its internal messaging system.
fingerprint How reliable is biometric security on laptops? Researchers used a hardware hack to bypass Windows Hello biometric authentication on three different devices. Can you trust this login method?
scam Money for Nothing During the pre-holiday period, attackers are sending invoices to companies for the delivery of non-existent documents.
email How cybercriminals disguise URLs Methods used by attackers to redirect victims to malicious and phishing sites from seemingly safe URLs.
RAT Remcos RAT via Discord Cybercriminals send the Remcos remote-access trojan under the guise of letters from a new client.
websites WordPress security issues Typical security issues of WordPress, and how they can be addressed to protect your website or online store from cybercriminals.
routers Outdated Cisco equipment under threat from firmware Espionage operations to hack corporate routers are now commonplace — and all organizations need to be aware of this.
vulnerabilities Reptar: a vulnerability in Intel processors How a recently discovered bug in Intel processors threatens cloud providers.
extensions Malware that steals Facebook accounts How attackers use infected archives and malicious browser extensions to steal Facebook Business accounts.
SOC What is a compromise assessment service? SOC Experts Victor Sergeev and Ahmed Khlief demonstrate the differences between compromise assessment, incident response, penetration testing, and MDR.
vulnerabilities How “zero-clicks” work, and how to defend against them We discuss what zero-click attacks are, why they’re dangerous, and how to protect your company from them.
tips Four ways to lock your screen on Windows and macOS Four handy ways to lock your screen on Windows and macOS.
strategy The top-10 mistakes made when configuring enterprise IT systems Mistakes commonly found in almost every large organization. What should the inforsec team look out for, and what protective measures should they take?
cyberimmunity Myths and reality regarding Cyber Immune technologies We explore some common misconceptions about the development and application of Cyber Immune products based on KasperskyOS.
APT Security Analyst Summit 2023: key research Four major studies presented by our experts at the SAS 2023 international conference.