passwordsPassword storage as the cornerstone of security
How online services should store user passwords, and how to minimize the damage in the event of a leak or hack.
Business
1421 articles
digital footprintDangers of your brand’s doppelgangers
How to protect a company’s reputation from illegal use of its name on the internet.
signs of phishingSelf-evaluation questionnaire phishing scam
Attackers invite employees to complete fake self-evaluations to steal corporate credentials.
strategyHow to lessen the workload on the CISO and their team
What tasks needlessly overload infosec experts, and how to break the curse of overtime.
vulnerabilitiesSecurity of Electron-based desktop applications
A few words on why desktop applications based on the Electron framework should be approached with caution.
Wrong system time and insecure Secure Time Seeding
Why the Windows system time can suddenly change, and how to stop it from happening.
sitesHow to stop your site from being a partner in crime
Why criminals want to hack your website, how they might use it in new attacks, and how to stop them.
OSINT: what’s the danger, and how to stay safe
We explain what OSINT is, why it has to be front-of-mind at all times, and how to guard against hackers using it.
What to patch first: prioritizing updates
Some thoughts on what PC software patches should be prioritized and why.
The security aspect of employee offboarding
Offboarded employees often retain access to work information. What are the risks, and how to deal with them?
Zenbleed: new hardware vulnerability in AMD CPUs
Explaining an issue in popular PC and server CPUs in simple terms.
Information security gadgets
Gadgets to help protect employees’ devices against hackers and other threats.
How to fix TunnelCrack VPN leaks
What caused a mass vulnerability in VPN clients, and how to keep them working.
CVE-2017-11882: five years of exploitation
It means that some companies still have not installed MS Office patches that were published 5 years ago.
Three high-profile social engineering hacks
How social engineering helped hack the CIA chief, hijack Elon Musk and Joe Biden’s Twitter accounts, and steal half-a-billion dollars.
How to protect legacy IT systems
Legacy systems continue to toil away in embedded solutions, medical equipment, and precision instruments. How can the respective security risks be mitigated?
phishingLookalike domains and how to spot them
Fake websites and email addresses are often used in phishing and targeted attacks. How do fake domains get created, and how to spot one?
IT trends and cybersecurity in 2023
What security aspects should be top-of-mind when implementing important changes in corporate IT infrastructure?
Nevermore: stop your company getting hacked again
After a hack, a company needs to improve security quickly and effectively. We outline the first steps to cyber-resilience.
Should we protect embedded Linux devices?
Can Linux-based embedded systems be considered secure by default or do they require additional protection?
