vulnerability A good reason to update Confluence It’s time to update Confluence Data Center and Confluence Server: they contain a serious vulnerability that allows unauthorized creation of administrator accounts.
side-channel Side Eye: eavesdropping using a smartphone’s video camera How and why did American researchers try to extract sound from a video signal, and was it worth it?
containerization Container security from A to Z We take an in-depth look at securing and configuring containerization systems.
passwords A how-not-to guide to password policies Examples of password policies that will have users tearing their hair out — and why you shouldn’t employ them.
AI Kaspersky calls for ethical use of AI in cybersecurity We propose six principles of ethical use of AI in the cybersecurity industry — to be presented at the global Internet Governance Forum.
side-channel GPU.zip: deft theft of secrets from video chips We look at a new sophisticated attack on AMD and Intel integrated graphics cards.
iOS Dangerous illusions of security: is iOS really more secure than Android? How to choose a secure mobile platform for work.
SD-WAN Does your network need SD-WAN? We explain what SD-WAN is, and how it can help protect your company.
passwords Password storage as the cornerstone of security How online services should store user passwords, and how to minimize the damage in the event of a leak or hack.
digital footprint Dangers of your brand’s doppelgangers How to protect a company’s reputation from illegal use of its name on the internet.
signs of phishing Self-evaluation questionnaire phishing scam Attackers invite employees to complete fake self-evaluations to steal corporate credentials.
strategy How to lessen the workload on the CISO and their team What tasks needlessly overload infosec experts, and how to break the curse of overtime.
vulnerabilities Security of Electron-based desktop applications A few words on why desktop applications based on the Electron framework should be approached with caution.
Windows Wrong system time and insecure Secure Time Seeding Why the Windows system time can suddenly change, and how to stop it from happening.
sites How to stop your site from being a partner in crime Why criminals want to hack your website, how they might use it in new attacks, and how to stop them.
threat intelligence OSINT: what’s the danger, and how to stay safe We explain what OSINT is, why it has to be front-of-mind at all times, and how to guard against hackers using it.
tips What to patch first: prioritizing updates Some thoughts on what PC software patches should be prioritized and why.
strategy The security aspect of employee offboarding Offboarded employees often retain access to work information. What are the risks, and how to deal with them?
vulnerabilities Zenbleed: new hardware vulnerability in AMD CPUs Explaining an issue in popular PC and server CPUs in simple terms.
physical security Information security gadgets Gadgets to help protect employees’ devices against hackers and other threats.
VPN How to fix TunnelCrack VPN leaks What caused a mass vulnerability in VPN clients, and how to keep them working.