vulnerabilities CVE-2017-11882: five years of exploitation It means that some companies still have not installed MS Office patches that were published 5 years ago.
social engineering Three high-profile social engineering hacks How social engineering helped hack the CIA chief, hijack Elon Musk and Joe Biden’s Twitter accounts, and steal half-a-billion dollars.
legacy How to protect legacy IT systems Legacy systems continue to toil away in embedded solutions, medical equipment, and precision instruments. How can the respective security risks be mitigated?
phishing Lookalike domains and how to spot them Fake websites and email addresses are often used in phishing and targeted attacks. How do fake domains get created, and how to spot one?
strategy IT trends and cybersecurity in 2023 What security aspects should be top-of-mind when implementing important changes in corporate IT infrastructure?
cyber-resiliency Nevermore: stop your company getting hacked again After a hack, a company needs to improve security quickly and effectively. We outline the first steps to cyber-resilience.
embedded Should we protect embedded Linux devices? Can Linux-based embedded systems be considered secure by default or do they require additional protection?
identity theft Identity theft — a century ago How did scammers pull off a MitM attack and 2FA bypass in… 1915?!
vulnerabilities Band-aid on a… corpse: Microsoft patches IE — again July Microsoft Patch Tuesday: a collection of exploited vulnerabilities.
risks Low-code and no-code app security Low-code apps lower IT costs, but boost information security risks. How to mitigate them?
social engineering Social engineering tricks Social engineering in the spotlight: from classic tricks to new trends.
data LED data exfiltration Researchers have come up with a way to exfiltrate confidential data by observing LED activity.
RAM How to protect RAM secrets What can get stolen from RAM, and what’s hiberfil.sys got to do with it?
phishing Vacation schedule scam Cybercriminals prey on corporate credentials by sending fake HR emails.
APT TriangleDB: the spyware implant of Operation Triangulation APT operators are showing increasing interest in mobile devices. Our experts have studied one of their tools.
awareness The art of internal cybersecurity communications A few tips on how to establish cybersecurity communications with employees.
passwords Identity security: what is it, and why is it helpful? Proper account security not only reduces the number of cyberattacks on companies — it brings financial benefits too. What needs to be done to reap them?
scam Hacking YouTube channels with stolen cookies How scammers can hack your YouTube channel without knowing a password and second factor.