UEFI MSI leak: tips for users, organizations, and developers Now anyone can sign device firmware with MSI private keys. This represents a long-term persistent risk to be considered by all users.
sandbox Making a better sandbox The effectiveness of a sandbox largely depends on its ability to realistically imitate a working environment.
clouds Brief cheat-sheet on cloud types and their risks Сloud technologies differ in terms of both costs and risks. What cloud type should you choose, and how should you begin your migration?
phishing Beware the .zip and .mov domains! Website names in the ZIP and MOV domains are indistinguishable from file names. How will this affect IT systems, and what will threat actors do?
vulnerabilities New hardware vulnerability in Intel processors A brief, plain-language explanation of an advanced method of data theft using features of modern CPUs.
deepfakes How to get ready for deepfake threats Cybercriminals are increasingly using deepfakes in attacks against companies. What can we do to be safer?
Ransomware How cybercriminals launder dirty crypto Crypto mixers, nested exchanges, cash-out and other crypto-laundering methods used by ransomware operators.
KasperskyOS Microkernel OSs against threats to smart devices Why such OSs are gaining more significance in markets in need of security.
vulnerabilities Internet Explorer is finally dead. Or is it? In its February update, Microsoft buried Internet Explorer once and for all. Or did it? We investigate what really happened.
MTFBWY Cybersecurity in season 3 of The Mandalorian As per tradition, on May 4, we review the status of cybersecurity in a galaxy far, far away.
LinkedIn Fake accounts on LinkedIn: time for a purge Why you should purge your company’s LinkedIn page from fake employee profiles, and how to do it.
services Implementing information security solutions in SMBs The pros and cons of different approaches to deploying and maintaining information security systems.
email Conversation hijacking and how to deal with it Cybercriminals can access the e-mails of folks you’re in correspondence with and then try to hijack your conversations.
Ransomware Attacks on virtualization systems and Linux servers Linux and ESXi-based systems are increasingly falling victim to ransomware attacks. So how can you protect your servers?
trojans QBot trojan being distributed through business e-mails Hackers are distributing the QBot trojan through business correspondence.
open-source Open source: the top-10 risks for business Open-source applications require proper implementation and maintenance; otherwise a company could face many threats. We highlight the key risks.
vulnerabilities CVE-2023-28252 zero-day vulnerability in CLFS Kaspersky experts discover a CLFS vulnerability being exploited by cybercriminals.
data Data exfiltration — through a built-in PC speaker A method of stealing data from an air-gapped system through a speaker you may not even know is there.
awareness Info-security training — with glue and scissors DIY security trainings for your colleagues that are both fun (for you) and educational (for them).