supply chain Four malicious packages in npm repository New malicious campaign hunts for Discord tokens and credit card information via infected npm packages.
truth Obi-Wan Kenobi in terms of information security How things stood with information security in a galaxy far, far away — nine years before the Battle of Yavin.
social engineering Cyberattacks without malware How cybercriminals attack companies without using malware.
phishing Smells phishy: e-mails marked safe Work e-mails stamped “verified” should set alarm bells ringing.
Ransomware New ransomware: a cross-platform future The new Luna and Black Basta ransomware strains are capable of attacking Windows, Linux and VMware ESXi.
macros The return of the macro Microsoft cancels its decision to block macros by default. We discuss the cybersecurity implications for companies.
security awareness HR on guard for cybersecurity The most effective protection is increasing employees’ awareness, and it’s up to HR to maintain it.
IoT Protecting corporate IoT devices Cyber immune gateway that can shield IoT and IIoT devices from cyberthreats.
processors A mind of their own: we need to talk about neuroprocessors Why the future belongs to neuromorphic processors, and how they differ from conventional processors in modern devices.
SMB Five reasons to protect small business from cyberthreats Five arguments in favor of installing security solutions on the endpoints of a small company.
Ransomware Techniques, tactics and procedures of ransomware Deep analysis of modern ransomware allows you to implement universal methods to counter them.
leaks Combating data leaks through database encryption Queryable Encryption in the MongoDB database management system, and how it can improve data protection.
access Initial access market analysis Our experts studied the shadow market for initial access to corporate infrastructure.
Employees Interns: a hidden cybersecurity threat How an intern can be a threat to your organization’s cybersecurity and what you can do about it.
MDR Most prevalent adversarial techniques applied in 2021 incidents Kaspersky Managed Detection and Response experts identified the adversarial techniques that were most prevalent cybersecurity incidents in 2021.
APT WinDealer: spyware with a peculiar delivery mechanism Our experts studied the WinDealer malware created by the LuoYu APT group.
vulnerabilities Follina: office documents as an entrance New vulnerability CVE-2022-30190, aka Follina, allows exploitation of Windows Support Diagnostic Tool via MS Office files.
Cars How to improve smart car apps After conducting a thorough study of applications for connected cars, our experts highlighted a number of flaws of such software.
incident response Key incident response skills What should an incident response specialist be able to do and how can they improve their skills?
vulnerabilities DHS recommends patching VMware, probably you should too The Department of Homeland Security is urging US federal agencies to “patch or remove” a list of VMware products within five days. Probably you should do it too.
Ransomware How to prevent a ransomware attack from happening again? For Anti-Ransomware Day, we decided to publish few tips that will help your company avoid falling victim to ransomware for a second time.