vulnerabilities Another year, another Tuesday Microsoft patches more than a 100 vulnerabilities in Windows 10 and 11, Windows Server 2019 and 2022, Exchange Server, Office, and Edge browser.
public cloud Cryptominers threaten GCP virtual servers What’s in Google’s report on typical attacks against cloud systems in Google Cloud Platform?
PII Do you know how your employees are processing PII? Can you be sure your employees are working responsibly with personally identifiable information?
truth Hans Christian Andersen on security technologies Our Danish colleague spilled a lot of cybersecurity ink in his works.
phishing Common spear-phishing tricks To be ready for attacks targeting your company, information security officers need to know about received spear-phishing e-mails.
truth The Matrix Resurrections security assessment A look at what’s changed in the Matrix in the 18 years since the last update.
Industrial Cybersecurity PseudoManuscrypt’s nonstandard industrial attack A cyberattack has affected an unexpectedly large number of industrial systems.
truth Matrix vulnerabilities Even to the naked eye, the Matrix’s flawed implementation threatens the system’s stability and security.
web applications OWOWA malicious IIS module The malicious Internet Information Services module makes Outlook on the web a cybercriminal tool.
transparency A transparent move in North America Kaspersky opens its fifth Transparency Center, our first in North America, in Fredericton, New Brunswick, Canada.
vulnerabilities Critical vulnerability in Apache Log4j library Researchers discovered a critical vulnerability in Apache Log4j library, which scores perfect 10 out of 10 in CVSS. Here’s how to protect against it.
SOC Five steps to prevent IT security team burnout A practical guide for chief information security officers and security operation center managers.
KasperskyOS A paradigm shift for industrial security: Immunizing factories Kaspersky IoT Secure Gateway 100: How to protect industrial data whilst preserving business continuity.
mobile apps Five reasons mobile apps need protection Cybercriminals can target anyone who uses your applications; keeping users safe is also partly up to you.
MSP MSP market changes in post-pandemic world Two studies of the MSP and MSSP market development in the context of ubiquitous remote work.
email What not to keep in your mailbox Getting e-mail through a Web interface may be convenient, but attackers are after corporate mailboxes, and one day they may visit yours.
healthcare Five problems of telehealth Report on the research about the applied telehealth practices, views on the development and the difficulties that emerge when providing medical services remotely.
vulnerabilities Invisible implants in source code Researchers from Cambridge describe the Trojan Source method for inserting hidden implants in source code.
Internet Businesses’ proxyware headache Employees can install proxyware without their employer’s knowledge, introducing additional business cyberrisks.
phishing Phishing disguised as spam Attackers are trying to steal credentials from corporate mail by sending lists of quarantined spam e-mails.
scan engine How to scan files in a public cloud To prevent Azure Storage and Amazon S3 cloud services from becoming malware distribution vectors, scan files while they’re uploading.