cyberespionage The DeathStalker cyberspy group and its tool set The DeathStalker group targets relatively small companies and their trade secrets.
black hat Common mistakes when assessing cyberrisks When calculating potential losses from cyberincidents, statistical data is just as important as its interpretations.
email How to repair DMARC The DMARC mechanism has its drawbacks, but we have developed a technology to fix them.
vulnerabilities Operation PowerFall: Two zero-day vulnerabilities Our technologies prevented an attack. Expert analysis revealed the exploitation of two previously unknown vulnerabilities. What you need to know.
phishing Fake e-mail scanner A detailed look at a phishing site masquerading as an e-mail scanner and its attempts to snag victims.
Ransomware Analysis of WastedLocker targeted ransomware Our experts’ detailed analysis of the prime suspect in the ransomware attack on Garmin.
corporate security Never trust, always verify: The Zero Trust security model What is Zero Trust, and why is it attractive for modern business?
Ransomware Lazarus experiments with new ransomware The Lazarus cybercrime group uses traditional APT techniques to spread VHD ransomware.
targeted attacks MATA: A multiplatform malware framework Our experts detected a malware framework that cybercriminals use to attack various operating systems.
vulnerabilities CVE-2020-1350: Vulnerability in Windows DNS servers Microsoft has released a patch for a critical RCE vulnerability in Windows Server systems.
backup Why businesses need to back up We explain why you need to back up critical data, even if you trust your equipment 100%.
truth Ali Baba and the forty cyberthreats It turns out that the tale of Ali Baba is a collection of stories from ancient Persia about … cyberthreats?
sandbox Sandbox for experts We developed a sandbox capable of emulating a company-specific system in an isolated environment.
phishing The hunt for Office 365 accounts Common cybercriminal tricks for hijacking Office 365 accounts.
EDR Simple defense against complex attacks An integrated approach arms even small companies with automated tools that repel complex attacks.
privacy 4 ways to royally leak your company data A few stories about how easy it is to accidentally leak sensitive information into the public domain.
hybrid cloud How to secure DevOps Supply-chain attacks through public repositories have become more frequent of late. Here’s how to deal with them.
fraud Google Analytics as a data exfiltration channel Our experts uncovered a scheme to extract cardholder data using Google tools.
vulnerabilities Ripple20: Vulnerabilities in millions of IoT devices Israeli experts claim that hundreds of millions of IoT devices contain critical vulnerabilities — and that’s the most conservative estimate.
Cars Car autopilot security To protect ADAS from external interference, cars need a special approach to cybersecurity.