APT Carbanak source code leak: What’s next? The source code of infamous, billion-dollar malware was found on VirusTotal. Here’s what we know about it and what to expect next.
DC2019 Digital clutter as business cyberthreat Three real-world examples to illustrate the dangers of digital clutter.
SAS ShadowHammer: New details It appears the ASUS incident was just one part of the large-scale operation.
SAS Weaponized USB devices as an attack vector Trojanized HID devices as well as surveilling or malicious cables are serious threats that can be used to compromise even air-gapped systems.
small business Startups and information security What makes startups dependent on data protection for success?
vulnerabilities CVE-2019-0859: A zero-day vulnerability in Windows Our proactive security technologies uncovered an attempt to exploit another zero-day vulnerability in win32k.sys.
SAS Microsoft Office and its vulnerabilities The Microsoft Office threat landscape, and the technologies that help us catch related zero-day exploits, were the focus of this talk at the SAS 2019 conference.
SAS The Gaza cybergang and its SneakyPastes campaign A cybergang that specializes in cyberespionage, with its campaign mostly limited to the Middle East and countries in central Asia.
SAS Another Taj Mahal (between Tokyo and Yokohama) A new APT attack targets the diplomatic mission of an Asian country.
RSA conference RSAC 2019: Why attackers need domain fronting A story from RSAC 2019 on how domain fronting is used to disguise communications between an infected machine and a command server.
cloud SMBs require protection flexibility Our new version of Kaspersky Endpoint Security Cloud combines time-proven security technologies with the flexibility of a software-as-a-service model.
supply chain Potential problems with third-party Web plugins Do you use plugins on your website? Make sure they are updated regularly.
fake Bee-Hive-oristic engine for ATM protection A new protective technology will keep your ATM safe on the physical level and guarantee you additional income in cash.
RSA conference RSAC 2019: Grand Theft DNS At RSAC 2019, a SANS Institute instructor talked about how DNS manipulations can be used to hijack a company’s IT infrastructure.
leaks GitHub key leaks and how to prevent them Hundreds of thousands of tokens and cryptographic keys have been discovered on GitHub. We explain why this is bad and how to avoid a leak.
MSP MSPs as a threat vector Attackers display active interest in MSPs, exploiting vulnerabilities to infect their clients with cryptomalware.
RSA conference RSAC 2019: Seeking the perfect patching strategy Researchers at RSAC 2019 reported on the current vulnerability landscape and built a model that helps with effective patching strategy.
SAS 2019 ShadowHammer: Malicious updates for ASUS laptops Our technologies detected a threat that seems to be one of the biggest supply-chain attacks ever.
Ransomware Who will restore encrypted corporate data? Nobody will Do not expect data encrypted by ransomware to be restored easily. It is better to protect the data in the first place.
botnets Mirai goes Enterprise A new strain of Mirai is equipped with a much wider range of exploits, including some targeted at enterprise-class IoT devices.
Ransomware Aluminum giant Hydro hit by ransomware Industrial Norwegian giant Hydro hit by ransomware — security incident analysis.