ChronicleThe evolution of security: the story of Code Red
The story of the first serious attack on corporate IT infrastructure.
Business
1116 articles
supply chainFour malicious packages in npm repository
New malicious campaign hunts for Discord tokens and credit card information via infected npm packages.
truthObi-Wan Kenobi in terms of information security
How things stood with information security in a galaxy far, far away — nine years before the Battle of Yavin.
social engineering
RansomwareNew ransomware: a cross-platform future
The new Luna and Black Basta ransomware strains are capable of attacking Windows, Linux and VMware ESXi.
The return of the macro
Microsoft cancels its decision to block macros by default. We discuss the cybersecurity implications for companies.
security awarenessHR on guard for cybersecurity
The most effective protection is increasing employees’ awareness, and it’s up to HR to maintain it.
Protecting corporate IoT devices
Cyber immune gateway that can shield IoT and IIoT devices from cyberthreats.
processorsA mind of their own: we need to talk about neuroprocessors
Why the future belongs to neuromorphic processors, and how they differ from conventional processors in modern devices.
Five reasons to protect small business from cyberthreats
Five arguments in favor of installing security solutions on the endpoints of a small company.
Techniques, tactics and procedures of ransomware
Deep analysis of modern ransomware allows you to implement universal methods to counter them.
Combating data leaks through database encryption
Queryable Encryption in the MongoDB database management system, and how it can improve data protection.
Initial access market analysis
Our experts studied the shadow market for initial access to corporate infrastructure.
Interns: a hidden cybersecurity threat
How an intern can be a threat to your organization’s cybersecurity and what you can do about it.
Most prevalent adversarial techniques applied in 2021 incidents
Kaspersky Managed Detection and Response experts identified the adversarial techniques that were most prevalent cybersecurity incidents in 2021.
WinDealer: spyware with a peculiar delivery mechanism
Our experts studied the WinDealer malware created by the LuoYu APT group.
Follina: office documents as an entrance
New vulnerability CVE-2022-30190, aka Follina, allows exploitation of Windows Support Diagnostic Tool via MS Office files.
How to improve smart car apps
After conducting a thorough study of applications for connected cars, our experts highlighted a number of flaws of such software.
Key incident response skills
What should an incident response specialist be able to do and how can they improve their skills?
DHS recommends patching VMware, probably you should too
The Department of Homeland Security is urging US federal agencies to “patch or remove” a list of VMware products within five days. Probably you should do it too.