leaks 2016: Top 5 data leaks so far In this roundup, we talk about five true leaks and some lessons to be learned from them.
fraud Hummer: An unexpected aspect of the rootkit The key danger is the method the Hummer uses to achieve its goals. It roots a device and gains administrator’s privileges to install unauthorized software of its own discretion
Europol No More Ransom: A global threat requires international cooperation Kaspersky Lab, the Dutch National Police, Europol, and Intel Security are joining forces to launch a new initiative to battle ransomware worldwide. The initiative is called “No More Ransom.”
AMA Ask us anything — really On July 27, members of Kaspersky Lab’s GReAT will sit down on Reddit, where you can ask them absolutely anything.
attacks Isn’t anyone in the middle? Kaspersky Lab has patented technology enabling our software to detect man-in-the-middle (MitM) attacks, beloved of authors of financial malware.
MSP Who’s protecting small and medium businesses? Smart MSPs craft security software proposals for SMBs and offer security systems management services that eliminate the need for in-house information security specialists. Not every service provider is good for small companies, but the most successful MSPs are focused on this segment.
APT Dropping Elephant: Inelegant Espionage An Indian-speaking threat actor, Dropping Elephant chooses targets mainly in the Asian region, paying particular attention to Chinese government/diplomatic organizations – and also to foreign embassies and diplomatic offices in China.
agent Protecting the virtual desktops Despite the persistent myth of security-by-default, virtual infrastructures need protection every bit as much as physical ones. Almost all existing threats are relevant for virtual machines, too.
Kaspersky Endpoint Security for Business Weaponry to fight ransomware Ransomware attacks are on the rise, but we have tools to prevent them.
award Security starts with staff Spanish magazine Red Seguridad recently granted an award to the Kaspersky CyberSafety Management Games training program.
multilayered Use of allowlists is not enough Security should be multilayered, and use of allowlists is appropriate as one of the security levels.
CISO Industrial systems and cyberdefense: Time to forge alliances Information security experts have long been sounding the alarm about the poor defense of industrial systems, and of critical infrastructure systems in particular. Time to start
APT Larger than meets the eye: xDedic follow-up It now appears the number of servers bought and sold via xDedic might have been underestimated; it’s likely many more IPs have been compromised by xDedic players.
APT Operation Daybreak: A brand-new zero-day exploit in Flash Securelist just released a new cyberespionage campaign alert, code-named “Operation Daybreak.”
APT xDedic, a platform for selling hacked credentials, serves as an attack starting point Kaspersky Lab has lately researched an active cybercriminal trading platform xDedic. The main purpose of the xDedic marketplace is to facilitate buying and selling credentials of more than 70,000 hacked servers from all around the world.
Ransomware Cryptors: emergency measures to save business data Theoretically, every business should have already learned how to protect itself against ransomware. Actually it’s not the case.
ATMs Why ATMs and points of sale need protection and what we have done to provide it ATMs and point-of-service systems are extremely vulnerable to malware — and software vendors are no longer patching them. Here’s how to make them safer.
APT Everyone affected: A vulnerability in all versions of Windows past Win2K may be found A vulnerability affecting all versions of Windows since Windows 2000 through Windows 10 might have been discovered. It’s still uncertain, however.
embedded Embedded software goes out of support: How to stay safe Although the history of Microsoft Windows XP seemed to end in April 2014, the operating system was not completely gone; many embedded devices still ran Windows XP Embedded Service Pack 3, and as such they were dependent on its security updates.
0days Danti and Co: Beware of Long-Forgotten Vulnerabilities! One of the most popular techniques used to penetrate corporate defenses is the use of vulnerabilities found in working software, which, in fact, do not need to be brand-new 0-days.
Ransomware TeslaCrypt has gone away, ransomware problem hasn’t In a highly surprising move, the notorious Teslacrypt authors have wrapped up their operation and released the ransomware’s master key.