wi-fi Nearest Neighbor: a remote attack on Wi-Fi networks We discuss the recently discovered Nearest Neighbor attack method, which enables attackers to compromise a Wi-Fi network from the other side of the world.
Technology NDR: the forefront of your company’s defense What IT and cybersecurity leaders need to know about implementing network detection and response.
SIEM Malicious modules and the LSA process Detection of tactics involving malicious DLL registration and other Kaspersky SIEM improvements in Q4 2024.
artificial intelligence Trojans in AI models Hidden logic, data poisoning, and other targeted attack methods via AI systems.
email How to stop exploitation of CVE-2024-49040 The patch that fixes CVE-2024-49040 in Microsoft Exchange is temporarily unavailable. We’ve implemented heuristics that detect attempts to exploit it.
stealers JarkaStealer in PyPI repository Malicious packages for AI integration containing infostealer malware were found in the Python Package Index repository.
vulnerabilities CVE-2024-10924: vulnerability on around four million sites A vulnerability that permits bypassing authentication has been found in a popular security hardening plugin for WordPress.
vulnerabilities CVE-2024-43451 and other reasons to update ASAP Exploitation of vulnerability CVE-2024-43451 allows an attacker to steal an NTLMv2 hash with minimal interaction from the victim.
incident response How to learn from a cybersecurity incident Analyzing incidents and drawing lessons from them should be an integral part of the incident response process. This can help improve the overall security level of a company.
passwords Password standards: 2024 requirements Discontinuing mandatory password rotations, banning outdated MFA methods, and other updates in the NIST SP 800-63 standards for digital account authentication and management.
SIEM Kaspersky SIEM: early threat detection and other improvements Rules for detecting atypical behavior in container infrastructure at the data collection stage, and other updates to our SIEM system.
social engineering Malware in developer coding tests Hackers continue to target developers: during a fake job interview, they ask “potential employees” to run a script from GitHub that hides a backdoor.
AI Will AI replace SOC analysts? We share our experience on the optimal use of AI models in the SOC of our Kaspersky MDR service.
artificial intelligence AI in cybersecurity automation AI has dozens of applications in cybersecurity. Which ones are the most effective?
signs of phishing Phishing emails and Docusign electronic signature Phishers have adopted another trick: they send emails pretending to be from Docusign with a fake link to a document that the recipient must sign.
IoT Why standardization matters: from convenience to saving lives Why international standards are important, and how Kaspersky contributes to IoT standardization.
school School and cyberthreats Why cybersecurity in education is critical, and how to protect schools from attacks.
Education Cybersecurity talent shortages: the roots and the solutions We explore the root causes of the talent crisis in the cybersecurity industry and look for possible solutions.
side-channel attack New ways data can be stolen from air-gapped systems Two fresh papers on the art of data exfiltration in scenarios where it seems utterly impossible.
signs of phishing Overcooking the phish This phishing campaign incorporates ghost spoofing, embedded text in images, a PDF file, a QR code, DocuSign imitation, and Cloudflare verification — yet it still completely misses the mark.
artificial intelligence Kaspersky AI Technology Research Center: who we are and what we do Our developments, products, research, patents and expert teams harnessed for AI.