RSA conferenceRSAC 2019: Grand Theft DNS
At RSAC 2019, a SANS Institute instructor talked about how DNS manipulations can be used to hijack a company’s IT infrastructure.
SMB
1152 articles
leaksGitHub key leaks and how to prevent them
Hundreds of thousands of tokens and cryptographic keys have been discovered on GitHub. We explain why this is bad and how to avoid a leak.
MSPMSPs as a threat vector
Attackers display active interest in MSPs, exploiting vulnerabilities to infect their clients with cryptomalware.
RSAC 2019: Seeking the perfect patching strategy
Researchers at RSAC 2019 reported on the current vulnerability landscape and built a model that helps with effective patching strategy.
ShadowHammer: Malicious updates for ASUS laptops
Our technologies detected a threat that seems to be one of the biggest supply-chain attacks ever.
RansomwareWho will restore encrypted corporate data? Nobody will
Do not expect data encrypted by ransomware to be restored easily. It is better to protect the data in the first place.
Aluminum giant Hydro hit by ransomware
Industrial Norwegian giant Hydro hit by ransomware — security incident analysis.
CVE-2019-0797: Zero-day exploits keep coming
Our proactive technologies detected yet another Windows exploit that was used in APT attacks.
endpointProtecting workstations: How not to overblock
To reduce the attack surface you can block many vulnerable features of software. The question is, how can you do that but not interfere with business-processes?
cryptojackingRise of the cryptojackers
Despite the plunge in cryptocurrency values, not only has cryptojacking not declined, it is growing rapidly.
Out-of-office replies: How not to spill too many beans
The hidden dangers of out-of-office messages.
Cybersecurity report from Middle-earth
Analysis of Sauron’s hacking tools implemented in the devices known as Rings of Power.
security awarenessCybersecurity culture instead of dull lectures
“Security awareness” means different things to different people. Here’s what we mean when talking about this subject.
Cybercrime is focusing on accountants
We detect a spike in activity from Trojans targeting mostly accountants who work in small and midsize businesses.
Hunting for Office 365 accounts
Cybercriminals are bypassing mail spam filters by hiding documents with a malicious link in SharePoint Online.
What businesses should know about our partners
Our new partner program: What customers should know about Kaspersky United.
SOC burnout
Burnout caused by routine is a problem not only for employees, but for the entire company.
How to educate your employees about cyberthreats
A new online education platform automates security awareness training for companies of any size.
An ex-employee’s cyberrevenge
Ex-employees can go to extremes for the sake of revenge. How to terminate a work relationship safely and securely.
Out-of-office security
Employees going away for the winter break? We explain what to do to keep trips from turning into corporate data leaks.