SMB

Some thoughts on what PC software patches should be prioritized and why.

Gadgets to help protect employees’ devices against hackers and other threats.

What caused a mass vulnerability in VPN clients, and how to keep them working.

It means that some companies still have not installed MS Office patches that were published 5 years ago.

Fake websites and email addresses are often used in phishing and targeted attacks. How do fake domains get created, and how to spot one?

How did scammers pull off a MitM attack and 2FA bypass in… 1915?!

July Microsoft Patch Tuesday: a collection of exploited vulnerabilities.

Low-code apps lower IT costs, but boost information security risks. How to mitigate them?

Researchers have come up with a way to exfiltrate confidential data by observing LED activity.

What can get stolen from RAM, and what’s hiberfil.sys got to do with it?

Cybercriminals prey on corporate credentials by sending fake HR emails.

How scammers can hack your YouTube channel without knowing a password and second factor.

Website names in the ZIP and MOV domains are indistinguishable from file names. How will this affect IT systems, and what will threat actors do?

Crypto mixers, nested exchanges, cash-out and other crypto-laundering methods used by ransomware operators.

Why you should purge your company’s LinkedIn page from fake employee profiles, and how to do it.

The pros and cons of different approaches to deploying and maintaining information security systems.

Cybercriminals can access the e-mails of folks you’re in correspondence with and then try to hijack your conversations.

Kaspersky experts discover a CLFS vulnerability being exploited by cybercriminals.

DIY security trainings for your colleagues that are both fun (for you) and educational (for them).

Cybercriminals are attacking 3CX VoIP telephony software users via trojanized applications.

Cybercriminals are using hijacked SharePoint servers to send dangerous notifications.