AI“Denial of wallet” as a new DDoS attack against AI agents
What tokenomics is, and how the value of AI tokens has become a cybersecurity issue.
Latest
wi-fiFact and fiction about hidden Wi-Fi network names
Hiding your Wi-Fi network name might seem like a smart security move, but in practice it does more harm than good. Let’s take a look at how it works, what side effects it can have, and how to properly secure your home Wi-Fi.
SMBNot just a box to check: how small and medium-sized businesses can turn cybersecurity into a growth driver
We believe that investing in cybersecurity, like any other investment, should pay off. This post explains what a small company needs to make its security setup work for the business instead of staying a formality.
Malicious Chrome and Edge add-ons and ClickFix attacks
What do malicious browser extensions, crypto theft, and fake Chrome update guides have in common? We look at a recent campaign involving 19 infected add-ons.
Smart TVTrojan TV, or the new risks of malicious proxies
How budget smart-TVs and set-top boxes infect home networks and join malicious botnets.
ChatGPTDear diary: how OpenAI’s Computer History feature works, and why it’s risky
A new feature in the ChatGPT app for macOS keeps a detailed log of everything you do on your computer, and stores that data in a freely readable text file. We assess the benefits, the risks, and settle on a plan of what to do.
How to fully remove apps and leftover files on macOS
Deleting an app from your Mac completely isn’t as simple as it sounds. We explain why, and show how App Cleaner in Kaspersky Premium for macOS clears out the leftovers.
GPUThor: another server attack attempt through the GPU
Researchers have demonstrated a partially effective Rowhammer attack on graphics accelerators.
How to hack a Boeing 737 in 60 seconds for just $100
Researchers have built a device that can interfere with critical systems aboard a Boeing 737. Here’s how the attack works, and whether it’s time you started worrying about flying yet.
Gamers
Bad advice for gamers: ClickFix hits Steam forums
Steam forums are the latest battleground for ClickFix attacks. We break down how attackers disguise themselves as helpful commenters to trick gamers into installing a crypto miner on their PCs.
Vulnerability in Unity game engine
Any game based on the popular Unity engine made in the last eight years can allow attackers to get into your computer or smartphone. Here’s what to do about it.
Gamers under fire: malware on official websites
Official gaming websites and platforms may seem safe, but even there gamers occasionally encounter malware. We break down infection cases involving Endgame Gear, Steam, and Minecraft.
Gamers beware: Trojans have invaded Steam
If you still think that Steam, Google Play, and the App Store are malware-free, then read this fascinating story about PirateFi and other hacker creations disguised as games.
How scammers attack young gamers
Autumn is here, kids are going back to school and also meeting up with friends in their favorite online games. With that in mind, we have just carried out one of our biggest ever studies of the threats young gamers are most likely to encounter.
Live hack: Apex Legends esports tournament scandal
Hackers have long been engaging with the gaming world: from cracking games and creating cheats, to, more recently, attacking esports players live during an Apex Legends tournament. Regarding the latter, we break down what happened and how it could have been avoided.
Mario Forever, malware too: a free game with a miner and Trojans inside
Malicious versions of the free-to-download game Super Mario 3: Mario Forever plant a miner and a stealer on gamers’ machines.
Business
Exotic files: unexpected sources of cyberthreats
We break down the file formats that can be unfamiliar to some users, and that aren’t always scanned by security solutions but can still pose cyberthreats.
A dangerous matryoshka: everything needed to be known about polyglot malware files
Attackers are crafting files that devices can read as two different document types at once, and using these “nesting dolls” to smuggle in malware. How to detect and neutralize these two-faced files?
side-channel attacksAcoustic keylogging: have you heard the news?
Japanese researchers have again tackled a classic high-tech espionage challenge: accurately identifying keystrokes based purely on how they sound.
Lessons from the Hugging Face breach caused by OpenAI agents
An analysis of key characteristics of AI agent-driven cyberattacks, why open-source models are sufficient to execute them, and what measures can help defend an organization.
Cybersecurity and platform migration
What information security issues should be addressed when migrating to a new platform?
I firmly believe that the concept of cybersecurity will soon become obsolete, and cyberimmunity will take its place.
Eugene Kaspersky
Tips
AI for schoolkids: 25 helpful prompts + usage tips
We explain how to use AI the right way for schoolwork, how to fact-check chatbot responses, and how to protect your personal data.
What to do if you find someone else’s bank card
Handing it to a store manager or cashier, posting about it in your neighborhood chat, or just keeping it – these are common actions if a bank card is found on the street, but they’re also the wrong ones. Here’s what you should actually do.
A billion risky impressions: lessons from the Adform hack
Visit a familiar website, and along with the usual ad banner you could pick up a script that steals cryptocurrency. How can you protect yourself from attacks delivered through online ads?
ClickFix on macOS: how Apple users are being scammed
ClickFix attacks, which were once seen mostly on Windows, are now spreading to macOS. We break down the mechanics of the attack, and ways to protect your device.