AIOpenClaw threats: assessing the risks, and how to handle shadow AI
What corporate security teams should do about the “viral” AI agent.
91 articles
SIEMHow to detect FortiCloud SSO authentication bypass
Kaspersky SIEM got a set of correlation rules for detecting attempts to exploit vulnerabilities for authentication bypass in Fortinet products.
The practical value of cyberthreat attribution
Why is it useful to attribute malware to a specific hacker group?
AI agents in your organization: managing the risks
The top-10 risks of deploying autonomous AI agents, and our mitigation recommendations.
Forgotten IT infrastructure: even worse than shadow IT
How to eliminate the threat posed to organizations by ownerless servers and services, outdated libraries, and insecure APIs.
embedded systemsSecuring embedded devices in 2025
Identifying threats to embedded devices, and how the updated Kaspersky Embedded Systems Security can help in tackling them?
browsersBrowser extensions: never trust, always verify
Systematic measures and tools that organizations can use to defend against malicious browser extensions.
vulnerabilitiesPrinters attacked by… fonts
We examine how popular Canon printers could become a foothold for attackers within an organization’s network.
Detecting DLL hijacking
Our experts trained an ML model to detect attempts to use DLL hijacking, and integrated it into the Kaspersky SIEM system.
New types of attacks on AI-powered assistants and chatbots
A close look at attacks on LLMs: from ChatGPT and Claude to Copilot and other AI-assistants that power popular apps.
An APT… through your webcam
How attackers can hijack your computer through its webcam — and how to stop it.
Lessons learned from the trojanized KeePass incident
A popular password manager was modified to allow attackers to steal passwords and encrypt users’ data. How to protect home computers and corporate systems from this threat?
The ABCs of cyber-resilience
Businesses reaching the “acceptance stage”: given inevitable breaches — how to prepare for them?
Security measures for handling archive files in organizations
Archives are being used in targeted phishing and other attacks on organizations. What tools, settings, and policies can mitigate the threat?
A ransomware attack through an IP camera
Fending off ransomware attacks that exploit corporate IoT devices.
Miner inconvenience: how cybercriminals blackmail YouTubers into promoting malware
Cybercriminals are blackmailing YouTube bloggers into posting malware links in their video descriptions.
Business benefits of secure containerization
What benefits do hybrid clouds and containerization bring to businesses — and what measurable impact do cybersecurity tools make?
Malicious modules and the LSA process
Detection of tactics involving malicious DLL registration and other Kaspersky SIEM improvements in Q4 2024.
How to learn from a cybersecurity incident
Analyzing incidents and drawing lessons from them should be an integral part of the incident response process. This can help improve the overall security level of a company.