Kaspersky official blog

How and why we deploy artificial intelligence in our SIEM system.

A security researcher has investigated his own smart mattress cover, discovering several ways to hack it — including through a backdoor preinstalled by the developer.

Our technologies have helped to detect the zero-day vulnerability CVE-2025-2783 in Google Chrome, which was used in a sophisticated APT attack.

How to counter new privacy invasions by browser developers

Cybercriminals behind the Fog ransomware publish leaked data along with the IP addresses of attacked computers.

If you’ve ever downloaded game cheats from a YouTuber’s “link in the description”, your computer might be infected with a stealer.

How to respond to a compromised GitHub changed-files Action incident.

We dive into the mechanics of the controversial nude-scanning app that has mysteriously materialized on a billion phones.

Reasons for updating your ESXi infrastructure ASAP, and enterprise threats that VM escape poses.

Microsoft’s March Patch Tuesday fixes several vulnerabilities that have already been used in the wild. Details are not clear at the moment, but it’s worth installing the patches ASAP.

Takeaways for regular crypto holders from the biggest crypto heist in history.

We’ve added technology that checks QR codes in emails for phishing links.

Despite being digital natives, 70% of millennials rarely verify online identities – exposing themselves to risks. Discover how to build safer online habits with expert insights from Kaspersky.

We found several groups of sites mimicking official websites of the DeepSeek and Grok chatbots. Fake sites distribute malware under the guise of non-existent chatbot clients for Windows.

Cybercriminals are blackmailing YouTube bloggers into posting malware links in their video descriptions.

What information does an MDR service need to protect a company from complex targeted attacks?

Online converters are a tempting but dangerous way to change file formats. We tell you how to convert files and not get trojanized.

A vulnerability in Google OAuth allows attackers to access accounts of defunct organizations through abandoned domains.

We break down the most covert mechanism of smartphone surveillance using real-life examples.

A step-by-step guide to scanning disk arrays weighing tens of terabytes with the aid of Kaspersky products.

We discovered over 200 repositories with fake projects on GitHub. Using them, attackers distribute stealers, clippers, and backdoors.