AIThe dark side of AI aggregators: the hidden risks of cutting corners on AI access
An inside look at the inner workings and hidden pitfalls of platforms offering dirt-cheap access to top-tier AI models.
Latest
social engineeringThey’re reading you like a book: scammers’ favorite tricks
Cybercriminals spend years mastering the art of manipulation to trick their targets. Here’s a look at how social engineering actually works, the exact emotions scammers weaponize, and what to do if you’ve already fallen for it.
MDRThree real-world profiles of modern corporate cyberattacks
These attacks didn’t start with sophisticated exploits. Instead, they relied on stolen passwords, too-lenient access rights, and a failure to apply long-released vulnerability patches.
Potential Threat: misconfigurations in GitHub Actions
A GReAT study has identified ~250,000 potential security issues in publicly accessible GitHub Actions.
Your Telegram account can be stolen without a password or verification code
Hackers have developed a PowerShell script that hijacks Telegram sessions and grants an attacker access to accounts without a password or verification codes. Here’s a breakdown of how it works and how to stay safe.
Hackers hijacked Hola Browser for secret crypto mining
Because of a supply chain attack, some Windows users unknowingly downloaded a Monero crypto miner along with their Hola Browser installation.
scamBuyer beware: how scammers are targeting soccer fans at the World Cup
Here’s a breakdown of the latest scams to watch out for, ensuring your World Cup experience ends with great memories — not stolen money or compromised data.
Is it possible to build a fully autonomous SOC?
We break down the core challenges and potential solutions for building a fully autonomous security operations center.
The FROST attack: how SSD access delays expose users’ activity
Austrian researchers have uncovered a bizarre new way hackers could steal sensitive data.
Gamers
Vulnerability in Unity game engine
Any game based on the popular Unity engine made in the last eight years can allow attackers to get into your computer or smartphone. Here’s what to do about it.
Gamers under fire: malware on official websites
Official gaming websites and platforms may seem safe, but even there gamers occasionally encounter malware. We break down infection cases involving Endgame Gear, Steam, and Minecraft.
Gamers beware: Trojans have invaded Steam
If you still think that Steam, Google Play, and the App Store are malware-free, then read this fascinating story about PirateFi and other hacker creations disguised as games.
How scammers attack young gamers
Autumn is here, kids are going back to school and also meeting up with friends in their favorite online games. With that in mind, we have just carried out one of our biggest ever studies of the threats young gamers are most likely to encounter.
Live hack: Apex Legends esports tournament scandal
Hackers have long been engaging with the gaming world: from cracking games and creating cheats, to, more recently, attacking esports players live during an Apex Legends tournament. Regarding the latter, we break down what happened and how it could have been avoided.
Mario Forever, malware too: a free game with a miner and Trojans inside
Malicious versions of the free-to-download game Super Mario 3: Mario Forever plant a miner and a stealer on gamers’ machines.
Minecraft players under attack
Minecraft mods downloaded from several popular gaming websites contain dangerous malware. What we know so far.
Business
Taming shadow-AI on corporate devices
How to detect and block unauthorized AI tools in an organization.
Turning off uninvited AI on corporate devices
A guide to detecting and blocking built-in AI features in popular software products.
Security gateway for autonomous vehicles
Approaches to solving cybersecurity challenges in autonomous transportation systems.
How to turn off unapproved AI tools across organization
High-level strategies for locking down popular AI tools that are either unneeded or outright banned under corporate policy.
I firmly believe that the concept of cybersecurity will soon become obsolete, and cyberimmunity will take its place.
Eugene Kaspersky
Tips
Subscription security: how to protect your account, your wallet… and your sanity
Why subscription owners need to prioritize personal and family cybersecurity.
Cracked in under a minute: (nearly) every other password
We’ve revisited our study on the crackability of real-world passwords leaked on the dark web — originally conducted two years ago. The findings are sobering: nearly every other password can be cracked in under a minute, and three out of five take less than an hour. How can we move away from insecure passwords?
What happens in the bedroom stays in the bedroom
Smart sex toys and their companion apps collect and process some extremely personal data. We break down the risks involved, and ways to protect your privacy.
Is your security system secure?
Protecting a security console is more critical than one might think. Here’s the lowdown on control-layer compromise, and how to keep it from happening.