vulnerabilities

Our ICS CERT experts found 37 vulnerabilities in four VNC implementations. The developers have fixed most, but not all, of them.

Outsiders can penetrate your network through LAN sockets and devices in public areas.

A Chrome vulnerability already exploited by attackers gets patched. We recommend updating your browser right now.

Contrary to common belief, public clouds are not highly secure by design, and so require additional protection.

Six severe vulnerabilities in iMessage that allow remote code execution and data stealing with no user interaction? Sounds like a good reason to update to iOS 12.4 as soon as possible.

Hacking security cameras through a smart light switch — and other interesting features of smart homes.

Office Wi-Fi may be a weak point in your security.

A newly discovered vulnerability allows hackers to eavesdrop on WhatsApp users, read their chats, and install spyware just by calling them. Update the app now!

Our proactive security technologies uncovered an attempt to exploit another zero-day vulnerability in win32k.sys.

The Microsoft Office threat landscape, and the technologies that help us catch related zero-day exploits, were the focus of this talk at the SAS 2019 conference.

Do you use plugins on your website? Make sure they are updated regularly.

A bug in WinRAR allows malefactors to gain full control over your device. All they need you to do is unpack a rigged RAR file.

Attackers display active interest in MSPs, exploiting vulnerabilities to infect their clients with cryptomalware.

Researchers at RSAC 2019 reported on the current vulnerability landscape and built a model that helps with effective patching strategy.

Systems designed to guard against car theft can be used to track, immobilize, and steal vehicles.

Our proactive technologies detected yet another Windows exploit that was used in APT attacks.

To reduce the attack surface you can block many vulnerable features of software. The question is, how can you do that but not interfere with business-processes?

The year 2018 passed under the sign of Spectre and Meltdown hardware vulnerabilities. What does 2019 have in store in this regard?

Thanks to our proactive technologies, zero-day vulnerability CVE-2018-8611 was neutralized.

Our exploit prevention technologies detected another zero-day exploit for Windows

In this edition of the Kaspersky Lab podcast, we discuss Facebook’s Portal, chain letters on Facebook, Google+ being killed, and more.