Zero TrustFive reasons to switch to ZTNA and zero trust: why companies have outgrown VPN
How VPN attacks, growing infrastructure complexity, and regulatory requirements are all accelerating businesses’ shift to Zero Trust Network Access.
Latest
RansomwareC3RB3R attacks Synology: why you shouldn’t put off NAS updates
C3RB3R ransomware is attacking Synology network-attached storage devices running outdated operating systems and encrypting the files stored on them. We explain which NAS devices are at risk, how to protect yourself from the attack, and what to do if your data has already been encrypted.
SIEMSIEM: which rules actually work in your infrastructure
Your SIEM is installed and the rules are loaded. But do you know which rules are waiting for the right events, and which ones are just idling?
PHP2Shell: what we know about the threat two weeks later
Critical PHP vulnerabilities put millions of websites worldwide at risk, but there are still no reports of mass breaches. We discuss the attacks on PAN-OS, a flaw in Brotli, and the steps businesses need to take beyond patching.
How to protect your surveillance camera
We’ve discovered a vulnerability that could affect millions of Intelbras IP cameras. If you’ve got one — here’s how to prevent attackers from disabling it.
Reading between the lines: how to read e-books safely
We break down how to use e-books safely, and which rules to follow when searching for books online, so you don’t fall victim to scammers
AICyber Immunity lessons for AI agents
How to apply Secure by Design ideas when rolling out AI agents.
The eMudhra certificate incident: how organizations can respond
How a certificate’s private key ended up being equal to 4, and why browser updates alone won’t protect you from vulnerable eMudhra certificates.
The Odyssey, information security, and torrents
Christopher Nolan’s The Odyssey has wrapped up its triumphant run in theaters, but it won’t be available digitally until November 17. That makes it the perfect bait for malware like MovieReaper, which spreads through torrents. Let’s see what cybersecurity lessons we can learn from the story of the cunning king of Ithaca — and how to avoid falling victim to a Trojan horse yourself.
Gamers
gamersGrand Scam Auto: how scammers target GTA VI fans before its release
Scammers are promising downloads of leaked copies of GTA VI, early access to the game, or a chance to become a beta tester. Here’s how you can spot these schemes and avoid falling into the trap.
Bad advice for gamers: ClickFix hits Steam forums
Steam forums are the latest battleground for ClickFix attacks. We break down how attackers disguise themselves as helpful commenters to trick gamers into installing a crypto miner on their PCs.
Vulnerability in Unity game engine
Any game based on the popular Unity engine made in the last eight years can allow attackers to get into your computer or smartphone. Here’s what to do about it.
Gamers under fire: malware on official websites
Official gaming websites and platforms may seem safe, but even there gamers occasionally encounter malware. We break down infection cases involving Endgame Gear, Steam, and Minecraft.
Gamers beware: Trojans have invaded Steam
If you still think that Steam, Google Play, and the App Store are malware-free, then read this fascinating story about PirateFi and other hacker creations disguised as games.
How scammers attack young gamers
Autumn is here, kids are going back to school and also meeting up with friends in their favorite online games. With that in mind, we have just carried out one of our biggest ever studies of the threats young gamers are most likely to encounter.
Live hack: Apex Legends esports tournament scandal
Hackers have long been engaging with the gaming world: from cracking games and creating cheats, to, more recently, attacking esports players live during an Apex Legends tournament. Regarding the latter, we break down what happened and how it could have been avoided.
Business
spamTechnology that blocks spam domains in bulk
Spammers automatically register hundreds of near-identical domains to fool security solutions. We can block those domains automatically, too.
PHP Vulnerabilities: remote code execution threat
PHP developers have released patches for two critical vulnerabilities that could allow an attacker to remotely execute arbitrary code on the server without authentication.
SMBHow to avoid falling victim to hackers: a guide for SMBs
People, processes, and technology: if a company has gaps in its defenses, they most likely come from one of these three areas. We walk through a real-world breach, and explain how to stand up to attackers without hiring a huge team or needing to vastly increase the security budget.
Patches thick and fast: October bulletins from Microsoft and others
Microsoft’s October Patch Tuesday bulletin is breaking records again — it addresses 1,414 vulnerabilities. Here’s what you need to know.
InjectEave: unavoidable eavesdropping method
We look at an unusual eavesdropping method that leverages the fundamental physical properties of electronic components.
I firmly believe that the concept of cybersecurity will soon become obsolete, and cyberimmunity will take its place.
Eugene Kaspersky
Tips
How to improve your resume with AI without exposing your data
Let’s look at how to use AI as a resume editor without oversharing to build a document that gets past automated screening systems and catches a recruiter’s eye.
How can students overcome the fear of unfulfilled potential, and where does cybersecurity come into it?
University students sometimes don’t see the practical value of what they’re studying, and aren’t always sure what to do next. Kaspersky Academy’s free “Cybersecurity. Entry Level” course can help them pick up in-demand skills directly from Kaspersky experts.
Nine reasons to set up a VPN on your router
Get the most speed, reliability, and convenience out of your VPN by putting it on your router. Here’s a look at the real benefits of specific VPN setup scenarios for your whole home network.
Fact and fiction about hidden Wi-Fi network names
Hiding your Wi-Fi network name might seem like a smart security move, but in practice it does more harm than good. Let’s take a look at how it works, what side effects it can have, and how to properly secure your home Wi-Fi.