infostealersMalware disguised as AI agents
Threat actors are promoting pages containing malicious instructions for installing AI agents intended for workflow automation.
3523 articles
Android trojan posing as government services and Starlink apps
We break down the BeatBanker trojan attack, which combines espionage, crypto theft, and mining with inventive ways to dig its heels into a smartphone.
privacyBrain drain: vulnerabilities in mental health apps
We’re diving into why mental health apps have become a headache for their users, and how to minimize the risks of medical data leaks.
Unplugged: how to disable AI on your computer and smartphone
Tired of hallucinations in AI overviews, and have no clue as to why or how Copilot suddenly appeared on your PC? Here’s a guide to switching off those intrusive AI features in popular services.
Browser-in-the-browser attacks: from theory to reality
A browser-in-the-browser attack, theoretically described in 2022, has been adopted in real-world phishing. We break down how it works, and how to spot a fake authentication window.
containersAnother look inside the container
The latest update to Kaspersky Cloud Workload Security adds support for an AI assistant for image analysis.
macOSThe ExifTool vulnerability: how an image can infect macOS systems
An in-depth analysis of CVE-2026-3102, a vulnerability posing a potential threat to anyone processing images on a Mac.
Cloudless malware attribution
What is the purpose of a local version of the Kaspersky Threat Attribution Engine, and how to hook it up to IDA Pro?
signs of phishing
OpenClaw threats: assessing the risks, and how to handle shadow AI
What corporate security teams should do about the “viral” AI agent.
Love, AI & robots
Why do we have a love-hate relationship with dating apps, and what are they doing to our brains? Can an emoji start a war? Is marrying an AI actually a thing? We’re exploring how modern tech is redefining love and our very ideas of it.
The Winter Games in Italy: how to avoid the scams
We’re breaking down how to protect yourself from fake streams, counterfeit tickets, and non-existent merch — and how to keep your personal and financial data from being snatched during the 2026 Winter Olympic Games.
Phishing and spam: the wildest campaigns of 2025
We’re diving into the most intriguing and sophisticated phishing and spam schemes intercepted by our experts throughout 2025.
Don’t get pinched: the OpenClaw vulnerabilities
Today we’re diving into the OpenClaw AI agent — formerly known as “Clawdbot” and then “Moltbot” — to prove once again that secure AI is still a long way off.
Risks, vulnerabilities, and zero trust: key terms the CISO and the board must agree on
Breaking down core cybersecurity terms that colleagues often interpret differently or incorrectly.
How to recognize a deepfake: attack of the clones
Learn how to spot deepfakes in photos, videos, voice messages, and video calls in real time.
SIEMHow to detect FortiCloud SSO authentication bypass
Kaspersky SIEM got a set of correlation rules for detecting attempts to exploit vulnerabilities for authentication bypass in Fortinet products.
The practical value of cyberthreat attribution
Why is it useful to attribute malware to a specific hacker group?
Detecting account compromise with SIEM
Detecting attacks related to compromised accounts with AI and other updates in Kaspersky SIEM.
Knives, kinks, and shooters: what AI toys are really saying to kids
Children’s AI toys have been caught discussing drugs and sex with kids. We break down the results of a study that reveals exactly how these smart (too smart!) toys are blowing up past boundaries.