All posts

Handing it to a store manager or cashier, posting about it in your neighborhood chat, or just keeping it – these are common actions if a bank card is found on the street, but they’re also the wrong ones. Here’s what you should actually do.

Attackers have found yet another source of free computing resources: automotive head units. We take a look at the first malware specifically targeting cars for infection.

We revisit the key rules for setting up IP cameras and related devices so that you don’t end up starring in a reality show — whether at home, in a hotel, or in rented accommodation.

Steam forums are the latest battleground for ClickFix attacks. We break down how attackers disguise themselves as helpful commenters to trick gamers into installing a crypto miner on their PCs.

How one “cybersecurity expert” published 445 books on Amazon in a single year — and what that means for anyone trying to learn something real in the age of AI slop.

Visit a familiar website, and along with the usual ad banner you could pick up a script that steals cryptocurrency. How can you protect yourself from attacks delivered through online ads?

Attackers are crafting files that devices can read as two different document types at once, and using these “nesting dolls” to smuggle in malware. How to detect and neutralize these two-faced files?

An analysis of key characteristics of AI agent-driven cyberattacks, why open-source models are sufficient to execute them, and what measures can help defend an organization.

CrashStealer is a macOS infostealer disguised as a videoconferencing app. It abuses Apple’s own trusted mechanisms to sneak onto your computer unnoticed.

How attackers distribute ScreenConnect under the guise of free software to deploy AsyncRAT.

ClickFix attacks, which were once seen mostly on Windows, are now spreading to macOS. We break down the mechanics of the attack, and ways to protect your device.

Did you know that live chat agents on websites can see everything — even messages you never actually sent? This post looks at how this works, and what you can do about it.

We analyze the first-ever real-world incidents where attackers targeted AI agents deployed in corporate environments.

Who sends regular hidden requests from your smartphone and why, how phone number verification works, and whether you should turn it off.

A new variation of ClickFix allows attackers to gain access to Microsoft 365 accounts. We break down how this technique works, and what threat it poses to organizations.

After the breakup of a relationship, it’s not just your emotional wellbeing that needs attention — your digital security does too. Here’s what accounts and services to check to avoid awkward situations, unwanted tracking, and unnecessary risk.

How attackers gain access to corporate services without stealing passwords or cookies: we’re analyzing the Shadow Token via Remote Debug technique used in ToddyCat APT attacks.

Researchers have shown that a single text message can trick Gemini into opening the windows of your house or launching a Zoom call, or poisoning its own long-term memory. How do you protect yourself against these attacks?

Microsoft has addressed approximately 600 vulnerabilities in its products, affecting its entire product line — including even Minecraft Server and Age of Empires II. How can organizations handle such a volume?

Meta’s new Muse Image AI, launched in early July, was briefly training its image generator on user-published Instagram posts. However, following user uproar, Meta killed the feature less than a week later. Here’s the breakdown on Meta’s latest generative AI push — and why you shouldn’t let your guard down just yet.

How Meta plans to implement the NameTag facial recognition feature in its smart glasses, and why it’s already sparking outrage.