SOCThree approaches to structuring and alert processing in a SOC
How to distribute SOC tasks to tackle both the cybersecurity skills shortage and burnout.
tips“To pop, or not to pop — that is the question”
How things are privacy-wise on the social network Poparazzi.
threat intelligenceHow to reduce the load on SIEM and make good use of threat-intelligence feeds
How a threat-intelligence platform helps SOC analysts.
messengersSignal is secure, as proven by hackers
Users of the Signal messaging app got hit by a hacker attack. We analyze what happened and why the attack demonstrates that Signal is reliable.
The chronicle of WannaCry
Security evolution: The large-scale, but short-lived ransomware epidemic of 2017.
cryptocurrenciesCrypto, really. Part I: blockchains and cryptocurrencies
Everything you’ve always wanted to know about crypto on the whole, and NFTs in particular, and also why I’m not a fan of such tech, to say the least.
Independent testing of EDR solutions
SE Labs awarded Kaspersky EDR its highest rating in independent tests based on real world attacks.
Retbleed attack, or Spectre strikes back
Using a recent study on hardware vulnerabilities in processors as an example, we contemplate the cost of security.
AndroidData Safety instead of App Permissions
Google Play’s app descriptions have a new Data Safety section now. We explain why this isn’t such great news.
Andariel attacks with DTrack and Maui
The Andariel group attacks companies with several malicious tools.
DogWalk and other vulnerabilities
Microsoft has released patches for more than 140 vulnerabilities, some of which need to be closed as soon as possible.
Previewing Black Hat 2022
A look at what experts at Kaspersky will be watching during Black Hat 2022.
ILOVEYOU: the virus that loved everyone
We recall the story of the ILOVEYOU worm — one of the most infamous viruses from 22 years ago.
iOSProtection through restriction: Apple’s new Lockdown Mode
Apple’s new feature promises enhanced protection in the fight against targeted attacks.
Four malicious packages in npm repository
New malicious campaign hunts for Discord tokens and credit card information via infected npm packages.
Obi-Wan Kenobi in terms of information security
How things stood with information security in a galaxy far, far away — nine years before the Battle of Yavin.
CosmicStrand: a UEFI rootkit
Our experts discovered a fresh version of CosmicStrand, a rootkit that hides from researchers in the UEFI firmware.
A half-a-billion-dollar crypto heist
We review a major cryptocurrency theft using spyware inside a PDF.
New ransomware: a cross-platform future
The new Luna and Black Basta ransomware strains are capable of attacking Windows, Linux and VMware ESXi.