All posts

The patch that fixes CVE-2024-49040 in Microsoft Exchange is temporarily unavailable. We’ve implemented heuristics that detect attempts to exploit it.

Black Friday is a great opportunity for scammers to line their pockets — but not with your money if you follow our advice.

A step-by-step guide for those who may be tracked through stalker apps or wireless beacons.

Malicious packages for AI integration containing infostealer malware were found in the Python Package Index repository.

A vulnerability that permits bypassing authentication has been found in a popular security hardening plugin for WordPress.

We’ve updated the design of our password manager’s mobile version. Storing and managing passwords is now even more convenient.

Five dead simple tips to greatly improve your defenses against cybercriminals.

Exploitation of vulnerability CVE-2024-43451 allows an attacker to steal an NTLMv2 hash with minimal interaction from the victim.

Analyzing incidents and drawing lessons from them should be an integral part of the incident response process. This can help improve the overall security level of a company.

Web pages often disappear, move, or change content. How to keep them the way you want, or easily locate a web archive?

Cybercriminals have devised a new ruse: luring gamers to a modish crypto tank-game to gain full access to their computers.

The Tor Browser is a bastion of online anonymity, yet even this tool can’t ensure complete privacy — and here’s why.

Discontinuing mandatory password rotations, banning outdated MFA methods, and other updates in the NIST SP 800-63 standards for digital account authentication and management.

A detailed guide to configuring privacy settings in the ASICS Runkeeper running app.

Rules for detecting atypical behavior in container infrastructure at the data collection stage, and other updates to our SIEM system.

Hackers continue to target developers: during a fake job interview, they ask “potential employees” to run a script from GitHub that hides a backdoor.

Many of us have dozens of online subscriptions and recurring payments. How to take control, save money, and stay on top of expenses?

A vulnerability in Kia’s web portal made it possible to hack cars and track their owners. All you needed was the car’s VIN number or just its license plate number.

A detailed guide on setting up privacy in the adidas Running app.

Many popular online services these days require a selfie with your ID card or passport to register. We explore whether taking such photos is safe (spoiler: it’s not) and how to minimize the risks.

We share our experience on the optimal use of AI models in the SOC of our Kaspersky MDR service.