side-channelGPU.zip: deft theft of secrets from video chips
We look at a new sophisticated attack on AMD and Intel integrated graphics cards.
iOSDangerous illusions of security: is iOS really more secure than Android?
How to choose a secure mobile platform for work.
Password storage as the cornerstone of security
How online services should store user passwords, and how to minimize the damage in the event of a leak or hack.
vulnerabilitiesSecurity of Electron-based desktop applications
A few words on why desktop applications based on the Electron framework should be approached with caution.
Dangers of your brand’s doppelgangers
How to protect a company’s reputation from illegal use of its name on the internet.
signs of phishingSelf-evaluation questionnaire phishing scam
Attackers invite employees to complete fake self-evaluations to steal corporate credentials.
How to lessen the workload on the CISO and their team
What tasks needlessly overload infosec experts, and how to break the curse of overtime.
Wrong system time and insecure Secure Time Seeding
Why the Windows system time can suddenly change, and how to stop it from happening.
How to stop your site from being a partner in crime
Why criminals want to hack your website, how they might use it in new attacks, and how to stop them.
OSINT: what’s the danger, and how to stay safe
We explain what OSINT is, why it has to be front-of-mind at all times, and how to guard against hackers using it.
What to patch first: prioritizing updates
Some thoughts on what PC software patches should be prioritized and why.
The security aspect of employee offboarding
Offboarded employees often retain access to work information. What are the risks, and how to deal with them?
Zenbleed: new hardware vulnerability in AMD CPUs
Explaining an issue in popular PC and server CPUs in simple terms.
Information security gadgets
Gadgets to help protect employees’ devices against hackers and other threats.
How to fix TunnelCrack VPN leaks
What caused a mass vulnerability in VPN clients, and how to keep them working.
CVE-2017-11882: five years of exploitation
It means that some companies still have not installed MS Office patches that were published 5 years ago.
social engineeringThree high-profile social engineering hacks
How social engineering helped hack the CIA chief, hijack Elon Musk and Joe Biden’s Twitter accounts, and steal half-a-billion dollars.
legacyHow to protect legacy IT systems
Legacy systems continue to toil away in embedded solutions, medical equipment, and precision instruments. How can the respective security risks be mitigated?
Lookalike domains and how to spot them
Fake websites and email addresses are often used in phishing and targeted attacks. How do fake domains get created, and how to spot one?
IT trends and cybersecurity in 2023
What security aspects should be top-of-mind when implementing important changes in corporate IT infrastructure?
cyber-resiliencyNevermore: stop your company getting hacked again
After a hack, a company needs to improve security quickly and effectively. We outline the first steps to cyber-resilience.