Log4Shell a year on
A year after discovery, the Log4Shell vulnerability is still making itself felt.
The Long Road to Safe RAM Handling
We investigate the connection between software security and leaks when handling RAM.
The antidote to operational technology conservatism
The specifics of protecting and updating the OT infrastructure.
Robot security
Every year, the number of tasks we entrust to machines rises steadily. How safe is this?
Mining still a serious threat to business
Miners still pose a threat to businesses — especially ones that use cloud infrastructure.
The consequences of a years-old SQLite vulnerability
An interesting bug in one of the most popular embedded DBMS.
Symptoms indicating one of your devices is being attacked
What signs may indicate that a device is infected or being attacked by a hacker.
What are cybercrooks looking for?
Which corporate assets should be first in line for protection against cyberattacks?
The life and death of Adobe Flash
How a vector graphics editor helped create one of the internet’s most important technologies, and why it led to huge security risks.
Vulnerability in Zimbra exploiting ITW
Servers with the Zimbra Collaboration suit installed are being attacked via an archive unpacking tool.
Retro technology and information security
The top-4 technologies in use today that long belong in a museum.
Malware propagation methods
Although malware most often infiltrates corporate infrastructure through e-mail, it’s not the only infection method.
Vulnerable updates in Cisco enterprise software
How even high-end solutions for business can have “childish” bugs in their update delivery systems.
The dangers of 15-year-old vulnerabilities
The developers of a run-of-the-mill Python module recently found out why old unpatched vulnerabilities can be dangerous.
Might your ex-employees still have access to corporate data?
Are you sure your former colleagues don’t have access to corporate data or systems?
Trojan-stealer discovered in spam mailouts to businesses
Cybercriminals are sending to companies high-quality imitations of business letters with a spy trojan in the attachment.
e-mail
ransomware
ICS
IoT
phishing