Critical PHP vulnerabilities put millions of websites worldwide at risk, but there are still no reports of mass breaches. We discuss the attacks on PAN-OS, a flaw in Brotli, and the steps businesses need to take beyond patching.
We’ve discovered a vulnerability that could affect millions of Intelbras IP cameras. If you’ve got one — here’s how to prevent attackers from disabling it.
We break down how to use e-books safely, and which rules to follow when searching for books online, so you don’t fall victim to scammers
How to apply Secure by Design ideas when rolling out AI agents.
Christopher Nolan’s The Odyssey has wrapped up its triumphant run in theaters, but it won’t be available digitally until November 17. That makes it the perfect bait for malware like MovieReaper, which spreads through torrents. Let’s see what cybersecurity lessons we can learn from the story of the cunning king of Ithaca — and how to avoid falling victim to a Trojan horse yourself.
Spammers automatically register hundreds of near-identical domains to fool security solutions. We can block those domains automatically, too.
On October 21, two PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed, affecting nearly 70% of websites worldwide. But if you think this’s only an admins’ headache, read on: we explain why your photos, music, archives, games, NAS and smart-home systems may be at risk, and how to protect your data and devices.
PHP developers have released patches for two critical vulnerabilities that could allow an attacker to remotely execute arbitrary code on the server without authentication.
AI has learned how to quickly gather scattered details about a person, link their accounts together, and turn a digital footprint into a detailed dossier. We look at how artificial intelligence is changing doxing — and what you can do to make deanonymization harder.
Scammers are promising downloads of leaked copies of GTA VI, early access to the game, or a chance to become a beta tester. Here’s how you can spot these schemes and avoid falling into the trap.
Steam forums are the latest battleground for ClickFix attacks. We break down how attackers disguise themselves as helpful commenters to trick gamers into installing a crypto miner on their PCs.
Any game based on the popular Unity engine made in the last eight years can allow attackers to get into your computer or smartphone. Here’s what to do about it.
Official gaming websites and platforms may seem safe, but even there gamers occasionally encounter malware. We break down infection cases involving Endgame Gear, Steam, and Minecraft.
If you still think that Steam, Google Play, and the App Store are malware-free, then read this fascinating story about PirateFi and other hacker creations disguised as games.
Autumn is here, kids are going back to school and also meeting up with friends in their favorite online games. With that in mind, we have just carried out one of our biggest ever studies of the threats young gamers are most likely to encounter.
Hackers have long been engaging with the gaming world: from cracking games and creating cheats, to, more recently, attacking esports players live during an Apex Legends tournament. Regarding the latter, we break down what happened and how it could have been avoided.
People, processes, and technology: if a company has gaps in its defenses, they most likely come from one of these three areas. We walk through a real-world breach, and explain how to stand up to attackers without hiring a huge team or needing to vastly increase the security budget.
Microsoft’s October Patch Tuesday bulletin is breaking records again — it addresses 1,414 vulnerabilities. Here’s what you need to know.
We look at an unusual eavesdropping method that leverages the fundamental physical properties of electronic components.
In April, our experts investigated the PAYLOAD campaign — where the leverage wasn’t data encryption but a malicious AD group policy object.
We examine the impact of AI dependency on an organization’s cybersecurity.
I firmly believe that the concept of cybersecurity will soon become obsolete, and cyberimmunity will take its place.
Eugene Kaspersky
vulnerabilities
cameras
AI
spam
doxing
ransomware