vulnerabilitiesThe dangers of 15-year-old vulnerabilities
The developers of a run-of-the-mill Python module recently found out why old unpatched vulnerabilities can be dangerous.
Latest
cryptocurrenciesCrypto, really. Part II: non-fungible tokens
In this second part of the series, we’re going to dive deep into Ethereum and its novelties: smart-contracts, DAOs and NFTs.
Might your ex-employees still have access to corporate data?
Are you sure your former colleagues don’t have access to corporate data or systems?
e-mail threatsTrojan-stealer discovered in spam mailouts to businesses
Cybercriminals are sending to companies high-quality imitations of business letters with a spy trojan in the attachment.
androidHarly: another Trojan subscriber on Google Play
We explain how the Harly Trojan subscriber targets Android users.
transparencyKaspersky Transparency Initiative update, September 2022
Introducing our new Transparency Center format and the opening of two more facilities in Europe.
EDRIntroducing: Kaspersky EDR Optimum
Kaspersky Endpoint Detection and Response Optimum – superior enterprise-cybersecurity, with no fluff.
Where did that game cheats video on your YouTube channel come from?
The RedLine Trojan stealer spreads under the guise of cheats for popular games and posts videos on victims’ YouTube channels with a link to itself in the description.
Patches for 64 vulnerabilities in Microsoft products released
It’s time to update! Microsoft patches 64 vulnerabilities in a variety of products and components — from Windows and Office to Defender and Azure.
Weaponizing game code to attack a company
An unusual case of an attack executed by weaponizing legit video game code.
Gamers
$2 million inventory hacked in CS:GO
An unnamed hacker allegedly stole two million dollars’ worth of items from a CS:GO player’s backpack and has already started auctioning off the items.
Attack on Cities: Skylines — malicious code in a virtual city
We explain why game mods can be dangerous, using as an example malicious mods for Cities: Skylines.
Dangerous vulnerability in Dark Souls III videogame
Dangerous vulnerability was discovered in Dark Souls III videogame that can be used to gain control of a gamer’s computer.
Malicious activity in Discord chats
In the wake of recent research, we talk about several scenarios that underlie malicious activity on Discord.
BloodyStealer is hunting for gamers
Gamer accounts are in demand on the underground market. Proof positive is BloodyStealer, which steals account data from popular gaming stores.
The dangers of pirated games
Adware, Trojans, and other malware aren’t the only reasons not to download illegal games.
A trick auction to steal gold in World of Warcraft
A malicious script in the WeakAuras add-on can eradicate several days of farming in WoW Classic in a second.
Malware in Minecraft mods: story continues
We found more Minecraft modpacks and a file recovery utility available in Google Play concealing malicious adware.
Business
A Zoom vulnerability, and the war between the hackers and the developers
Takeaway from DEF CON 30: vulnerability in Zoom for macOS.
Hot off the press: a new study into “the nature of cyber incidents”
Highlights from “The nature of cyber incidents” report by the Kaspersky GERT team.
Three approaches to structuring and alert processing in a SOC
How to distribute SOC tasks to tackle both the cybersecurity skills shortage and burnout.
How to reduce the load on SIEM and make good use of threat-intelligence feeds
How a threat-intelligence platform helps SOC analysts.
The chronicle of WannaCry
Security evolution: The large-scale, but short-lived ransomware epidemic of 2017.
independent testsIndependent testing of EDR solutions
SE Labs awarded Kaspersky EDR its highest rating in independent tests based on real world attacks.
I firmly believe that the concept of cybersecurity will soon become obsolete, and cyberimmunity will take its place.
Eugene Kaspersky
Popular
Critical vulnerability in Apache Log4j library
Researchers discovered a critical vulnerability in Apache Log4j library, which scores perfect 10 out of 10 in CVSS. Here’s how to protect against it.
How to watch porn safely and discreetly
Hiding your guilty pleasures from prying eyes is possible, but you need to do it properly.
Five things to update ASAP
Prioritize updating the apps that keep your devices and personal data safe from cyberattacks.
Update iOS, there is a dangerous vulnerability in WebKit
Dangerous vulnerability in WebKit (CVE-2022-22620) is believed to be actively exploited by hackers. Update your iOS devices as soon as possible!
What to do if you lose your phone with an authenticator app
Can’t sign in to an account because your authenticator app is on a lost phone? Here’s what to do.
Infected Android app store
The APKPure app store has been infected by a malicious module that downloads Trojans to Android devices.
Follina: office documents as an entrance
New vulnerability CVE-2022-30190, aka Follina, allows exploitation of Windows Support Diagnostic Tool via MS Office files.
Who’s in your Facebook and Instagram accounts?
What to do if you receive a notification about a suspicious login to your Facebook or Instagram account.
Tips
“To pop, or not to pop — that is the question”
How things are privacy-wise on the social network Poparazzi.
The hidden threats of router malware
Malware can infect your router, slow down the internet connection and steal data. We explain how to protect your Wi-Fi.
6 antiphishing tips
How to spot dangerous links sent in messages and other tricks scammers use to steal your data.
Kaspersky Security Cloud versus intrusive ads
How to remove browser ads in two clicks using our Anti-Banner feature.