accounts

How attackers gain access to corporate services without stealing passwords or cookies: we’re analyzing the Shadow Token via Remote Debug technique used in ToddyCat APT attacks.

Hackers have developed a PowerShell script that hijacks Telegram sessions and grants an attacker access to accounts without a password or verification codes. Here’s a breakdown of how it works and how to stay safe.

Cybercriminals have started leveraging Google’s legitimate AppSheet service to roll out phishing campaigns that target users’ personal data and credentials. Here’s a look at how this is even possible, and what you need to do to secure your accounts.

We regularly create new SIEM rules, but behind the scenes lies a more fundamental process —the evolution of the correlation rules themselves.

Detecting attacks related to compromised accounts with AI and other updates in Kaspersky SIEM.

We follow the trail of a phishing attack to break down, step-by-step, what happens to the data stolen from users.

Everything you need to know about the latest Telegram scams and phishing, and how to stay safe.

We dive into which corporate systems support passkeys, where compatibility falls short, and why we probably won’t be saying goodbye to passwords anytime soon.

Malicious actors are busy setting up fake Netflix websites, trying to trick visitors into paying for supposedly legitimate subscriptions, and promising in-game currency and skins for popular games. How else are they scamming Gen Zers, and what can we do to fight back?

Scammers are exploiting Google services to send fake law enforcement inquiry notifications, making them look like they originate from accounts.google.com.

How organizations implement zero-trust principles, and what CISOs advise for project success.

A vulnerability in Google OAuth allows attackers to access accounts of defunct organizations through abandoned domains.

Banshee stealer, a macOS stealer that emerged last year, is now roaming free on the Web, infecting Mac users and gaining new capabilities. How to protect yourself?

What to do if you receive a text with a two-factor authentication code from a service you’ve never registered for.

Cybercriminals are using AitM techniques to compromise accounts of company executives. How do they do this, and how to protect against it?

Cybercriminals are using genuine Facebook infrastructure to send phishing emails threatening to block accounts.

A credential stuffing attack is one of the most effective ways to take control of accounts. Here’s how it works and what you should do to protect your company.

Google OAuth allows to create phantom Google accounts — uncontrollable by corporate Google Workspace administrators.

Single sign-on is supposed to enhance corporate security, but it’s essential that cloud vendors have the information security team’s back.

What’s the principle of least privilege, why’s it needed, and how does it help secure corporate information assets?

Let’s start the New Year with a digital cleanup: canceling unnecessary subscriptions, clearing out unnecessary data, deleting unused accounts, changing weak passwords, and so on.