Solutions for:

  • Home Products
  • Small Business 5-50 employees
  • Medium Business 51-999 employees
  • Enterprise 1000+ employees
Kaspersky official blog
  • My Kaspersky
    • My Devices
    • My Products / Subscriptions
    • My Orders
  • Products
      • PREMIUM PROTECTION
        Kaspersky Premium

        Complete protection for your devices, online privacy & identity

      • ADVANCED PROTECTION
        Kaspersky Plus

        Combines security, performance & privacy features in one app

      • STANDARD PROTECTION
        Kaspersky Standard

        Enhanced protection with device performance booster

      • Privacy & Kids
      • Kaspersky Safe Kids
      • Kaspersky VPN
      • Kaspersky Password Manager
      • View more
  • Renew
  • Downloads
  • Support
  • Resource Center
  • Blog
    • Business
    • News
    • Privacy
    • Products
    • Special Projects
    • Technology
    • Threats
    • Tips
    • RSS
    • Newsletter subscription
  • Secure Futures
  • Solutions for:
  • Home Users
    • Products
      • Kaspersky Premium
      • Kaspersky Plus
      • Kaspersky Standard
      • Privacy & Kids
      • Kaspersky Safe Kids
      • Kaspersky VPN
      • Kaspersky Password Manager
      • View More
    • Renew
    • Downloads
    • Support
    • Resource Center
    • My Kaspersky
      • My Devices
      • My Products / Subscriptions
      • My Orders
  • Business
    • Small Business (1-50 employees)
    • Medium Business (51-999 employees)
    • Enterprise (1000+ employees)
  • Search blog posts
  • Blog
    • Business
    • News
    • Privacy
    • Products
    • Special Projects
    • Technology
    • Threats
    • Tips
  • Partners
    • Partners
    • Find a Partner
    • Affiliate
    • Technology
    • Whitelist Program
  • My Account
    • My Kaspersky
      • My Devices
      • My Products / Subscriptions
      • My Orders
    • CompanyAccount
  • About Us
    • About Us
    • Company
    • Team
    • How We Work
    • Press Releases
    • Press Center
    • Careers
    • Motorsport
  • Support
  • Contact Us
  • Search

vulnerabilities

221 articles

CVE-2026-3102: macOS ExifTool image-processing vulnerability
  • macOS

The ExifTool vulnerability: how an image can infect macOS systems

An in-depth analysis of CVE-2026-3102, a vulnerability posing a potential threat to anyone processing images on a Mac.

  • GReAT

  • March 2, 2026

Rules for detecting exploitation of vulnerabilities in FortiCloud SSO
  • SIEM

How to detect FortiCloud SSO authentication bypass

Kaspersky SIEM got a set of correlation rules for detecting attempts to exploit vulnerabilities for authentication bypass in Fortinet products.

  • Igor Talankin

  • February 5, 2026

What is the Epochalypse, also known as the "year 2038 problem", and how can businesses fix it?
  • strategy

Epochalypse Now — or how to deal with Y2K38

What is the year 2038 problem — also known as “Unix Y2K” — and how to prepare corporate IT systems for it?

  • Stan Kaminsky

  • January 19, 2026

CVE-2025-55182 vulnerability in React and Next.js
  • vulnerabilities

React4Shell vulnerability: protecting web servers from CVE-2025-55182

Millions of websites based on React and Next.js contain an easy-to-exploit vulnerability that can lead to complete server takeover. How to check if your server is vulnerable, and protect corporate web assets?

  • Kaspersky Team

  • December 4, 2025

How cheaters use rigged DeckMate 2 shuffling machines in poker games
  • vulnerabilities

Lock, stock, and two smoking barrels: the DeckMate 2 shuffler hack

How researchers hacked DeckMate 2 card shufflers, and how the mafia exploited those very vulnerabilities to cheat at poker.

  • Alanna Titterington

  • December 2, 2025

How your dashcam can be hacked, and how to protect yourself from the attack
  • Cars

Botnets on wheels: the mass hacking of dashcams

Researchers have discovered how to connect to someone else’s dashcam in a matter of seconds, and weaponize it for future attacks.

  • Stan Kaminsky

  • November 27, 2025

Microsoft Exchange on-premises hardening recommendations
  • email

Hardening Exchange servers

Here’s how to mitigate the risks of targeted attacks on your organization’s mail servers.

  • Stan Kaminsky

  • November 27, 2025

CVE-2024-12649: vulnerability in the Canon TTF interpreter
  • vulnerabilities

Printers attacked by… fonts

We examine how popular Canon printers could become a foothold for attackers within an organization’s network.

  • Stan Kaminsky

  • November 12, 2025

What is the Pixnapping vulnerability, and how to protect your Android smartphone?
  • Android

Pixnapping vulnerability: unblockable screenshots of your Android phone

Pixnapping is an Android vulnerability discovered by researchers that allows apps to steal passwords, one-time codes, and other confidential information from the screen without any special permissions from the operating system. How does it work, and what can you do to protect yourself?

  • Stan Kaminsky

  • November 11, 2025

Half of the world's satellite traffic is unencrypted
  • satellites

Don’t look up, or How to intercept satellite data

Researchers have discovered that 50% of data transmitted via satellites is unencrypted. This includes your mobile calls and texts, along with banking, military, government, and other sensitive information. How did this happen, and what can we do about it?

  • Tom Fosters

  • November 6, 2025

How to protect your car from hacking
  • Cars

Highway to… hacked: cyberthreats to connected cars

Can hackers really hijack your car in 2025?

  • Tom Fosters

  • October 9, 2025

The CVE-2025-59489 vulnerability in Unity, and how to fix it in games
  • gamers

Vulnerability in Unity game engine

Any game based on the popular Unity engine made in the last eight years can allow attackers to get into your computer or smartphone. Here’s what to do about it.

  • Editorial Team

  • October 7, 2025

Phoenix: Rowhammer that works against DDR5
  • hardware

Phoenix: a Rowhammer attack vs. DDR5 memory

Phoenix, a new variant of the Rowhammer attack, makes it possible to attack DDR5 memory modules.

  • Enoch Root

  • October 3, 2025

WordPress: vulnerabilities in plugins and themes
  • wordpress

Vulnerabilities in WordPress themes and plugins: how to protect your site

WordPress sites are increasingly becoming targets of attacks exploiting vulnerabilities in plugins and themes. In this post, we examine recent cases and share protection tips.

  • Alanna Titterington

  • August 29, 2025

Protecting your car against the PerfektBlue vulnerability in Bluetooth
  • Cars

Car hacking via Bluetooth

Be careful what you connect to your in-car infotainment system.

  • Stan Kaminsky

  • August 19, 2025

Common mistakes in using CVSS, and a mature approach to vulnerability prioritization
  • vulnerabilities

From CVSS to RBVM: vulnerability prioritization done right

Causes of discrepancies in Common Vulnerability Scoring System ratings, common mistakes when using CVSS for vulnerability prioritization, and how to do this right.

  • Stan Kaminsky

  • July 22, 2025

Update Microsoft SharePoint ASAP
  • vulnerabilities

Attack on Microsoft SharePoint servers

Two critical zero-day vulnerabilities in SharePoint are actively exploited by attackers in real-world attacks.

  • Editorial Team

  • July 21, 2025

Shrinking your digital footprint: a checklist by Kaspersky
  • privacy

How to shrink your digital footprint

Adjust your daily routines to leave as little data about yourself online as possible.

  • Tom Fosters

  • July 8, 2025

Multiple vulnerabilities in Sitecore CMS
  • vulnerabilities

“B”-grade security: three vulnerabilities in Sitecore CMS

Researchers have found several vulnerabilities in the Sitecore CMS platform that enable unauthenticated remote code execution (RCE).

  • Alanna Titterington

  • June 25, 2025

CVE-2025-6019: time to upgrade Linux
  • vulnerabilities

CVE-2025-6019: time to update Linux

Researchers have found a vulnerability that allows attackers to get root privileges on most Linux distributions.

  • Editorial Team

  • June 19, 2025

CVE-2025-33053: RCE in WebDAV
  • vulnerabilities

CVE-2025-33053: a good reason to update Windows

Internet Explorer sends its regards: a vulnerability in the HTTP protocol extension allows attackers to run malicious code — even on a modern operating system.

  • Editorial Team

  • June 11, 2025

  • Previous
  • 1
  • 2
  • 3
  • 4
  • …
  • 11
  • Next

Home Products

  • Kaspersky Standard
  • Kaspersky Plus
  • Kaspersky Premium
  • All Products

Small Business Products

1-50 EMPLOYEES
  • Kaspersky Small Office Security
  • Kaspersky Endpoint Security Cloud
  • All Products

Medium Business Products

51-999 EMPLOYEES
  • Kaspersky Endpoint Security Cloud
  • Kaspersky Endpoint Security for Business Select
  • Kaspersky Endpoint Security for Business Advanced
  • All Products

Enterprise Solutions

1000 EMPLOYEES
  • Cybersecurity Services
  • Threat Management and Defense
  • Endpoint Security
  • Hybrid Cloud Security
  • Cybersecurity Training
  • Threat Intelligence
  • All Solutions

© 2026 AO Kaspersky Lab. All Rights Reserved.

  • Privacy Policy
  • Anti-Corruption Policy
  • License Agreement B2C
  • License Agreement B2B
  • Contact Us
  • About Us
  • Partners
  • Blog
  • Resource Center
  • Press Releases
  • Securelist

  • Eugene Personal Blog

  • Encyclopedia

Middle East

  • Americas
  • Brasil
  • México
  • Africa
  • South Africa
  • Middle East
  • Middle East
  • الشرق الأوسط
  • Western Europe
  • Deutschland & Schweiz
  • España
  • France & Suisse
  • Italia & Svizzera
  • Nederland & België
  • United Kingdom
  • Eastern Europe
  • Polska
  • Türkiye
  • Россия (Russia)
  • Kazakhstan
  • Asia & Pacific
  • Australia
  • India
  • 中国 (China)
  • 日本 (Japan)
  • For all other countries
  • Global