strategyThe principle of least privilege: what is it and why is it needed?
What’s the principle of least privilege, why’s it needed, and how does it help secure corporate information assets?
Latest
tipsKick off the year with a digital cleanup
Let’s start the New Year with a digital cleanup: canceling unnecessary subscriptions, clearing out unnecessary data, deleting unused accounts, changing weak passwords, and so on.
Cybersecurity resolutions: how to make 2024 safer
Cybersecurity trends to consider and new threats to protect against in 2024.
vulnerabilitiesLogoFAIL attack: using image files to attack computers
A serious vulnerability in the UEFI firmware, relevant to a large number of modern computers, laptops, and even servers.
scamHacked hotel accounts on Booking.com
Attackers are hijacking hotel accounts on Booking.com, and stealing their clients’ banking data through its internal messaging system.
giftsDreaming of a digital Christmas
Can’t get to the stores in time to buy gifts for friends and family? Go digital!
How reliable is biometric security on laptops?
Researchers used a hardware hack to bypass Windows Hello biometric authentication on three different devices. Can you trust this login method?
It’s a gas: how online scammers dupe “investors”
How unfortunate investors in commodities, cryptocurrency, and other assets get scammed in apps found in official stores.
extensionsDangerous browser extensions
How malicious extensions steal cryptocurrency, hijack accounts in games and social networks, manipulate search results, and display intrusive ads.
Gamers
Mario Forever, malware too: a free game with a miner and Trojans inside
Malicious versions of the free-to-download game Super Mario 3: Mario Forever plant a miner and a stealer on gamers’ machines.
The Phantom Menace: how gamers of different ages are being attacked
Why scammers are more likely to target kids than hardcore gamers, how they do it, and what they want to steal
The true cost of gaming
Our research reveals gamers’ attitudes toward computer performance — and the ethics of winning and losing.
Where did that game cheats video on your YouTube channel come from?
The RedLine Trojan stealer spreads under the guise of cheats for popular games and posts videos on victims’ YouTube channels with a link to itself in the description.
$2 million inventory hacked in CS:GO
An unnamed hacker allegedly stole two million dollars’ worth of items from a CS:GO player’s backpack and has already started auctioning off the items.
Attack on Cities: Skylines — malicious code in a virtual city
We explain why game mods can be dangerous, using as an example malicious mods for Cities: Skylines.
Dangerous vulnerability in Dark Souls III videogame
Dangerous vulnerability was discovered in Dark Souls III videogame that can be used to gain control of a gamer’s computer.
Business
Operation Triangulation: talk on 37С3
Detailed analysis of Operation Triangulation, the most sophisticated attack our experts have ever seen, presented at 37C3 conference.
Money for Nothing
During the pre-holiday period, attackers are sending invoices to companies for the delivery of non-existent documents.
How cybercriminals disguise URLs
Methods used by attackers to redirect victims to malicious and phishing sites from seemingly safe URLs.
websitesWordPress security issues
Typical security issues of WordPress, and how they can be addressed to protect your website or online store from cybercriminals.
Outdated Cisco equipment under threat from firmware
Espionage operations to hack corporate routers are now commonplace — and all organizations need to be aware of this.
I firmly believe that the concept of cybersecurity will soon become obsolete, and cyberimmunity will take its place.
Eugene Kaspersky
Popular
Fact or fiction: Hyphens break iPhones
Does saying “hyphen” five times to your iPhone really crash it — or is that just another myth?
10 Cool Big Data Projects
There are many cool and funny projects in the world that deal with big data and we’ve gathered the Top 10 list of the most interesting ones. See for yourself!
Change Your Password Day Strong Password Day
Changing passwords regularly is outdated. Use strong and unique passwords that are easy to remember instead. Here’s how to make them.
Who to trust: Different types of SSL certificates
We explain what digital certificates are, what types exist, and what problems are associated with them.
Rooting your Android: Advantages, disadvantages, and snags
Many users of devices running Android are tempted to root them. Here we explain the good and bad sides of having superuser rights.
VPNs: What you need to know
There’s been a lot of talk lately about privacy protection and VPNs. But what exactly is a VPN? We explain in simple words.
Why you should never use someone else’s Apple ID on your iPhone
How cybercriminals blocked Marcie’s iPhone, and how to avoid a similar fate.
Tips
Restricted Settings in Android 13 and 14
Android 13 and 14 have a feature called Restricted Settings. We explain its purpose, and how malicious applications bypass it.
A pain-free guide to installing Android updates
A look at the pros and cons of updating Android — and ways to do it safely.
Four ways to lock your screen on Windows and macOS
Four handy ways to lock your screen on Windows and macOS.
The top-10 mistakes made when configuring enterprise IT systems
Mistakes commonly found in almost every large organization. What should the inforsec team look out for, and what protective measures should they take?