Business

After a hack, a company needs to improve security quickly and effectively. We outline the first steps to cyber-resilience.

Can Linux-based embedded systems be considered secure by default or do they require additional protection?

How did scammers pull off a MitM attack and 2FA bypass in… 1915?!

New attack method that bitflips memory cells.

July Microsoft Patch Tuesday: a collection of exploited vulnerabilities.

What the MOVEit Transfer hack can teach non-users.

Low-code apps lower IT costs, but boost information security risks. How to mitigate them?

Social engineering in the spotlight: from classic tricks to new trends.

Researchers have come up with a way to exfiltrate confidential data by observing LED activity.

What can get stolen from RAM, and what’s hiberfil.sys got to do with it?

APT operators are showing increasing interest in mobile devices. Our experts have studied one of their tools.

Cybercriminals prey on corporate credentials by sending fake HR emails.

A few tips on how to establish cybersecurity communications with employees.

Proper account security not only reduces the number of cyberattacks on companies — it brings financial benefits too. What needs to be done to reap them?

How scammers can hack your YouTube channel without knowing a password and second factor.

Targeted attack on our management with the Triangulation Trojan.

Now anyone can sign device firmware with MSI private keys. This represents a long-term persistent risk to be considered by all users.

The effectiveness of a sandbox largely depends on its ability to realistically imitate a working environment.

Сloud technologies differ in terms of both costs and risks. What cloud type should you choose, and how should you begin your migration?

Website names in the ZIP and MOV domains are indistinguishable from file names. How will this affect IT systems, and what will threat actors do?

A brief, plain-language explanation of an advanced method of data theft using features of modern CPUs.