KeyTrap: how to break a DNS server with a single packet
The KeyTrap DoS attack, which can disable DNS servers with a single malicious packet exploiting a vulnerability in DNSSEC.
Five cyberattacks on marketing departments
Why cybercriminals want to attack PR and marketing staff and, crucially, how to protect your company from financial and reputational harm.
Navigating the risks of online dating
Online dating is great for those looking for love – but beware the risks!
What to do when you receive unsolicited messages containing login codes
One-time codes and two-factor authentication securely protect you from account theft. If you receive such a code or a request to enter it when you aren’t logging in, it may be an attempt to hack into your account.
What crypto drainers are, and how to fend them off
Today we’re talking about crypto drainers — one of the most serious threats to crypto owners — and offer tips on fending it off.
How to steal crypto via DNS
Getting what you pay for: cracked macOS apps fetch malicious code from DNS records to steal crypto
Critical vulnerability exploit in GoAnywhere MFT
Time to update Fortra GoAnywhere MFT: an exploit has been developed for a critical vulnerability that allows attackers to bypass authentication and create admin accounts.
Hacking a train: a 37С3 talk
Ethical hackers told 37C3 how they found a few eye-openers while breaking DRM to fix trains.
Hacked hotel accounts on Booking.com
Attackers are hijacking hotel accounts on Booking.com, and stealing their clients’ banking data through its internal messaging system.
Dangerous browser extensions
How malicious extensions steal cryptocurrency, hijack accounts in games and social networks, manipulate search results, and display intrusive ads.
Hacking Android, macOS, iOS, and Linux through a Bluetooth vulnerability
A researcher has discovered a vulnerability in the Bluetooth protocol implementations for Android, macOS, iOS, and Linux, allowing devices to be hacked remotely.
Are Macs safe? Threats to macOS users
Are Macs as safe as their owners think they are? A few recent stories about malware targeting macOS users.
Restricted Settings in Android 13 and 14
Android 13 and 14 have a feature called Restricted Settings. We explain its purpose, and how malicious applications bypass it.
WordPress security issues
Typical security issues of WordPress, and how they can be addressed to protect your website or online store from cybercriminals.
Outdated Cisco equipment under threat from firmware
Espionage operations to hack corporate routers are now commonplace — and all organizations need to be aware of this.
Malware that steals Facebook accounts
How attackers use infected archives and malicious browser extensions to steal Facebook Business accounts.
WhatsApp mods with spyware
Our researchers discovered spyware-infected WhatsApp modifications distributed through Telegram channels and websites with WhatsApp mods.
How “zero-clicks” work, and how to defend against them
We discuss what zero-click attacks are, why they’re dangerous, and how to protect your company from them.
Google Play malware clocks up more than 600 million downloads in 2023
A look at some recent cases of Android malware infiltrating the most official of official app stores — Google Play.
The hidden risks of cheap Android devices
Buying a cheap Android device can be an expensive mistake if it fails to perform its primary function or happens to be infected with viruses right out of the box.
Ransomware
threats
2FA
cryptocurrencies
tokens
extensions