Still Stealing

Two years ago in October 2015 we published a blogpost about a popular malware that was being distributed from the Google Play Store. Over...

Looking Forward to 2018

Let’s Encrypt had a great year in 2017. We more than doubled the number of active (unexpired) certificates we service to 46 million, we...

Cybercriminals vs financial institutions in 2018: what to expect

ul li {margin-bottom:2.4rem;} Introduction – key events in 2017 2017 was a year of great changes in the world of cyberthreats facing financial organizations. Firstly, in 2017...

Kaspersky Security Bulletin: Review of the Year 2017

ul li {margin-bottom:2.4rem;} Introduction The end of the year is a good time to take stock of the main cyberthreat incidents that took place over the...

Kaspersky Security Bulletin: Story of the year 2017

 Download the Kaspersky Security Bulletin: Story of the year 2017 Introduction: what we learned in 2017 In 2017, the ransomware threat suddenly and spectacularly evolved. Three...

IoT lottery: finding a perfectly secure connected device

Black Friday and Cyber Monday are great for shopping. Vendors flood the market with all kinds of goods, including lots of exciting connected devices...

A CISO Landmine: No Security Awareness Training

CISOs who fail to prioritize security awareness training are putting their business and assets at serious risk. - Read more

ACME Support in Apache HTTP Server Project

We’re excited that support for getting and managing TLS certificates via the ACME protocol is coming to the Apache HTTP Server Project (httpd). ACME...

Five Reasons CISOs Should Keep an Open Mind About Cryptocurrencies

Far from a dying breed, cryptocurrencies are not only evolving but being accepted in countless new markets. CISOs need to know the ins and...

Where Do Vulnerabilities Come From?

Vulnerabilities are an emergent property of modern software’s complexity, requested features, and the way data inputs are handled. - Read more

Latest article

Hackers Publish Malicious Python Package Mimicking Legitimate Parsimonious Parser

A deceptive Python package quietly made its way into the PyPI repository, putting thousands of developers at risk before it was caught and removed....

Microsoft identifies seven new ways AI agents can be hacked

Microsoft has identified seven new failure modes in agentic AI systems, in addition to those it identified last year in...

Building secure B2C applications with fine-grained access control using Amazon Cognito and Amazon Verified...

Modern web applications require robust security controls to protect user data and application resources. Authentication and authorization are two fundamental pillars of application security...