containerizationContainer security from A to Z
We take an in-depth look at securing and configuring containerization systems.
Business
666 articles
passwordsA how-not-to guide to password policies
Examples of password policies that will have users tearing their hair out — and why you shouldn’t employ them.
Kaspersky calls for ethical use of AI in cybersecurity
We propose six principles of ethical use of AI in the cybersecurity industry — to be presented at the global Internet Governance Forum.
GPU.zip: deft theft of secrets from video chips
We look at a new sophisticated attack on AMD and Intel integrated graphics cards.
iOSDangerous illusions of security: is iOS really more secure than Android?
How to choose a secure mobile platform for work.
Password storage as the cornerstone of security
How online services should store user passwords, and how to minimize the damage in the event of a leak or hack.
Security of Electron-based desktop applications
A few words on why desktop applications based on the Electron framework should be approached with caution.
Dangers of your brand’s doppelgangers
How to protect a company’s reputation from illegal use of its name on the internet.
signs of phishingSelf-evaluation questionnaire phishing scam
Attackers invite employees to complete fake self-evaluations to steal corporate credentials.
How to lessen the workload on the CISO and their team
What tasks needlessly overload infosec experts, and how to break the curse of overtime.
Wrong system time and insecure Secure Time Seeding
Why the Windows system time can suddenly change, and how to stop it from happening.
How to stop your site from being a partner in crime
Why criminals want to hack your website, how they might use it in new attacks, and how to stop them.
OSINT: what’s the danger, and how to stay safe
We explain what OSINT is, why it has to be front-of-mind at all times, and how to guard against hackers using it.
tipsWhat to patch first: prioritizing updates
Some thoughts on what PC software patches should be prioritized and why.
The security aspect of employee offboarding
Offboarded employees often retain access to work information. What are the risks, and how to deal with them?
Zenbleed: new hardware vulnerability in AMD CPUs
Explaining an issue in popular PC and server CPUs in simple terms.
Information security gadgets
Gadgets to help protect employees’ devices against hackers and other threats.
How to fix TunnelCrack VPN leaks
What caused a mass vulnerability in VPN clients, and how to keep them working.
CVE-2017-11882: five years of exploitation
It means that some companies still have not installed MS Office patches that were published 5 years ago.
social engineeringThree high-profile social engineering hacks
How social engineering helped hack the CIA chief, hijack Elon Musk and Joe Biden’s Twitter accounts, and steal half-a-billion dollars.
legacyHow to protect legacy IT systems
Legacy systems continue to toil away in embedded solutions, medical equipment, and precision instruments. How can the respective security risks be mitigated?