SIEMDetecting DLL hijacking
Our experts trained an ML model to detect attempts to use DLL hijacking, and integrated it into the Kaspersky SIEM system.
83 articles
AINew types of attacks on AI-powered assistants and chatbots
A close look at attacks on LLMs: from ChatGPT and Claude to Copilot and other AI-assistants that power popular apps.
An APT… through your webcam
How attackers can hijack your computer through its webcam — and how to stop it.
password managerLessons learned from the trojanized KeePass incident
A popular password manager was modified to allow attackers to steal passwords and encrypt users’ data. How to protect home computers and corporate systems from this threat?
The ABCs of cyber-resilience
Businesses reaching the “acceptance stage”: given inevitable breaches — how to prepare for them?
archiversSecurity measures for handling archive files in organizations
Archives are being used in targeted phishing and other attacks on organizations. What tools, settings, and policies can mitigate the threat?
A ransomware attack through an IP camera
Fending off ransomware attacks that exploit corporate IoT devices.
minersMiner inconvenience: how cybercriminals blackmail YouTubers into promoting malware
Cybercriminals are blackmailing YouTube bloggers into posting malware links in their video descriptions.
Business benefits of secure containerization
What benefits do hybrid clouds and containerization bring to businesses — and what measurable impact do cybersecurity tools make?
Malicious modules and the LSA process
Detection of tactics involving malicious DLL registration and other Kaspersky SIEM improvements in Q4 2024.
How to learn from a cybersecurity incident
Analyzing incidents and drawing lessons from them should be an integral part of the incident response process. This can help improve the overall security level of a company.
Will AI replace SOC analysts?
We share our experience on the optimal use of AI models in the SOC of our Kaspersky MDR service.
AI in cybersecurity automation
AI has dozens of applications in cybersecurity. Which ones are the most effective?
Kaspersky AI Technology Research Center: who we are and what we do
Our developments, products, research, patents and expert teams harnessed for AI.
How to guard against Windows downgrade attacks
Windows Downdate is an attack that can roll back updates to your OS to reintroduce vulnerabilities and allow attackers to take full control of your system. How to mitigate the risk?
Which devices on your network are most vulnerable?
How to protect the less obvious parts of your IT infrastructure (and from what) — from printers and video surveillance kit to insulin pumps.
How the adversary-in-the-middle technique is used in spearphishing attacks
Cybercriminals are using AitM techniques to compromise accounts of company executives. How do they do this, and how to protect against it?
How to prepare corporate cybersecurity for all-seeing AI assistants
Although Microsoft has radically revised the rollout plan for its controversial Recall feature, cybersecurity teams can’t afford to ignore the issue of “AI onlookers.