Author: Yuri Ilyin | Page 10 | Kaspersky official blog

Internal threats: “accidental sharing” leads to loss of more data than software flaws

Internal and external threats may be quite different in nature, but they demand equal attention from the IT staff in order for the protection to be complete.

Security features in Mac OS X Yosemite

We’re taking a look at the security features in the new version of Mac OS X – Yosemite. Apple makes a decent effort.

New features of Kaspersky Endpoint Security 10 Service Pack 1: Screenshots gallery

Kaspersky Lab has launched public beta-testing of its enterprise security solution, Kaspersky Endpoint Security 10 Service Pack 1. Take a look at the screenshots showcasing the new features.

A free iPad in a hotel room and the string’s attached

Hotels offer not just free WiFi but occasionally even free use of devices such as iPads these days. While it is really nice, a misconfigured device like this may store just a bit too much personal data, easily retrievable by the next visitor…

The ups and downs of mobile threats

Every fifth Android-based device protected by Kaspersky Lab security solutions was attacked by malware at least once in 2013-2014. In 60% of the registered attacks the malware used had a “financial” nature. While there’s seemingly nothing unexpected a certain twist is present…

Critical systems and bottlenecks

A critical civilian system goes down – it’s a scenario that evokes some apocalyptic pictures of destruction and mayhem; remember, for instance, “Die Hard 4.0”? Actually this could happen with any corporate infrastructure, since all of them have certain critical systems of their own.

How a Linux bug may affect Virtual infrastructure

Linux bugs may affect or directly threaten entire virtualization infrastructures: Whatever OS is used on VMs, an attack on a hypervisor is possible from both the outside and inside, and exploitation of the dreaded Shellshock vulnerability on Linux-based hypervisors is a possibility, too.

How an ill-designed data access policy can interfere with cybersecurity

A data access policy becomes an issue for any company as soon as it accumulates a considerable amount of valuable and sensitive data. That doesn’t mean the policy is always in place when it should be, or that it’s implemented properly.

A hole in the fence: is there a “partial preparedness” to cyberthreats?

Can a business be “partially” prepared to ward off cyberthreats? That’s up for debate, but it seems there is little difference between “partial protection” and no protection at all.

How a Linux bug may affect Windows-based infrastructure

The recent developments with “big bugs” such as Heartbleed and Shellshock created a global security strain, with many questions emerging. Both bugs were open-source software-related, but indirectly they would constitute a threat to Windows-based infrastructure. In this post we review a few scenarios of an attack on mostly Windows-based network with Linux servers at certain points.

A layman’s dictionary: What is APT and why is it called that?

APT is a term often mentioned in cybersecurity bulletins. Here’s what you need to know to understand it.

Allowlists and smooth workflow: do they contradict each other?

IT workers routinely set up limited privileges for all users for security sake. However, the users are extremely suspicious about these sorts of limitations, assuming (sometimes reasonably) that it will affect the workflow. Is there a way to mitigate these contradictions?

Lock it up! ATMs are attacked with “software skimmers”

Interpol just released an alert regarding cyber-attacks targeting multiple ATMs around the world. During the course of a forensic investigation performed by Kaspersky Lab, researchers discovered a piece of malware infecting ATMs that allowed attackers to empty the cash machines via direct manipulation, stealing millions of dollars.