Cybersecurity

A common perception in the infosec community is that there can never be too much security, but it is understood that “too much” security is expensive — and sometimes, prohibitively so — from a business perspective. So, where is that fine line that defines “just enough” security?

Brief introduction to setting up Ghidra, and then configuring it with a familiar UI and shortcuts, so that you would not need to re-learn all the key sequences you have got used to over the years.

How exactly can indicators of compromise help information security specialists in their everyday work? To find the answer we asked three Kaspersky experts to share their experience.

This report describes several interesting incidents observed by the Kaspersky Managed Detection and Response (MDR) team. We hope that it helps you to stay up to date on the modern threat landscape and to be better prepared for attacks.

We analyze external threats for organizations in APAC region based on the data collected by Kaspersky Digital Footprint Intelligence service.

Black Hat 2022 USA Briefings wrapped up this past week, along with its sister conference Defcon 30. Coming back from the COVID hiatus, the conferences were enthusiastically full compared to the 2021 ghost town.

We released Python-based command line tools for our OpenTIP service that also implement a client class that you can reuse in your own tools.

How is technical attribution carried out? What are the key challenges in conducting reliable technical attribution? How can this be more accessible to the multitude of stakeholders? Below are our reflections on these questions.

In this article we demonstrate a detection evasion technique using CLR that may be useful for penetration testing as well as a couple of tips for SOCs to help detect such attacks.

On August 31, 2021 we ran a joint webinar between VirusTotal and Kaspersky, with a focus on YARA rules best practices and real world examples. In this post, we answer your questions that we didn’t answer during webinar.

Dan Demeter, Senior Security Researcher with Kaspersky’s Global Research and Analysis Team and head of Kaspersky’s Honeypot project, explains what honeypots are, why they’re recommended for catching external threats, and how you can set up your own simple SSH-honeypot.

Сybersecurity companies implement a variety of methods to discover previously unknown malware files. Machine learning (ML) is a powerful and widely used approach for this task. But can we rely entirely on machine learning approaches in the battle with the bad guys? Or could powerful AI itself be vulnerable?

Last year, we visited The MITRE Corporation and took part in the MITRE ATT&CK Evaluation Round 2. During this assessment, our technologies were tested against emulated attack techniques of the APT29 threat group.

While we are all working from home, why not tear some binary code apart and pick up some reverse engineering skills? Within one hour, we will outline the typical workflow that we follow when analyzing malware.

As you may already know, we have rescheduled the SAS 2020 conference for November 18-21. However, we cannot just leave it all until November, that’s why we invite you to SAS at Home, a series of webinars scheduled to kick off very soon, on the 28th-30th of April.