Stan Kaminsky

Based on our analysis of ZKTeco vulnerabilities, we dissect the risks associated with biometric authentication.

How to use private browsing mode, what it doesn’t protect against, and why Google is deleting five billion dollars’ worth of user data.

Today we discuss which services and applications should be patched first, and what attackers are focusing on.

We explore whether it’s possible to reveal all your secrets via your smartphone’s on-screen keyboard.

What are the most common MITRE ATT&CK techniques encountered in real-world incidents — and how to neutralize them? We investigate using statistics from Incident Response and MDR services!

Can you catch malware by downloading files from Microsoft’s repositories on GitHub? Turns out, you can. Stay alert!

In response to EU regulations, WhatsApp will soon offer interoperability with other messengers. Do we need it? And is it secure?

Advertising firms’ extensive collection of personal data is becoming of great use to intelligence agencies. So how to guard against mass surveillance?

Proxyware can make it difficult to detect cyberattacks on organizations — sometimes making the latter unwitting accomplices in crimes.

How to tell a real photo or video from a fake, and trace its provenance.

Today we dive into note-taking apps, to-do lists, and diaries that use end-to-end encryption: privacy-focused cousins of popular apps like OneNote, Evernote, Apple’s Notes, and Google Keep.

Got a message from your boss or coworker asking you to “fix a problem” in an unexpected way? Beware of scammers! How to protect yourself and your company against a potential attack.

To go undetected, attackers can operate in your network without any malware at all. How to detect them and prevent damage?

With the EU’s Digital Markets Act having come into effect just days ago, both alternative app stores and true third-party browsers are set to appear on iPhones. How will this affect security, and what are iOS users losing?

Security companies offer smart technologies — primarily cameras — to protect your home from burglary, fire and other incidents. But what about protecting these security systems themselves from intruders? We fill this gap.

Google updates the Android Location History feature. Why the change, and how will this work in the future?

Getting all the benefits of ChatGPT, Copilot, and Midjourney locally — without leaking your data to the internet.

AI tools can be seen everywhere — from operating systems and office suites to image editors and chats. How do you use ChatGPT, Gemini, and the many add-ons to these without jeopardizing your digital security?

Why cybercriminals want to attack PR and marketing staff and, crucially, how to protect your company from financial and reputational harm.

One-time codes and two-factor authentication securely protect you from account theft. If you receive such a code or a request to enter it when you aren’t logging in, it may be an attempt to hack into your account.

Advertising firms boast that they can listen in on conversations through smart TVs and smartphones. Is this true, and, if so — how can you avoid being snooped on?