The Curious Engineer

Securelist

2001–2026

168 posts

2026 51

October 2026

  1. Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
  2. OverDDoSe: Inside the DDoS-for-hire market
  3. Date

September 2026

  1. Building trusted cybersecurity for government
  2. Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
  3. NightEagle targets Russian companies
  4. Date

August 2026

  1. Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants
  2. SOC maturity model. What suits your business the most?
  3. Date

July 2026

  1. How NAD in KATA detects Kerberoasting and DNS tunneling
  2. From easy target to ready business: A practical SMB cybersecurity guide
  3. HelloNet campaign: a threat via the ViPNet update system
  4. The dark side of mobile: Threats targeting Android & iOS
  5. Securing the pipeline: 2026 supply chain threats
  6. Missed incidents: Compromise Assessment insights
  7. Armored Likho's new weapon: BusySnake Stealer
  8. How a single ScreenConnect incident exposed a massive campaign
  9. Date

June 2026

  1. CVE-2024-2658 vulnerability in Schneider Electric software: risks to industrial control systems
  2. AI meets cybersecurity: Powering the next digital move
  3. Hacktivists are broadening their scope beyond political motivation
  4. MiniPlasma: detecting exploitation
  5. Automate your SOC with Kaspersky XDR 2.0
  6. Date

May 2026

  1. How do we catch 0-days?
  2. SOC evolution: From firefighting to strategic risk management
  3. Popular DAEMON Tools software compromised
  4. Date

April 2026

  1. Copy Fail: root on virtually any Linux
  2. Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India
  3. The power of enrichment: Boosting your product with threat intelligence
  4. 2026 cyber world: Inside the attacker’s playbook
  5. Lotus Wiper: a new threat targeting the energy and utilities sector
  6. Using KATA and KEDR to detect the AdaptixC2 agent
  7. CPU-Z and HWMonitor watering hole infection – a copy-pasted attack
  8. Date

March 2026

  1. SOC: Build, buy, or hybrid?
  2. Inside the dark web job market: Their talent, our threat
  3. Date

February 2026

  1. Hunt Hub: Opening the black box of EDR detection
  2. Signal in the noise. What 2025 hacktivism reveals about the modern threat landscape
  3. Kaspersky Security Bulletin 2025: Decoding the finance sector threats
  4. State of AI in cybersecurity: AI trends & predictions for 2026
  5. KSB: Kaspersky ICS CERT trends and predictions for 2026
  6. The Notepad++ supply chain attack — unnoticed execution chains and new IoCs
  7. Date

January 2026

  1. Supply chain attack on eScan antivirus: detecting and remediating malicious updates
  2. AI agents vs. prompt injections
  3. The quantum threat: Preparing for next-generation cyber risks
  4. Date

2025 13

December 2025

  1. How to detect Mythic activity with NDR-class solutions

August 2025

  1. Fortify your mobile protection: Building customer trust with advanced security

June 2025

  1. Unmasking email dangers: Detecting and defending against mail threats
  2. Kaspersky Scan Engine: Built to Integrate, Engineered to Protect

May 2025

  1. Kaspersky’s way of cloud workload protection

March 2025

  1. Key findings from Kaspersky’s Incident Response report

February 2025

  1. Silent shields & digital dragons: MDR’s proactive protection
  2. From chaos to control: streamlining detection engineering in Security Operation Centers

January 2025

  1. Сrimeware and financial cyberthreats in 2025
  2. Global IT outages and supply chain attacks: 2024’s lessons and tomorrow’s cyberthreats
  3. Missed cyberthreats: real-world cases where compromise assessment uncovered what was overlooked
  4. Unreliable AI: Addressing the Cybersecurity Risks of LLM-Based System
  5. On the path to reveal the mystery with Digital Forensics

2024 10

September 2024

  1. Inside the Dark Web: exploring the human side of cybercriminals

August 2024

  1. The Cybersecurity Buyer’s Dilemma: Hype vs (True) Expertise
  2. Cybersecurity’s human factor – more than an unpatched vulnerability

July 2024

  1. Building and prioritizing detection engineering backlogs with MITRE ATT&CK

June 2024

  1. Analyzing last year’s cyber incident cases
  2. Industrial cybersecurity in 2024: trends and forecasts
  3. MDR report 2023: Analyzing the state of the global threat landscape
  4. SOC Consulting: insights and live-on cases
  5. Take your reverse engineering to another level with Ghidra
  6. Email security: Top threats and how to counter them

2023 18

December 2023

  1. The Future of AI in cybersecurity: what to expect in 2024
  2. Responding to a data breach: a step-by-step guide

November 2023

  1. 2024 Advanced persistent threat predictions
  2. Overview of modern car compromise techniques and methods of protection

September 2023

  1. 2023 APT Landscape Unveiled: Trends, Challenges, Solutions
  2. Cybersecurity risks in alternative energy sources

August 2023

  1. Securing ICS Workstations: Vulnerability Identification with OVAL

June 2023

  1. Unveiling the Darknet’s Malware-as-a-Service model
  2. Securing the Fort: How to master cyber incident response in a large company
  3. Cyberthreats to modern automotive industry
  4. Applying ATT&CK to analyze ransomware campaigns

May 2023

  1. Ransomware trends in 2023

March 2023

  1. Cryptocurrency Threat Landscape Trends in 2023
  2. Ransomware groups negotiation tactics: what you need to know

February 2023

  1. ChatGPT – good or evil? AI impact on cybersecurity
  2. Crimeware and financial predictions for 2023
  3. Advanced persistent threat predictions for 2023

January 2023

  1. Reversing mobile threats in 2022

2022 20

December 2022

  1. Did the cyber war really happen? The 2022 lessons-learned for cyber-stability
  2. The practical versatility of SOC
  3. Good, Perfect, the Best: how an analyst can boost penetration testing results
  4. Dealing with incident response: cyber capacity building for under-resourced organizations in India

September 2022

  1. IIoT cybersecurity threats: how to run complete protection at gateway level
  2. SOC consulting projects: common methodology and insights
  3. How to effectively detect, prevent & respond to threats with threat intelligence

August 2022

  1. The dark side of Potential Unwanted Applications

July 2022

  1. ToddyCat: an overview of a new APT group
  2. The Power of Threat Attribution
  3. SIGMA rules and how to use them

June 2022

  1. Windows Incident Response webinar. Live analysis with PowerShell
  2. Ransomware today: Tactics, techniques, and procedures
  3. Dark market for corporate data: how cybercriminals sell access to your company

May 2022

  1. Ransomware trends in 2022

April 2022

  1. Mobile Malware Reverse Engineering Workshop

March 2022

  1. A look at current cyberattacks in Ukraine

February 2022

  1. CCB Q4 2021 event: Insights about the details of the Log4Shell attack
  2. CCB Q4 2021 event: Elaborating on the BlueNoroff's cryptocurrency hunt

January 2022

  1. ATM & PoS threat landscape: evolution and COVID-19 lockdown impact

2021 38

December 2021

  1. The Log4Shell Vulnerability – explained: how to stay secure
  2. LatAm banking threats: how regional actors move global and how to fight it back
  3. Advanced automation of static malware analysis. Hands-on workshop

November 2021

  1. Ask the Analyst: reach out to Kaspersky’s best researchers to get their advice on advanced cyberthreats and security issues
  2. Financial threat predictions for 2022
  3. Kaspersky’s Advanced Targeted Threat Predictions For 2022

October 2021

  1. SAS 2021 workshop: Asset Discovery and Monitoring for Bug Hunters 101
  2. SAS 2021 workshop: Company-wide SAST
  3. SAS 2021: How do you say “Chinese Supply Chain Attack” in Farsi
  4. SAS 2021 workshop: Zero-knowledge Go Reverse-engineering
  5. SAS 2021 workshop: Writing Better YARA Rules
  6. SAS 2021 workshop: Prevent & Detect Security Threats in the Kubernetes Era
  7. SAS 2021: Time to Make the Donuts
  8. SAS 2021: Learning to ChaCha with APT41
  9. SAS 2021: Fireside chat with Chris Bing
  10. SAS 2021: Operation Software Concepts

July 2021

  1. Windows zero-days: how we find and protect from them

June 2021

  1. GReAT Ideas. Powered by SAS: threat actors advance on new fronts
  2. GReAT Ideas. Powered by SAS: threat hunting and new techniques
  3. GReAT Ideas. Powered by SAS: malware attribution and next-gen IoT honeypots

May 2021

  1. How adversaries prepare attacks: a story of tailored threat intelligence
  2. The evolution and future of supply chain attacks
  3. Incident Response service: Numbers, challenges and tactics
  4. No two attacks are identical: a year in incident response
  5. How EDR can help you manage specific cybersecurity cases
  6. GReAT Ideas. Balalaika Edition
  7. Online payment details theft via web analytics service: how to stay safe
  8. Best practices: how to find network threats effectively using NIDS

April 2021

  1. Remote working in 2020: lessons learnt
  2. Kaspersky’s Advanced Targeted Threat Predictions For 2021
  3. GReAT Ideas. Powered by Croissant. Baguette edition.
  4. Prioritizing alerts based on level of risk – a step-by-step guide
  5. IT security vulnerabilities in healthcare. How to avoid losing patient records?
  6. 2021 predictions, episode 2: healthcare cyberthreats
  7. 2021 predictions, episode 1: financial cyberthreats
  8. 2021 predictions, episode 3: ICS cyberthreats
  9. GReAT Ideas. Green Tea Edition
  10. Workshop: fuzzing – automated discovery of memory corruption vulnerabilities

2002 10

September 2002

  1. Virus Top Twenty – August 2002

August 2002

  1. Virus Top Twenty – July 2002

July 2002

  1. The Virus Top Twenty for June 2002

June 2002

  1. Virus Top Twenty – May 2002

May 2002

  1. Virus Top 20 – April 2002

April 2002

  1. Virus Top Twenty – March 2002

March 2002

  1. Virus Top Twenty – February 2002

February 2002

  1. The Virus Top Twenty for January 2002

January 2002

  1. The December 2001 Virus Top Twenty
  2. September – December 2001 Top Ten

2001 8

December 2001

  1. The Virus Top 20 for November 2001

October 2001

  1. Extra! Extra! September 2001 Top 20!

August 2001

  1. July 2001 Top Ten Sizzles
  2. April’s Top Ten Occurring Viruses

July 2001

  1. June 2001 Bugs: The Virus Top Ten

June 2001

  1. Like Pigs in Mud: May 2001 Virus List

April 2001

  1. The Old, the New, and the Ugly – March 2001 Top Viruses

February 2001

  1. January 2001 Virus “Hits”