Kaspersky is a cybersecurity software provider whose endpoint tools and security advisories shape how organizations detect and respond to attacks.
Search across headline titles and summaries.
Background for this topic.
Kaspersky is a cybersecurity vendor whose software protects endpoints and servers through malware detection, behavioral monitoring, web and application controls, and centralized administration. Its threat-intelligence research and detection content are also used to identify campaigns, indicators of compromise, and malicious files. News under this tag commonly concerns product vulnerabilities, detection capabilities, advisories, and the handling of customer or threat data.
Deployments matter because endpoint agents operate with extensive privileges and inspect files, processes, network traffic, and sometimes sensitive content. A flaw in an agent, management console, update mechanism, or communication channel could therefore enable local or remote compromise, depending on exposure and configuration; administrators should track vendor advisories, patch promptly, and restrict management access. Organizations must also assess telemetry collection, data residency, and applicable procurement or regulatory restrictions before deployment. During an investigation, Kaspersky detections can provide useful evidence, but analysts should validate alerts and preserve independent forensic data rather than treating a single product verdict as definitive.
Weekly headline count for the current query.
Phishing Emails Disguise Malware as Contract FilesA Russian cybersecurity company is warning that hackers are targeting Russia's industrial sector using a previously undocumented spyware, reeling them in with contract-themed emails lures. Kaspersky dubbed the spyware "Batavia." but doesn't attribute the campaign to a threat actor.
Citing Security Concerns, Australia Joins Others in Banning Anti-Virus ProductsThe Australian Department of Home Affairs on Friday banned the use of Kaspersky Labs products in public offices citing an "unacceptable security risk" to the government networks and data. All government offices must uninstall all Kaspersky products and report the completion of the task to the agency.
Campaign Uses Updated Version of the Malware Plugin, Kaspersky SaysHackers are deploying an updated strain of EagerBee malware to target internet service providers and government organizations in the Middle East, warn security researchers. EagerBee operates in memory and comes with advanced stealth and security evasion capabilities.
Russian Threat Actor Delivers NetSupport RAT, BurnsRAT via Fake RequestsA malware campaign targeting Russian retailers and service businesses aims to deploy remote access tools and install infostealer malware. Kaspersky dubbed the campaign "Horns&Hooves," after a fake organization set up by fraudsters in the 1931 Soviet satirical novel "The Little Golden Calf."
Kaspersky Hands Off 1 Million US Customers to UltraAV Amid Government Software BanKaspersky is transferring 1 million U.S. antivirus customers to Pango Group's UltraAV product following the Department of Commerce's ban on Kaspersky software sales or updates. The transition ensures users will continue to receive critical cybersecurity updates and services.
Also: US Fingers Russian GRU Hackers; Ohio City Sues ResearcherThis week, YubiKey 5 has a flaw, an Ohio city sued a researcher, the Irish regulator ended its GrokAI case, open-source AI tools exposed data, Starlink blocked X in Brazil, FCC banned Kaspersky, Intel addressed a researcher's claim, and Transport of London is still affected by a cyber incident.
Sanctions Comes After Biden Administration Banned the Russian Cybersecurity FirmSenior executives of Russian cybersecurity firm Kaspersky face new restrictions against doing business in Western countries following an announcement Friday morning by the U.S. Department of the Treasury that it sanctioned 12 of them. Those sanctioned do not include company CEO Eugene Kaspersky.
New Updates for Customers Will Become Unavailable on September 29The U.S. federal government is taking broad enforcement actions against the Russian cybersecurity giant Kaspersky Labs by banning the company from selling its antivirus software products in the United States after an investigation raised national security concerns.
Kaspersky Unveils 24 Flaws in ZKTeco TerminalsA promise of better security through biometrics fell short after security researchers dismantled an access system manufactured by a Chinese manufacture, only to discover 24 vulnerabilities contained inside. ZKTeco specializes in hybrid biometric verification technology.
Also: Hacker Sells Data Obtained Through Snowflake AttackThis week, Microsoft deprecated NTLM authentication, a hacker put apparently stolen Snowflake data up for sale, Ticketmaster confirmed its breach, Cisco patched Webex vulnerabilities, pro-Russian hacktivists claimed a DDoS attack in Spain and Kaspersky launched a free virus removal tool for Linux.
Kaspersky Says It Spotted QakBot Operators Exploiting the Flaw in AprilMicrosoft issued a patch Tuesday for a Windows zero-day vulnerability that security researchers say operators of the QakBot botnet and other hackers actively exploited. The elevation of privilege vulnerability flaw is rated "important" on the CVSS scale.
Cybercriminals Netting Over 50 Credentials Per Infected Device, Kaspersky SaysThe value of corporate credentials in the cybercrime market contributed to a 643% increase in data theft attacks over the past three years, cybersecurity company Kaspersky says. Malicious access brokers stole close to 400 million logins and passwords for numerous websites in the past year.
Chinese Hackers Have Used DinodasRATHackers are using a new version of a backdoor to target Linux servers and gain and maintain access in what appears to be an espionage campaign, warn researchers from Kaspersky. The hallmark of DinodasRAT's strategy is its sophisticated victim identification and persistence mechanisms.