F-Secure rebrands its corporate security business under the new name

The corporate security business of F-Secure relaunches as a new brand that shares the company’s new name WithSecure. To benefit from the power of diversity, the brand was developed in extensive collaboration with F-Secure employees, reseller partners, … Continue reading F-Secure rebrands its corporate security business under the new name

The simple secret to app security? Time

The thing about being a security consultant is that people are always looking to you for the “secret” to building a secure digital anything. And by “secret,” they usually mean “shortcut”. There is one simple secret to building secure applications. Unfo… Continue reading The simple secret to app security? Time

Top threats for the financial sector

The potential financial, operational, and reputational impact of ransomware makes it the top threat facing financial services organizations, according to a report from F-Secure. Phishing, exposed remote desktop protocol (RDP) ports, and the exploitatio… Continue reading Top threats for the financial sector

What is fueling digital anxiety when working remotely?

Working from home has spiked since the onset of the Covid-19 pandemic in March of 2020. This effort to reduce health risks may have limited the spread of the virus, but according to an analysis by F-Secure, it may also have helped increase digital anxi… Continue reading What is fueling digital anxiety when working remotely?

People working in IT related roles equally susceptible to phishing attempts as the general population

Phishing emails that mimic HR announcements or ask for assistance with invoicing get the most clicks from recipients, according to a study from F-Secure. The study, which included 82,402 participants, tested how employees from four different organizati… Continue reading People working in IT related roles equally susceptible to phishing attempts as the general population

Log4Shell is a dumpster fire that should have been avoided

On Thursday, December 9, 2021, my young, Minecraft-addicted kids were still completely oblivious of the Log4j vulnerabilities in their favorite game. Then again, so was every cybersecurity professional in the world. That all changed when the Apache Log… Continue reading Log4Shell is a dumpster fire that should have been avoided

How can AI be made more secure and trustworthy?

While we’re still debating whether and how long it will take to reach singularity and superintelligence, artificial intelligence is playing an increasingly important role in our everyday lives. Artificial intelligence – most commonly machine lear… Continue reading How can AI be made more secure and trustworthy?

Log4Shell: A new fix, details of active attacks, and risk mitigation recommendations

Due to the extraordinary widespread use of the open-source Apache Log4j library, the saga of the Log4Shell (CVE-2021-44228) vulnerability is nowhere near finished. As Dr. Johannes Ullrich, Dean of Research at the SANS Technology Institute, recently not… Continue reading Log4Shell: A new fix, details of active attacks, and risk mitigation recommendations

150+ HP multifunction printers open to attack (CVE-2021-39237, CVE-2021-39238)

Over 150 HP multifunction printers (MFPs) are open to attack via two exposed physical access port vulnerabilities (CVE-2021-39237) and two different font parsing vulnerabilities (CVE-2021-39238) discovered by F-Secure security consultants Timo Hirvonen… Continue reading 150+ HP multifunction printers open to attack (CVE-2021-39237, CVE-2021-39238)

F-Secure collaborates with CyberPeace Institute to help organizations targeted by cyberattacks

F-Secure has signed a letter of intent (LOI) with the Switzerland-based CyberPeace Institute, an independent non-governmental organization whose mission is to protect the security, dignity, and equity of people in cyberspace. The letter outlines a broa… Continue reading F-Secure collaborates with CyberPeace Institute to help organizations targeted by cyberattacks