AntiMalwareAugust 18, 2026🇷🇺Translated from Russian

Kaspersky Releases Corporate Version of Kaspersky Password Manager for Mid-Size and Large Organizations

Kaspersky has launched a corporate edition of Kaspersky Password Manager aimed at medium and large organizations that need centralized control over employee credentials.

The new solution generates strong, unique passwords, stores them in an encrypted vault, and continuously checks existing passwords for weaknesses and presence in known data breaches. Employees are required to remember only one master password, while the platform additionally safeguards one-time TOTP codes, passkeys, corporate documents, and bank-card information.

Administrators can define organization-wide password policies and assign granular permissions according to user roles. Kaspersky supports the release with findings from its Kaspersky Digital Footprint Intelligence service, which analyzed password behavior throughout 2026.

According to the data, 37 percent of users reused an old password by simply altering letter case, 13 percent appended the current year, and 17 percent added only one special character. Further analysis revealed that 39 percent of passwords consisted solely of digits and 31 percent used only Latin letters, with the average password reused across at least two services.

Kaspersky notes that such practices carry significant consequences: in 2025, one quarter of attacks targeting organizations began with stolen or weak credentials that attackers then tested across other systems to reach internal infrastructure.

Related articles

AntiMalwareOther

GitHub Experiences Major Global Outage Affecting API, Actions, Copilot and Multiple Core Services

On August 17, GitHub suffered a widespread outage that impacted nearly all major platform functions including the web interface, API, Issues, Pull Requests, Actions, Webhooks, Pages, Git Operations, and Copilot. Approximately 20% of requests to the site and API failed during peak impact, with archive and raw repository content loads reaching around 50% error rates. Corporate authentication mechanisms such as SAML and OIDC, along with SCIM and Team Sync services, were also disrupted while Codespaces remained operational. The incident began around 13:40 UTC with progressive degradation across components, prompting GitHub to identify and mitigate the root cause. Services are gradually recovering but error rates remain slightly elevated, and the incident has not yet been fully closed. Parallel issues were reported in other Microsoft services including Teams and Copilot, with unconfirmed speculation linking the event to Amazon Web Services network problems.

AntiMalwareOther

SASTAV and ARX ASPM PLATFORM Integrate Static Code Analysis with Application Security Risk Management

Russian developers ShiftLeft Security and ARX Security have ensured compatibility between the SASTAV SAST solution and the ARX ASPM PLATFORM. The integration allows static analysis of source code to be launched and configured directly from the ASPM platform interface. For each project, specialists can select repositories and branches, form rule sets, set scanning parameters, and establish quality gates that determine whether a product can be released with detected defects. Risk acceptance procedures are also configured within the same interface. SASTAV handles static code analysis, enabling creation and editing of rules, assignment of different check sets to individual repositories, and management of scanning parameters. ARX ASPM PLATFORM serves as a unified center for managing AppSec tools, collecting results from various analyzers, correlating related findings, assessing risks, and displaying the overall security posture of digital products. Both solutions leverage artificial intelligence at different stages: SASTAV uses it for defect verification, automatic triage, prioritization, and code change recommendations, while the ARX AI assistant determines defect statuses. The combined system reduces manual operations, accelerates DevSecOps project onboarding, and lowers the burden on AppSec teams.

AntiMalwareOther

GPT-4 Boosts Skilled Kenyan Entrepreneurs by 15% Profit While Costing Unprepared Businesses 10% in Six-Month Study

A six-month experiment conducted by researchers from UC Berkeley, Harvard, and Columbia University examined how access to a GPT-4-based AI advisor affected small business owners in Kenya. The most skilled participants increased profits by 15 percent by adapting model recommendations to local conditions such as power outages, while less prepared entrepreneurs lost around 10 percent of revenue by applying generic advice without verification. The study highlights that the core issue lies not in the technology itself but in users abandoning critical thinking when interacting with generative AI. Earlier findings from Dickinson College showed that 97 percent of participants copied an obviously incorrect ChatGPT answer on a simple task, whereas the group without AI performed better. A simple reminder to double-check results immediately doubled accuracy. Analysis of 1.4 million KPMG work sessions revealed that 95 percent of users treat AI like a vending machine by taking the first output, while only 5 percent engage it as a thinking partner by providing context and challenging responses. The results indicate that merely granting employees access to AI tools reveals little about actual effectiveness without considering skill levels and task-specific oversight.

HabrOther

How to Submit Documents for Online Master's Programs via Gosuslugi: Complete Guide

The admission campaign for online master's programs at partner universities is nearing its end, with less than a month remaining for applicants. Yandex Practicum provides a detailed walkthrough on using the Gosuslugi super service to submit applications entirely online without visiting admissions offices in person. The process covers selecting programs at institutions such as ITMO and MEPhI, uploading required documents like diplomas and passports, and tracking application status through a personal account. Specific deadlines are outlined for 2026, including final document submission dates in late August for programs in areas like DevOps, AI solutions, and cybersecurity. Additional steps include arranging entrance exams, signing contracts remotely, and accessing state-supported education loans at a 3% interest rate. Common pitfalls such as unverified accounts or unreadable document scans are highlighted to help applicants avoid delays.