Cyberattacks
-
Pro-Russia hacktivists launching attacks that could damage OT
The U.S. and its allies warned that defenders should take the hackers seriously, despite the attackers’ pattern of exaggerating their actual impact.
By Eric Geller • Dec. 10, 2025 -
Initial access brokers involved in more attacks, including on critical infrastructure
A research firm also finds nation-states aligning their cyberattacks more closely with geostrategic goals.
By Eric Geller • Dec. 8, 2025 -
Explore the Trendlineâž”
Getty Images
-
Major drug research company confirms cyberattack compromised employee and partner data
Indiana-based Inotiv said it was still evaluating the hack’s impact on its business.
By Eric Geller • Dec. 8, 2025 -
China-nexus actor targets multiple US entities with Brickstorm malware
Researchers outline a campaign targeting U.S. companies, and CISA warns of attacks on government services and IT firms.
By David Jones • Updated Dec. 5, 2025 -
Lawmakers question White House on strategy for countering AI-fueled hacks
The Trump administration has said little about how it will prevent hackers from abusing AI.
By Eric Geller • Dec. 4, 2025 -
CISA urges mobile security as it warns of sophisticated spyware attacks
The agency’s rare warning about spyware activity comes as it updated mobile security guidance to reflect evolving threats.
By Eric Geller • Nov. 25, 2025 -
Hackers steal sensitive data from major banking industry vendor
The incident highlights how supply-chain compromises threaten even well-defended industries.
By Eric Geller • Updated Nov. 24, 2025 -
Gainsight says additional applications put on hold after Salesforce customers breached
The company said that Zendesk and Hubspot integrations have been deactivated as the probe continues.
By David Jones • Nov. 24, 2025 -
Startup firm called Factory disrupts campaign designed to hijack development platform
The AI-based firm intercepted a state-linked operation that was abusing resources as part of a criminal cyber-fraud network.
By David Jones • Nov. 21, 2025 -
Salesforce investigating campaign targeting customer environments connected to Gainsight app
Researchers warn that ShinyHunters has been compromising OAuth tokens to gain potential access to customer data.
By David Jones • Updated Nov. 21, 2025 -
US, allies sanction Russian bulletproof hosting firm
Authorities say the company helped ransomware gangs and supported DDoS attacks.
By Eric Geller • Nov. 19, 2025 -
Hackers increasingly target operational technology, with manufacturing sector bearing the brunt
Companies should segment and monitor their networks to prevent hackers from crossing over from IT to OT, a new report said.
By Eric Geller • Nov. 18, 2025 -
Jaguar Land Rover reports major earnings impact from cyberattack
The automaker set aside hundreds of millions to help stabilize its massive international supply chain.
By David Jones • Nov. 17, 2025 -
UK authorities propose law to set minimum cyber standards for critical sectors
The legislation follows a wave of social engineering attacks that rocked the nation’s retail and automotive supply chains.
By David Jones • Nov. 13, 2025 -
Cisco detects new attack variant targeting vulnerable firewalls
Hackers may be able to overload unpatched devices, the company said.
By Eric Geller • Nov. 10, 2025 -
Conduent warns of further financial fallout from cyberattack
The company has incurred millions in expenses related to data breach notifications stemming from an attack earlier this year.
By David Jones • Nov. 9, 2025 -
Nevada ransomware attack traced back to malware download by employee
The state refused to pay a ransom and recovered 90% of the impacted data.
By David Jones • Nov. 7, 2025 -
Cyberattacks surge against IoT, mobile devices in critical infrastructure
Manufacturing and energy firms saw some of the biggest increases in malware activity targeting connected devices.
By Eric Geller • Nov. 7, 2025 -
SonicWall says state-linked actor behind attacks against cloud backup service
CEO announces security and governance reforms inside the company, including the adoption of secure-by-design practices.
By David Jones • Nov. 6, 2025 -
AI-based malware makes attacks stealthier and more adaptive
Google says it has discovered at least five malware families that use AI to reinvent themselves and hide from defenders.
By Eric Geller • Nov. 5, 2025 -
Identity-based attacks need more attention in cloud security strategies
Companies should lock down user accounts and scan for compromised credentials, according to a new report.
By Eric Geller • Nov. 4, 2025 -
Cybercrime groups team with organized crime in massive cargo theft campaigns
Financially motivated hackers are abusing remote monitoring and access tools against trucking and freight companies, Proofpoint warns.
By David Jones • Updated Nov. 3, 2025 -
Canadian authorities warn of hacktivists targeting exposed ICS devices
Hackers have manipulated critical components at water utilities, oil and gas facilities, and agricultural sites in recent weeks.
By David Jones • Updated Oct. 31, 2025 -
F5 expects nation-state hack to curb revenues
The company says it could lose new deals because of the intrusion.
By Eric Geller • Oct. 28, 2025 -
UN member states sign cybercrime agreement despite industry, activist opposition
Critics say the new convention is ripe for abuse by authoritarian countries.
By Eric Geller • Oct. 27, 2025