Cyberattacks: Page

  • Oracle's Silicon Valley corporate headquarters in Redwood, California pictured on September 9, 2019.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    ShinyHunters linked to exploitation of critical flaw in Oracle PeopleSoft

    More than 100 organizations, about two-thirds in higher education, have been notified of potential impact.

    By • Updated June 12, 2026
  • A Chinese flag flutters in front of a Chinese government building, on top of which other Chinese flags are flying
    Image attribution tooltip
    Kevin Frayer via Getty Images
    Image attribution tooltip

    IT sector faces growing threats from IP-hungry China, AI-enabled cybercriminals

    Businesses also need to watch out for North Korean remote IT worker schemes, according to a new CrowdStrike report.

    By • June 9, 2026
  • incident response Explore the Trendline➔
    Image attribution tooltip
    Getty Images
    Image attribution tooltip
    Trendline

    Incident Response

    How organizations respond to attacks is changing as the threat environment shifts dramatically.

    By Cybersecurity Dive staff
  • A red building with a hat icon and the words "Red Hat" in white on the side
    Image attribution tooltip
    Courtesy of https://www.redhat.com/en/about/company-details
    Image attribution tooltip

    Dozens of Red Hat npm packages targeted in supply chain attack

    Researchers said a variant of the Mini Shai-Hulud is involved in the compromise.

    By • June 2, 2026
  • Palo Alto Networks
    Image attribution tooltip
    Matt Kapko/Cybersecurity Dive
    Image attribution tooltip

    CISA adds critical Palo Alto Networks firewall flaw to KEV as company, researchers warn of exploitation

    The vulnerability in a vital defensive technology creates serious risks for federal networks, CISA said.

    By • June 1, 2026
  • An Iranian flag flutters in front of a building with many windows
    Image attribution tooltip
    Michael Gruber via Getty Images
    Image attribution tooltip

    Iranian government, not hacktivist group, breached LA Metro system, security firm says

    A report by Israel-based Gambit Security dismisses the hackers’ claims of being patriotic but unaffiliated activists.

    By • May 26, 2026
  • An Iranian flag flutters in front of a building with many windows
    Image attribution tooltip
    Michael Gruber via Getty Images
    Image attribution tooltip

    Iran-linked hackers target key US, allied sectors with sophisticated spear-phishing messages

    Companies, particularly those in the affected industries, should harden their defenses against impersonation schemes, Palo Alto Networks said.

    By • May 22, 2026
  • Close-up Focus on Person's Hands Typing on the Desktop Computer Keyboard
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Grafana Labs links GitHub environment breach to TanStack npm supply chain attack

    The company behind the widely used observability platform refused an extortion demand and has since taken steps to harden its security.

    By • May 21, 2026
  • Hooded person types on computer in a dark room with multiple monitors and cables everywhere.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Grafana Labs says hacker gained access to codebase through leaked token

    The company, which operates a widely used observability platform, is refusing to pay an extortion demand.

    By • Updated May 19, 2026
  • Team of hackers dressed in black work on computers in dark room.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    West Pharmaceutical starts restoring operations after ransomware attack

    The company confirmed data was stolen and encrypted by the attackers.

    By • May 14, 2026
  • Foxconn's manufacturing site in the Village of Mount Pleasant, Wisconsin.
    Image attribution tooltip
    Courtesy of Foxconn
    Image attribution tooltip

    Foxconn confirms cyberattack affecting some North American facilities

    A ransomware group has claimed a major attack against the electronics manufacturer.

    By • May 13, 2026
  • Digital technology vector background depicting a cyberattack.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Canvas owner reaches ‘agreement’ with threat actors after data breach

    Cybersecurity experts suggest that Instructure appears to have made a ransomware payment, which the FBI highly discourages.

    By Anna Merod • May 13, 2026
  • A screenshot of a message from ShinyHunters on a laptop screen.
    Image attribution tooltip
    Permission granted by Chris Insana
    Image attribution tooltip

    Second Canvas data breach causes major disruptions for schools, colleges

    The Instructure-owned learning management system went offline on May 7 after a threat actor once again gained unauthorized access.

    By Anna Merod • May 11, 2026
  • A person with a tablet
    Image attribution tooltip
    Marco VDM/SHI via Getty Images
    Image attribution tooltip
    Sponsored by SHI

    Identity is the new perimeter as rapid NHI proliferation threatens visibility and control

    NHIs are linked to diverse assets across the enterprise technology ecosystem, creating a highly fragmented architecture and making it challenging for security teams to maintain visibility and control.

    May 11, 2026
  • A digital depiction of a red triangle sign with an exclamation point in the center with binary code in the background.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Instructure confirms cybersecurity incident

    The ed tech company that operates Canvas said information impacted by the data breach includes messages, names, email addresses and student ID numbers.

    By Anna Merod • May 8, 2026
  • Claude, AI startup, Anthropic
    Image attribution tooltip
    Permission granted by Anthropic
    Image attribution tooltip

    Anthropic’s Claude used in attempted compromise of Mexican water utility

    Researchers warn the incident highlights how AI tools can help untrained threat actors develop complex cyberattack capabilities.

    By • May 8, 2026
  • Ransomware spelled out in a creative depiction.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Businesses hide vast majority of ransomware attacks, report finds

    The security firm BlackFog said the number of disclosed incidents it tracked in Q1 was roughly one-tenth of the number of undisclosed incidents.

    By • May 7, 2026
  • A woman typing on a laptop, surrounded by a large, looming crab claw. The scene conveys a feeling of pressure and urgency in a workplace setting.
    Image attribution tooltip
    Permission granted by 1Password
    Image attribution tooltip
    Sponsored by 1Password

    How OpenClaw’s agent skills become an attack surface

    OpenClaw and similar AI agent ecosystems, present pressing security risks.

    May 4, 2026
  • Login information attached to large hook hanging in front of computer keyboard.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    As email phishing evolves, malicious attachments decline and QR codes surge

    A new Microsoft report also describes the collapse of a once-dominant tool for generating phishing websites with fake CAPTCHAs.

    By • May 1, 2026
  • CISA, cybersecurity, agency
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    CISA adds Microsoft, ConnectWise vulnerabilities to active exploitation catalog

    Russia has used one of the flaws, security experts said, while North Korea has used the other.

    By • April 29, 2026
  • Two people standing face to face on a plastics production line.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    ‘Fundamental tension’ undermines manufacturers’ cybersecurity

    A simple security mistake caused roughly one-quarter of all financial losses in the sector in 2025, cybersecurity insurer Resilience said.

    By • April 28, 2026
  • Businessmen use Bitcoin to lure others into a trap
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    North Korea-linked actor targets Web3 execs in social-engineering campaign

    Founders and other top executives were compromised to gain access to crypto wallets.

    By • April 27, 2026
  • An energy meter displaying usage in kilowatt-hours is seen next to a brick wall
    Image attribution tooltip
    pkline via Getty Images
    Image attribution tooltip

    Major critical infrastructure supplier reports cyberattack

    Itron, which makes devices that measure energy and water use, said its operations were continuing, despite the intrusion.

    By • April 27, 2026
  • Nick Andersen, executive assistant director for cybersecurity, speaks during the Billington Cybersecurity Summit in Washington D.C. on Sept. 11, 2025.
    Image attribution tooltip
    Courtesy of Billington
    Image attribution tooltip

    US, UK authorities warn that Firestarter backdoor malware survives patching

    A federal agency was impacted by a hacking campaign that exploited flaws in Cisco devices.

    By • April 27, 2026
  • A Chinese flag flutters in front of a Chinese government building, on top of which other Chinese flags are flying
    Image attribution tooltip
    Kevin Frayer via Getty Images
    Image attribution tooltip

    China disguises cyberattacks with ‘covert network’ botnets, US and allies warn

    A new security advisory highlights Beijing’s stealthy techniques.

    By • Updated April 23, 2026
  • Secretary of War Pete Hegseth and Chairman of the Joint Chiefs of Staff Air Force General Dan Caine (R) provide updates on the continued military operations on Iran during a press briefing on the Iran war at the Pentagon on March 19, 2026 in Arlington, Virginia. Iran-backed threat actors have targeted U.S. critical infrastructure sites in recent since the launch of the war.
    Image attribution tooltip
    Win McNamee via Getty Images
    Image attribution tooltip
    Deep Dive

    Iran-nexus threat groups refine attacks against critical infrastructure

    State-sponsored and hacktivist groups have shown greater determination to damage or disable energy, water and other key sectors.

    By • April 23, 2026