InfoSources

Fifteen Years in the Making: The Sentencing of Ransomwareas- a-Service's Original Architect- 309

A Familiar Hand, A New Weapon: Storm-1175 Steps Out From Medusa's Shadow- 308

New Name, Same Playbook: How a Vishing Crew Climbed From Retail to Wall Street in 18 Months- 307

The Whole Pipeline: How Breached Data Becomes Cash, Leverage, and Sextortion Material- 306

The Authentic Trap: How H1 2026's Scam Campaigns Learned to Borrow Trust Instead of Faking It- 305

Up, Down, and Sideways: What Three Ransomware Trend Claims in One Week Actually Measure- 304

The Long Gap: What Five Healthcare Breaches Reveal About Who's Actually Watching- 303

One Regime, Four Fronts: Inside North Korea's Parallel Cyber Enterprise- 302

Seeing Is No Longer Believing: How Synthetic Media Weaponizes Trust in Two Unrelated Worlds- 301

Ship First, Secure Later: AI Productivity Tools Are Outrunning Their Own Guardrails- 300

The Student Becomes the Weapon: Inside China's Program to Distill Western AI Into Military Tools- 299

Hands Off the Wheel: China's Shift to Autonomous AI-Run Cyberattacks- 298

The Long Wire: How Beijing Builds Access That Outlasts Its Cover Stories- 297

Borrowed Trust: How Moscow Turns Everyday Software Into an Access Network- 296

The Maintenance Excuse: Zbtlink, the National Intelligence Law, and the Case Against Trusting Chinese Router Firmware- 295

Beneath the Waterline: Iran's Deniable Campaign Against America's Weakest Infrastructure- 294

The weak link in modern warfare: Russia's FSB quietly walking through the world's routers- 293

A blank marketing email as a spy's front door: how suspected Chinese operators are quietly reading university mailboxes- 285

When cybercrime borrows a spy's toolkit: the UAT-11795 campaign hiding inside everyday software- 292

A parking-lot camera as a weapon of war: how Russia turned Europe's own infrastructure into a targeting network- 291

One police force, two foreign intelligence services: how China and India ended up spying on the same Pakistani database- 290

A breach at the edge, reassurance at the center: what actually leaked from India's largest nuclear plant- 289

Washington widens its warning as Iran's cyber-physical reach grows — and its own threats escalate-288

Four years in, Russia's propaganda machine turns back toward its old targets- 287

The hacktivist who helped a hacker flee: inside Spain's arrest of a pro-Russia network operative- 286

Russia's silent reach into the world's mailboxes- 284

Tax season as an attack surface: how a suspected Chinese hacking cluster is running parallel RAT campaigns across India, Japan, and China- 283

When the watchdog gets watched: Pegasus inside the European Parliament's own spyware inquiry- 282

Iran's quiet war inside Israel's networks- 281

FortiBleed and the anatomy of an unforced error: how 86,000 stolen passwords, not a software flaw, opened Foreign Office networks, NHS suppliers, and global shipping to the same campaign- 280

Ten months in the dark: how a breach of South Korea's diplomatic training platform became a five-month secret before it became a public one- 279

Nichirei and the price of ambiguity: what the RansomHouse extortion of Japan's cold-chain giant reveals about a widening pattern of unattributed pressure on Japanese industry- 278

Canada's Signals Intelligence Agency Turns Its Offensive Toolkit on Criminal Networks, Not Just State Adversaries- 277

What Medtronic's Own Notice Leaves Unsaid: A Breach, an Extortion Claim, and a Company That Won't Connect the Two- 276

Fifteen Years, Nine Countries: The EU and UK Name the FSB Behind Europe's Infrastructure Sabotage Campaign- 275

When the Operator Became the Model: JadePuffer and the Collapse of Ransomware's Skill Floor- 274

When the Attacker Stops Being Human: Two July 2026 Cases Mark the Shift to AI-Operated Offensive Cyber Campaigns- 273

Israel's bid to own the agentic security frontier- 272

Washington Recasts Pig-Butchering as a National-Security Problem: Inside the $43 Million Network That Fed China-Bound Laundering Pipelines- 271

Bulletproof No Longer: The Unsealing of the Media Land Indictment- 270

When the Basics Fail: FSB Center 16's Router Campaign and the West's First Joint Cyber Sanctions Response- 269

When the Bottling Line Goes Dark: Coca-Cola's Fairlife Ransomware Incident and the Limits of Early Disclosure- 268

Old Protocol, New War: How Iran Tracked US Military Phones Through a 1970s Telecom Flaw- 267

Hardening the Metal Beneath the Model: Why AI Data Centers Are Outrunning Their Own Security- 266

Hacking Like It's 1999: Why Operational Technology Security Plays by Different Rules- 265

Trusting the Untrusted: How 6 GHz Wi-Fi's Traffic Cop Could Be Turned Against Critical Infrastructure- 264

Digital Growth, Deepening Exposure: Nigeria's Race to Regulate a Rising Cybercrime Economy- 263

Following the Money: Inside the Takedown of a €140 Million Iberian Fraud Network- 262

Past the Perimeter: Why Identity, Not Exploits, Now Drives Ransomware- 261

Free Hosting, Weaponized: How 148 npm Packages Turned Students' Browsers Into a Botnet- 260

A Quiet Patch with a Familiar Shape: 7-Zip's Latest Reminder About Archive Trust- 259

Trust as the Attack Surface: Inside the ClickFix Campaigns Powering ACR Stealer- 258

Listening to the Seabed: Denmark's Bet on Acoustic Sensing as a First Line of Maritime Defense- 257

Beneath the Radar: A Reawakened Espionage Toolkit Targets Southeast Asian Governments- 256

The Certificate Authority's Blind Spot: How a Trusted Signing Chain Became a Weapon- 255

The ransomware gang that used a training-data BTC address by mistake was actually the AI's mistake- 254

A breach nobody's attributed yet, hitting the platform that's coordinating World Cup security- 253

North Korea just made its malware payload host itself on the blockchain- 252

The lawyers MSG banned with facial recognition are now the plaintiffs suing over it - 251

Anubis's real innovation isn't the ransomware — it's making destruction irreversible- 250

China-Linked CL-STA-1062 Shifts From Taiwan to Critical Infrastructure Across Southeast Asia- 249

The Microsoft bug leaker treating vulnerability disclosure as a countdown- 248

When "unauthorized AI app" becomes an SEC disclosure category of its own- 247

The worm that infects the tools developers trust to catch it- 246

A malware sample built for single-core Windows XP may be the first cyberweapon ever found- 245

ClawSwarm proves you can hijack an AI agent without writing a single line of malware- 244

Ten months later, nobody knows why Huawei routers took down Luxembourg's phone network- 243

THORChain's breach is a rounding error in 2026's record year for crypto theft- 242

Operation Ramz shows where Southeast Asia's scam compounds go when they get shut down- 241

Turla's botnet redesign is about surviving disruption, not just evading detection- 240

Three times through the same door: FamousSparrow's patient campaign against Azerbaijan's energy sector- 239

Device code phishing didn't need new code — it needed a legitimate Microsoft login flow- 238

London's police made 700,000 data requests last year. Nobody had to ask a judge- 237

Europe wrote the rules for surveillance exports, then left its own member states to enforce them-236

The FTC just proved a settlement can end a data broker's harm without ending its punishment- 235

An unclaimed breach at a critical drug-packaging supplier tests healthcare's newest fault line- 234

A single breach at Foxconn just exposed how concentrated the electronics supply chain really is- 233

When a ransomware gang gets ransomware'd: what The Gentlemen's leak reveals about the RaaS economy- 232

WannaCry at nine years: the day a stolen NSA tool became a lesson in negligence- 231

Poland's Signal exodus reveals a pattern too consistent to call coincidence- 230

The offense-defense balance in cyber has a shelf life, and CNAS just estimated it- 229

The Fed's financial stability survey just put a name to what markets have been pricing quietly- 228

Mythos becomes a regulatory event before it becomes a household name- 227

The UK's AI Security Institute just watched the offensive capability clock start speeding up- 226

The UK's NCSC just told the world its technical debt bill is coming due- 225

Taiwan's rail hack proves the threshold for infrastructure disruption has collapsed- 221

From Signatures to Behavior: How Real-Time AI Attacks Disrupted Global Cyber Defense- 224

Google's GTIG report confirms AI has crossed from cybercrime convenience to zero-day creation- 223

CISA's CI Fortify quietly concedes that eviction alone has failed- 222

A university researcher just proved a city's EV chargers can be switched off with one script- 220

Two years of silence: what South Staffordshire Water's fine reveals about detection failure- 219

Poland's water utilities become the latest target in Russia's shadow campaign- 218

Iran's ransomware proxies and the collapse of the line between crime and state power- 217

Beijing's Deniable Army: A Breach in Rome and a Warrant in Washington- 216

Belarus's Oldest Digital Weapon Returns to Kyiv- 215

The ShinyHunters Playbook: One Extortion Crew, Four Industries, One Spring- 214

MuddyWater's Double Game: Iran's Cyber Unit Trades Precision for Reach- 213

The Bilateral Cyber War: APT28's Persistent Reach and Ukraine's Offensive Doctrine- 212

From Disruption to Destruction: Russia's Escalating War on European Infrastructure- 211

The 8200 Pipeline: How Israel's Military Intelligence Became the Architecture of Global Cybersecurity- 210

Sep

Fifteen Years in the Making: The Sentencing of Ransomwareas- a-Service's Original Architect- 309

August 7, 2026 When a US federal judge in the Eastern District of Virginia sentenced Maksim Silnikau to 16 years

04 Sep 2026

3 min read

Sep

A Familiar Hand, A New Weapon: Storm-1175 Steps Out From Medusa's Shadow- 308

August 11, 2026 A ransomware group going quiet for four months usually means one of two things: law enforcement caught

04 Sep 2026

5 min read

Sep

New Name, Same Playbook: How a Vishing Crew Climbed From Retail to Wall Street in 18 Months- 307

August 11, 2026 A criminal group that spent early 2025 attacking retail and hospitality chains does not, under ordinary circumstances,

04 Sep 2026

6 min read

Sep

The Whole Pipeline: How Breached Data Becomes Cash, Leverage, and Sextortion Material- 306

August 13, 2026 A data breach is usually reported as a single event — a company discloses an intrusion, a number

04 Sep 2026

7 min read

Sep

The Authentic Trap: How H1 2026's Scam Campaigns Learned to Borrow Trust Instead of Faking It- 305

August 15, 2026 Security vendors publish threat reports constantly, and most of them read the same way: a pie chart

04 Sep 2026

4 min read

Sep

Up, Down, and Sideways: What Three Ransomware Trend Claims in One Week Actually Measure- 304

August 9, 2026 Three pieces of ransomware reporting circulated within days of each other this month, and a reader skimming

04 Sep 2026

4 min read

Sep

The Long Gap: What Five Healthcare Breaches Reveal About Who's Actually Watching- 303

August 9, 2026 Five healthcare-linked data breaches surfaced in the same few weeks of reporting, and no two of

04 Sep 2026

6 min read

Sep

One Regime, Four Fronts: Inside North Korea's Parallel Cyber Enterprise- 302

August 8, 2026 It would be easier to track North Korea's state-linked cyber activity if it all

04 Sep 2026

7 min read

Sep

Seeing Is No Longer Believing: How Synthetic Media Weaponizes Trust in Two Unrelated Worlds- 301

August 8, 2026 A flooded province in southern China and a subscription platform for adult content creators would seem to

04 Sep 2026

4 min read

Aug

Ship First, Secure Later: AI Productivity Tools Are Outrunning Their Own Guardrails- 300

August 10, 2026 In the first half of 2026 alone, ESET's researchers catalogued nearly 900,000 distinct "

27 Aug 2026

7 min read

Featured articles

Fifteen Years in the Making: The Sentencing of Ransomwareas- a-Service's Original Architect- 309

A Familiar Hand, A New Weapon: Storm-1175 Steps Out From Medusa's Shadow- 308

New Name, Same Playbook: How a Vishing Crew Climbed From Retail to Wall Street in 18 Months- 307

The Whole Pipeline: How Breached Data Becomes Cash, Leverage, and Sextortion Material- 306

The Authentic Trap: How H1 2026's Scam Campaigns Learned to Borrow Trust Instead of Faking It- 305

Up, Down, and Sideways: What Three Ransomware Trend Claims in One Week Actually Measure- 304

The Long Gap: What Five Healthcare Breaches Reveal About Who's Actually Watching- 303

One Regime, Four Fronts: Inside North Korea's Parallel Cyber Enterprise- 302

Seeing Is No Longer Believing: How Synthetic Media Weaponizes Trust in Two Unrelated Worlds- 301

Ship First, Secure Later: AI Productivity Tools Are Outrunning Their Own Guardrails- 300

The Student Becomes the Weapon: Inside China's Program to Distill Western AI Into Military Tools- 299

Hands Off the Wheel: China's Shift to Autonomous AI-Run Cyberattacks- 298

The Long Wire: How Beijing Builds Access That Outlasts Its Cover Stories- 297

Borrowed Trust: How Moscow Turns Everyday Software Into an Access Network- 296

The Maintenance Excuse: Zbtlink, the National Intelligence Law, and the Case Against Trusting Chinese Router Firmware- 295

Beneath the Waterline: Iran's Deniable Campaign Against America's Weakest Infrastructure- 294

The weak link in modern warfare: Russia's FSB quietly walking through the world's routers- 293

A blank marketing email as a spy's front door: how suspected Chinese operators are quietly reading university mailboxes- 285

When cybercrime borrows a spy's toolkit: the UAT-11795 campaign hiding inside everyday software- 292

A parking-lot camera as a weapon of war: how Russia turned Europe's own infrastructure into a targeting network- 291

One police force, two foreign intelligence services: how China and India ended up spying on the same Pakistani database- 290

A breach at the edge, reassurance at the center: what actually leaked from India's largest nuclear plant- 289

Washington widens its warning as Iran's cyber-physical reach grows — and its own threats escalate-288

Four years in, Russia's propaganda machine turns back toward its old targets- 287

The hacktivist who helped a hacker flee: inside Spain's arrest of a pro-Russia network operative- 286

Russia's silent reach into the world's mailboxes- 284

Tax season as an attack surface: how a suspected Chinese hacking cluster is running parallel RAT campaigns across India, Japan, and China- 283

When the watchdog gets watched: Pegasus inside the European Parliament's own spyware inquiry- 282

Iran's quiet war inside Israel's networks- 281

FortiBleed and the anatomy of an unforced error: how 86,000 stolen passwords, not a software flaw, opened Foreign Office networks, NHS suppliers, and global shipping to the same campaign- 280

Ten months in the dark: how a breach of South Korea's diplomatic training platform became a five-month secret before it became a public one- 279

Nichirei and the price of ambiguity: what the RansomHouse extortion of Japan's cold-chain giant reveals about a widening pattern of unattributed pressure on Japanese industry- 278

Canada's Signals Intelligence Agency Turns Its Offensive Toolkit on Criminal Networks, Not Just State Adversaries- 277

What Medtronic's Own Notice Leaves Unsaid: A Breach, an Extortion Claim, and a Company That Won't Connect the Two- 276

Fifteen Years, Nine Countries: The EU and UK Name the FSB Behind Europe's Infrastructure Sabotage Campaign- 275

When the Operator Became the Model: JadePuffer and the Collapse of Ransomware's Skill Floor- 274

When the Attacker Stops Being Human: Two July 2026 Cases Mark the Shift to AI-Operated Offensive Cyber Campaigns- 273

Israel's bid to own the agentic security frontier- 272

Washington Recasts Pig-Butchering as a National-Security Problem: Inside the $43 Million Network That Fed China-Bound Laundering Pipelines- 271

Bulletproof No Longer: The Unsealing of the Media Land Indictment- 270

When the Basics Fail: FSB Center 16's Router Campaign and the West's First Joint Cyber Sanctions Response- 269

When the Bottling Line Goes Dark: Coca-Cola's Fairlife Ransomware Incident and the Limits of Early Disclosure- 268

Old Protocol, New War: How Iran Tracked US Military Phones Through a 1970s Telecom Flaw- 267

Hardening the Metal Beneath the Model: Why AI Data Centers Are Outrunning Their Own Security- 266

Hacking Like It's 1999: Why Operational Technology Security Plays by Different Rules- 265

Trusting the Untrusted: How 6 GHz Wi-Fi's Traffic Cop Could Be Turned Against Critical Infrastructure- 264

Digital Growth, Deepening Exposure: Nigeria's Race to Regulate a Rising Cybercrime Economy- 263

Following the Money: Inside the Takedown of a €140 Million Iberian Fraud Network- 262

Past the Perimeter: Why Identity, Not Exploits, Now Drives Ransomware- 261

Free Hosting, Weaponized: How 148 npm Packages Turned Students' Browsers Into a Botnet- 260

A Quiet Patch with a Familiar Shape: 7-Zip's Latest Reminder About Archive Trust- 259

Trust as the Attack Surface: Inside the ClickFix Campaigns Powering ACR Stealer- 258

Listening to the Seabed: Denmark's Bet on Acoustic Sensing as a First Line of Maritime Defense- 257

Beneath the Radar: A Reawakened Espionage Toolkit Targets Southeast Asian Governments- 256

The Certificate Authority's Blind Spot: How a Trusted Signing Chain Became a Weapon- 255

The ransomware gang that used a training-data BTC address by mistake was actually the AI's mistake- 254

A breach nobody's attributed yet, hitting the platform that's coordinating World Cup security- 253

North Korea just made its malware payload host itself on the blockchain- 252

The lawyers MSG banned with facial recognition are now the plaintiffs suing over it - 251

Anubis's real innovation isn't the ransomware — it's making destruction irreversible- 250

China-Linked CL-STA-1062 Shifts From Taiwan to Critical Infrastructure Across Southeast Asia- 249

The Microsoft bug leaker treating vulnerability disclosure as a countdown- 248

When "unauthorized AI app" becomes an SEC disclosure category of its own- 247

The worm that infects the tools developers trust to catch it- 246

A malware sample built for single-core Windows XP may be the first cyberweapon ever found- 245

ClawSwarm proves you can hijack an AI agent without writing a single line of malware- 244

Ten months later, nobody knows why Huawei routers took down Luxembourg's phone network- 243

THORChain's breach is a rounding error in 2026's record year for crypto theft- 242

Operation Ramz shows where Southeast Asia's scam compounds go when they get shut down- 241

Turla's botnet redesign is about surviving disruption, not just evading detection- 240

Three times through the same door: FamousSparrow's patient campaign against Azerbaijan's energy sector- 239

Device code phishing didn't need new code — it needed a legitimate Microsoft login flow- 238

London's police made 700,000 data requests last year. Nobody had to ask a judge- 237

Europe wrote the rules for surveillance exports, then left its own member states to enforce them-236

The FTC just proved a settlement can end a data broker's harm without ending its punishment- 235

An unclaimed breach at a critical drug-packaging supplier tests healthcare's newest fault line- 234

A single breach at Foxconn just exposed how concentrated the electronics supply chain really is- 233

When a ransomware gang gets ransomware'd: what The Gentlemen's leak reveals about the RaaS economy- 232

WannaCry at nine years: the day a stolen NSA tool became a lesson in negligence- 231