Medusa's Affiliate Model Hits Full Stride: 500 Critical-Infrastructure Victims and a Hint of Cracks Beneath- 339
August 20, 2026
An updated federal advisory on the Medusa ransomware-as-a-service operation reads less like a warning
From Leaked Code to RaaS Empire: Inside the Gunra Ransomware Warning- 325
August 13, 2026
US federal agencies and South Korea's National Police Agency issued a joint advisory this month
No Single Actor Controls Enough to Be Deterred: Why Law Enforcement Keeps Losing the Cybercrime Race- 323
August 7, 2026
At Black Hat USA 2026, Carole House, CEO of Penumbra Strategies and a senior fellow at the
Borrowed Trust: How Moscow Turns Everyday Software Into an Access Network- 316
August 6, 2026
A fake job offer, a hijacked hotel Wi-Fi login, a criminal marketplace listing, and an advertising
You Don't Have to Hack In, You Just Have to Log In: Phishing's New Engineering Problem- 315
August 6, 2026
For twenty years, phishing's basic engineering problem was getting a password. Multifactor authentication and email-
Fifteen Years in the Making: The Sentencing of Ransomwareas- a-Service's Original Architect- 309
August 7, 2026
When a US federal judge in the Eastern District of Virginia sentenced Maksim Silnikau to 16 years
A Familiar Hand, A New Weapon: Storm-1175 Steps Out From Medusa's Shadow- 308
August 11, 2026
A ransomware group going quiet for four months usually means one of two things: law enforcement caught
New Name, Same Playbook: How a Vishing Crew Climbed From Retail to Wall Street in 18 Months- 307
August 11, 2026
A criminal group that spent early 2025 attacking retail and hospitality chains does not, under ordinary circumstances,