Medusa's Affiliate Model Hits Full Stride: 500 Critical-Infrastructure Victims and a Hint of Cracks Beneath- 339
August 20, 2026
An updated federal advisory on the Medusa ransomware-as-a-service operation reads less like a warning
A Chinese Ransomware Crew Swaps Tools, Not Tactics: Storm-1175's Pivot to StormEncryptor Exposes the Fragility of the MSP Layer- 338
August 16, 2026
For a financially motivated hacking crew that had gone quiet since April, the reappearance of Storm-1175
Berlin's No: A Ransomware Extortion Collides With a State Election- 332
September 2, 2026
A city-state government's refusal to pay a ransom is rarely news in itself; what
A Federal Law Enforcement Agency Learns of Its Own Breach From a Leak Site- 331
September 1, 2026
When the Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed on August 26 that it was responding
The Airport That Underestimated Its Own Breach- 329
September 1, 2026
When Manchester Airports Group disclosed on August 27 that a cyberattack had touched the records of 8.
From Leaked Code to RaaS Empire: Inside the Gunra Ransomware Warning- 325
August 13, 2026
US federal agencies and South Korea's National Police Agency issued a joint advisory this month
No Single Actor Controls Enough to Be Deterred: Why Law Enforcement Keeps Losing the Cybercrime Race- 323
August 7, 2026
At Black Hat USA 2026, Carole House, CEO of Penumbra Strategies and a senior fellow at the
Borrowed Trust: How Moscow Turns Everyday Software Into an Access Network- 316
August 6, 2026
A fake job offer, a hijacked hotel Wi-Fi login, a criminal marketplace listing, and an advertising
You Don't Have to Hack In, You Just Have to Log In: Phishing's New Engineering Problem- 315
August 6, 2026
For twenty years, phishing's basic engineering problem was getting a password. Multifactor authentication and email-
The Trust Multiplier: When One Vendor's Compromise Becomes Everyone's- 314
August 15, 2026
Three supply-chain compromises surfacing in the same stretch of reporting share nothing in terms of victim,
