Threats, Cyberattacks & Vulnerabilities
Top Stories
-
Tip
29 Jul 2026
What to know about deepfake phishing simulation software
Deepfake phishing simulation software uses AI to probe organizational resistance to state-of-the-art social engineering attacks. Learn why they should be on CISOs' radar. Continue Reading
-
News
23 Jul 2026
OpenAI models escape containment, hack Hugging Face
In an unprecedented -- and unintended -- cyberattack, frontier AI models autonomously escaped their contained testing environment and breached another company's systems. Continue Reading
-
Tip
22 Jul 2026
OpenClaw security best practices for CISOs
OpenClaw introduces huge risks to enterprises, but employee adoption might be inevitable -- whether CISOs sanction it or not. Here's how to enable safer deployments. Continue Reading
-
News
17 Jul 2026
Industry reacts to Gold Eagle vulnerability management plan
As AI-discovered software vulnerabilities accumulate at an unprecedented pace, security pros say they hope Gold Eagle creates some order from the chaos. Continue Reading
-
Tip
14 Jul 2026
Building cyber-resilient AI in the enterprise
AI attacks and breaches hit differently than traditional attacks, and therefore require more than traditional controls. The best defense requires planning for cyber-resilience. Continue Reading
-
News
10 Jul 2026
ClickFix and removable media lead malware delivery methods
Now more than ever, defenders must look for suspicious behavior, not specific malware. Learn how to defend against two trending initial access methods. Continue Reading
-
Video
10 Jul 2026
Edtech gets schooled by third-party cyberthreats
Why are educational institutions easy targets for cybercriminals? Uncover the reality of edtech security, recent breaches and what schools must do. Continue Reading
-
News
08 Jul 2026
First fully agentic ransomware attack sparks readiness concerns
An AI model's autonomous execution of a complete ransomware operation marks a new era. Learn why experts say rapid detection and response, not revolutionary defenses, are key. Continue Reading
-
Tip
17 Jun 2026
The OpenClaw security risks every CISO needs to know
The business case for OpenClaw is clear, but so are the security risks. Learn why a cybersecurity expert says deployments are putting enterprises in real danger. Continue Reading
-
Feature
11 Jun 2026
The prosecution gap: Why cybercrimes go unpunished
Are cybersecurity criminals simply acting with impunity? It sometimes feels like it. Learn what defenders need to know and what investigators are doing about it. Continue Reading
-
News
10 Jun 2026
AI in cyberdefense: Learning from threat actors' playbooks
At the Gartner Cybersecurity and Risk Management Summit 2026, security professionals learned how to use AI to counter the AI-fueled cyberattacks directed against them. Continue Reading
-
Feature
27 May 2026
Inside business email compromise attacks: Real-world examples
From tech giants to nonprofits, no organization is immune to trust-eroding business email compromise attacks. Learn more about BEC scams and the fallout when employees get tricked. Continue Reading
-
News
22 May 2026
Verizon 2026 DBIR: 6 key takeaways for CISOs
The 2026 DBIR -- practically required reading for CISOs -- identifies critical enterprise security trends, from exploit-driven breaches to shadow AI dangers and third-party risks. Continue Reading
-
News
08 May 2026
News brief: Security worries and warnings as AI use expands
Check out the latest security news from TechTarget SearchSecurity's sister sites, Cybersecurity Dive and Dark Reading. Continue Reading
-
News
01 May 2026
News brief: Critical infrastructure, OT cybersecurity attacks
Check out the latest security news from TechTarget SearchSecurity's sister sites, Cybersecurity Dive and Dark Reading. Continue Reading
-
Feature
20 Apr 2026
Cybersecurity in the age of AI means bigger, faster threats
Cybersecurity professionals at SecureWorld Boston had a lot to say about identity management, AI threats and the challenges they face in achieving real-time visibility. Continue Reading
-
News
10 Apr 2026
News brief: Iranian cyberattacks target U.S. water, energy
Check out the latest security news from TechTarget SearchSecurity's sister sites, Cybersecurity Dive and Dark Reading. Continue Reading
-
Feature
07 Apr 2026
Agentic AI's role in amplifying and creating insider risks
AI agents might just outdo humans in causing insider risk chaos. From employees using shadow AI to rogue agents, it's time to keep humans and machines in check. Continue Reading
-
News
03 Apr 2026
News brief: Iran cyberattacks escalate, U.S. targets named
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
27 Mar 2026
News brief: U.S. absence at RSAC sparks leadership concerns
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
20 Mar 2026
News brief: Stryker recovering after large-scale cyberattack
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
19 Mar 2026
What AI zero days mean for enterprise cybersecurity
AI's ability to find and exploit high-severity zero days at speed and scale presents both attackers and defenders with game-changing opportunity. Here's what CISOs should know. Continue Reading
-
News
13 Mar 2026
News brief: Risk of Iran-backed cyberattacks rising in U.S.
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
06 Mar 2026
News brief: Strikes on Iran put cybersecurity teams on alert
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Feature
10 Feb 2026
Top 10 ransomware targets by industry
In any given year, certain industries seem to make more attractive targets for ransomware groups. But no single sector shoulders all -- or even most -- of the risk. Continue Reading
-
News
30 Jan 2026
News brief: Patch critical and high-severity vulnerabilities now
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
23 Jan 2026
News brief: Email scams highlight need for employee vigilance
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
16 Jan 2026
News brief: Security flaws put thousands of systems at risk
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Feature
06 Jan 2026
Ransomware trends, statistics and facts in 2026
Supply chain attacks, triple extortion, GenAI and RaaS are some of the ransomware trends that will continue to disrupt businesses in 2026. Is your industry a top target? Continue Reading
-
Tip
29 Dec 2025
Top web app security vulnerabilities and how to mitigate them
These common web application vulnerabilities have been thorns in the side of IT security for years. They are not new -- and neither are their fixes. Continue Reading
-
News
19 Dec 2025
News brief: Browser security flaws pose growing risk
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
05 Dec 2025
News brief: RCE flaws persist as top cybersecurity threat
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
21 Nov 2025
News brief: U.S. cyberdefenses take aim at foreign threats
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
31 Oct 2025
News brief: Nation-state threats evolve and escalate
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
17 Oct 2025
News brief: National cyberdefenses under mounting pressure
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
03 Oct 2025
News brief: Cybersecurity weakened by government shutdown
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
26 Sep 2025
What to know about 5G security threats in the enterprise
Learn about key 5G security threats facing enterprises, plus practical defense strategies for CISOs. Continue Reading
-
News
19 Sep 2025
News brief: KillSec, Yurei score successful ransomware attacks
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Definition
12 Sep 2025
What is a stealth virus and how does it work?
A stealth virus is a computer virus that uses various mechanisms to avoid detection by antivirus software. Continue Reading
-
Tip
27 Aug 2025
How AI malware works and how to defend against it
AI malware is evolving faster than traditional defenses. Learn how attackers weaponize AI and how organizations can implement effective countermeasures. Continue Reading
-
News
08 Aug 2025
Black Hat news: Exposed vaults, firmware flaws, AI hacks
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tutorial
01 Aug 2025
How to use the John the Ripper password cracker
Password crackers are essential tools in any pen tester's toolbox. This step-by-step tutorial explains how to use John the Ripper, an open source offline password-cracking tool. Continue Reading
-
News
01 Aug 2025
News brief: Rise of AI exploits and the cost of shadow AI
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
31 Jul 2025
How liveness detection catches deepfakes and spoofing attacks
Biometric liveness detection can stop fake users in their tracks. Learn how the technology works to distinguish real humans from deepfakes and other spoofing attacks. Continue Reading
-
News
25 Jul 2025
News brief: SharePoint attacks hammer globe
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
18 Jul 2025
News brief: Cyberattack trends signal security arms race
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
News
11 Jul 2025
News brief: Hafnium, Scattered Spider hackers arrested
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Video
30 Jun 2025
Ransomware: Examples, prevention and mitigating the damage
Top cybersecurity experts gathered to discuss the latest threats from ransomware and how organizations, large and small, can prevent or, at least, mitigate an attack. Continue Reading
-
Definition
27 Jun 2025
What is phishing? Understanding enterprise phishing threats
Phishing is a fraudulent practice in which an attacker masquerades as a reputable entity or person to trick users into revealing sensitive information. Continue Reading
-
Tip
26 Jun 2025
12 smart contract vulnerabilities and how to mitigate them
Smart contracts execute tasks automatically when specific events occur, and they often handle large data and resource flows. This makes them particularly attractive to attackers. Continue Reading
-
Definition
23 Jun 2025
What is a SYN flood DoS attack?
A SYN flood attack is a type of denial-of-service (DoS) attack on a computer server. This exploit is also known as a 'half-open attack.' Continue Reading
-
Tip
23 Jun 2025
What is a cyberattack? 16 common types and how to prevent them
To stop cybercrime, companies must understand how they're being attacked. Here are the most damaging types of cyberattacks, how to prevent them and their effect on daily business. Continue Reading
-
News
20 Jun 2025
News brief: LOTL attacks, spoofed sites, malicious repositories
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tutorial
16 Jun 2025
Hydra password-cracking tool: How to download and use it for good
Ethical hackers, need help brute forcing passwords? Learn how to download and use the open source Hydra password-cracking tool with this step-by-step tutorial and companion video. Continue Reading
-
Tip
10 Jun 2025
Enumeration attacks: What they are and how to prevent them
User and network enumeration attacks help adversaries plan strong attack campaigns. Prevent them with MFA, rate limiting, CAPTCHA, secure code and more. Continue Reading
-
Tip
10 Jun 2025
12 common types of malware attacks and how to prevent them
More than one billion active malware programs exist worldwide. Is your organization prepared to prevent these 12 types of malware attacks? Continue Reading
-
Definition
06 Jun 2025
What is cyber extortion?
Cyber extortion is a crime involving an attack or threat of an attack, coupled with a demand for money or some other response, in return for stopping an attack or preventing one from happening. Continue Reading
-
Definition
05 Jun 2025
What is the WannaCry ransomware attack?
WannaCry ransomware is a cyberattack that spread by exploiting vulnerabilities in earlier and unpatched versions of the Windows operating system (OS). Continue Reading
-
Definition
30 May 2025
What is triple extortion ransomware?
Triple extortion ransomware is a type of ransomware attack in which a cybercriminal extorts their victim multiple times -- namely by encrypting data, exposing exfiltrated data and then threatening an additional third attack vector. Continue Reading
-
News
30 May 2025
News brief: Week's top breaches stem from third-party attacks
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Definition
28 May 2025
What is double extortion ransomware? How to defend your organization
Double extortion ransomware is a type of cyberattack that encrypts a victim's data, like in a traditional ransomware attack, while also adding a second attack vector of stealing that data. Continue Reading
-
News
16 May 2025
News brief: Patch critical SAP, Samsung and chat app flaws now
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
02 May 2025
15 of the biggest ransomware attacks in history
From attacks on private organizations and manufacturers to healthcare organizations and even entire countries, ransomware has done extensive damage in recent years. Continue Reading
-
Feature
01 May 2025
4 lessons in the new era of AI-enabled cybercrime
Cyberattacks have evolved rapidly as GenAI use has become more widespread. An RSAC Conference 2025 panel shared what they've learned over the past two years. Continue Reading
-
Definition
23 Apr 2025
What is ransomware? Definition and complete guide
Ransomware is malware that locks and encrypts a victim's data, files, devices or systems, rendering them inaccessible and unusable until the attacker receives a ransom payment. Continue Reading
-
Definition
22 Apr 2025
What is crypto ransomware?
Crypto ransomware is a form of ransomware that uses cryptography to encrypt computer files so that the victim cannot access them. In exchange for the demanded ransom, the attacker claims it will tell the victimized business how to regain access to the stolen data. Continue Reading
-
Definition
21 Apr 2025
What is a brute-force attack?
A brute-force attack is a trial-and-error hacking method cybercriminals use to decode login information and encryption keys to gain unauthorized access to systems. Continue Reading
-
Tip
21 Apr 2025
Top 5 ransomware attack vectors and how to avoid them
Protecting your organization against ransomware attack entryways could mean the difference between staying safe or falling victim to a devastating breach. Continue Reading
-
Feature
18 Apr 2025
The history and evolution of ransomware attacks
Ransomware creators have become more innovative and savvier as organizations up their defenses. Continue Reading
-
Feature
14 Apr 2025
8 types of ransomware, plus examples of attacks
There are eight main types of ransomware but hundreds of examples of ransomware strains. Learn how the ransomware types work and review notable attacks and variants. Continue Reading
-
Feature
09 Apr 2025
QR code phishing: 14 quishing prevention tips
Quishing is an offputting word for an on-the-rise attack method. Learn how to defend against it. Continue Reading
-
Definition
08 Apr 2025
What is a side-channel attack?
A side-channel attack is a cybersecurity exploit that aims to gather information from or influence a system's program execution. It does this by measuring or exploiting indirect effects of the system or its hardware rather than directly targeting the program or its code. Continue Reading
-
Definition
31 Mar 2025
What is a hacker?
A hacker is an individual who uses computer, networking or other skills to overcome a technical problem. Continue Reading
-
News
28 Mar 2025
News brief: China-linked APTs and Russian access broker
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Feature
20 Mar 2025
3 types of deepfake detection technology and how they work
Think you're talking to your boss on Zoom? You might want to think again. Deepfake technology has already cost enterprises millions of dollars. Here's how to fight fire with fire. Continue Reading
-
Definition
14 Mar 2025
What is pharming?
Pharming is a scamming practice in which malicious code is installed on a PC or server, misdirecting users to fraudulent websites without their knowledge or consent. Continue Reading
-
Feature
13 Mar 2025
10 biggest data breaches in history, and how to prevent them
Did you know the biggest data breach in history exposed a whopping 3 billion user records? Don't make the same mistakes these companies did in the largest data breaches in history. Continue Reading
-
Definition
13 Mar 2025
What is a pass-the-hash attack?
A pass-the-hash attack is an exploit in which an attacker steals a hashed user credential and -- without cracking it -- reuses it to trick an authentication system into creating a new authenticated session on the same network. Continue Reading
-
Definition
11 Mar 2025
What is a rootkit?
A rootkit is a program or a collection of malicious software tools that give a threat actor remote access to and control over a computer or other system. Continue Reading
-
Definition
03 Mar 2025
What is cyberstalking and how to prevent it?
Cyberstalking is a crime in which someone harasses or stalks a victim using electronic or digital means, such as social media, email, instant messaging (IM) or messages posted to a discussion group or forum. Continue Reading
-
News
28 Feb 2025
Microsoft targets AI deepfake cybercrime network in lawsuit
Microsoft alleges that defendants used stolen Azure OpenAI API keys and special software to bypass content guardrails and generate illicit AI deepfakes for payment. Continue Reading
-
Definition
28 Feb 2025
What is the NSA and how does it work?
The National Security Agency (NSA) is a federal government surveillance and intelligence agency that's part of the U.S. Department of Defense and is managed under the authority of the director of national intelligence (DNI). Continue Reading
-
Definition
28 Feb 2025
What is a watering hole attack?
A watering hole attack is a security exploit in which the attacker seeks to compromise a specific group of end users by infecting websites that members of the group are known to visit. Continue Reading
-
News
27 Feb 2025
FBI: Lazarus Group behind $1.5 billion Bybit heist
Researchers say the heist, in which North Korean state-sponsored hackers stole funds from a cold wallet, is the biggest theft in the history of the cryptocurrency industry. Continue Reading
-
Definition
27 Feb 2025
What is domain generation algorithm (DGA)?
A domain generation algorithm (DGA) is a program that generates a large list of domain names. DGAs provide malware with new domains to evade security countermeasures. Continue Reading
-
News
27 Feb 2025
CrowdStrike: China hacking has reached 'inflection point'
In its 2025 Global Threat Report, CrowdStrike observed an increase in China's cyber capabilities, with a focus on espionage and 'pre-positioning' itself in critical environments. Continue Reading
-
News
26 Feb 2025
NCC Group tracks alarming ransomware surge in January
NCC Group found ransomware activity in January surpassed previous monthly highs with 590 attacks, as one notorious gang experienced a notable resurgence. Continue Reading
-
News
25 Feb 2025
Black Basta ransomware leak sheds light on targets, tactics
VulnCheck found the ransomware gang targeted CVEs in popular enterprise products from Microsoft, Citrix, Cisco, Fortinet, Palo Alto Networks, Confluence Atlassian and more. Continue Reading
-
News
25 Feb 2025
Dragos: Ransomware attacks against industrial orgs up 87%
Ransomware attacks continue to be a major pain point for industrial organizations, as the sector has historically struggled with vulnerability management. Continue Reading
-
News
21 Feb 2025
Palo Alto Networks vulnerabilities exploited in chained attack
The cybersecurity vendor urges customers to take immediate action to mitigate recently disclosed vulnerabilities that are being actively exploited in the wild. Continue Reading
-
Podcast
20 Feb 2025
Risk & Repeat: Salt Typhoon hasn't stopped hacking
Although the Salt Typhoon telecom breaches from last year appear to have been remediated, the Chinese state-sponsored threat group continues to target critical organizations. Continue Reading
-
News
20 Feb 2025
CISA, FBI warn of Ghost/Cring ransomware attacks
Ghost is a China-based financially motivated ransomware group that has launched attacks against organizations in more than 70 countries -- including its own. Continue Reading
-
Definition
19 Feb 2025
What is an attack vector?
An attack vector is a path or means by which an attacker or hacker can gain access to a computer or network server to deliver a payload or malicious outcome. Continue Reading
-
Definition
19 Feb 2025
What is email spoofing?
Email spoofing is a form of cyber attack in which a hacker sends an email that has been manipulated to seem as if it originated from a trusted source. Continue Reading
-
News
18 Feb 2025
Palo Alto Networks PAN-OS vulnerability exploited in the wild
Palo Alto Networks says threat actors used a publicly available PoC exploit in attack attempts against firewall customers with PAN-OS management interfaces exposed to the internet. Continue Reading
-
Definition
18 Feb 2025
What are social engineering attacks?
Social engineering is an attack vector that relies heavily on human interaction and often involves psychological manipulation of people into breaking normal security procedures and best practices to gain unauthorized access. Continue Reading
-
Definition
18 Feb 2025
What is a botnet?
A botnet is a collection of internet-connected devices -- including PCs, servers, mobile devices and internet of things (IoT) devices -- infected and controlled by a common type of malware, often unbeknownst to their owners. Continue Reading
-
News
13 Feb 2025
Salt Typhoon compromises telecom providers' Cisco devices
Salt Typhoon's latest campaign exploits older vulnerabilities in Cisco edge devices to gain access to the networks of several telecom companies, including two based in the U.S. Continue Reading
-
Definition
13 Feb 2025
What is a denial-of-service attack?
A denial-of-service (DoS) attack is a security threat that occurs when an attacker makes it impossible for legitimate users to access computer systems, networks, services or other IT resources. Continue Reading
-
Definition
12 Feb 2025
What is cyber hijacking?
Cyber hijacking, or computer hijacking, is a type of network security attack in which the threat actor takes control of computer systems, software programs and network communications. Continue Reading
-
News
11 Feb 2025
Apple zero day used in 'extremely sophisticated attack'
CVE-2025-24200 is a zero-day vulnerability that bypasses Apple's USB Restricted Mode in iPhones and iPads and was exploited in the wild against 'specific targeted individuals.' Continue Reading
-
News
10 Feb 2025
Trimble Cityworks zero-day flaw under attack, patch now
CVE-2025-0994 is a high-severity deserialization vulnerability that enables remote code execution in unpatched versions of Cityworks enterprise asset management software. Continue Reading