Cyberattacks
-
SonicWall investigating possible zero-day related to firewall attacks
Researchers recently warned about a surge in Akira ransomware attacks linked to a potential SonicWall vulnerability.
By David Jones • Aug. 5, 2025 -
AI is helping hackers automate and customize cyberattacks
CrowdStrike’s annual cyber-threat-hunting report reveals the double threat that AI poses to many businesses.
By Eric Geller • Aug. 4, 2025 -
Ransomware spike linked to potential zero-day flaw in SonicWall devices
Researchers say hackers using the Akira ransomware strain may be exploiting the vulnerability en masse.
By David Jones • Updated Aug. 4, 2025 -
Ransomware gangs capitalize on law enforcement takedowns of competitors
After authorities dismantled LockBit and RansomHub, other groups rushed in to snatch up their affiliates, according to a new report that highlights a cybercrime ecosystem in flux.
By Eric Geller • July 31, 2025 -
What we know about the cybercrime group Scattered Spider
The notorious hacker collective has attracted the attention of government authorities in several nations around the globe.
By David Jones • July 30, 2025 -
‘Shadow AI’ increases cost of data breaches, report finds
Companies are failing to protect their AI tools from compromise, often leading to more extensive data breaches, according to new data from IBM.
By Eric Geller • July 30, 2025 -
FBI, CISA warn about Scattered Spider’s evolving tactics
International authorities are pursuing the group following the arrests of four suspects in a series of attacks targeting British retailers.
By David Jones • July 29, 2025 -
Ransomware attacks against oil and gas firms surge
Manufacturing remains the No. 1 ransomware target, new data from Zscaler shows.
By Eric Geller • July 29, 2025 -
Sponsored by ThreatLocker
Emerging cybersecurity needs: What the market is telling us
Default-deny, strict controls, and real-time monitoring: how to stop threats before they start.
By Yuriy Tsibere, Product Manager and Business Analyst, ThreatLocker • July 28, 2025 -
What we know about the Microsoft SharePoint attacks
State-linked hackers and ransomware groups are targeting SharePoint customers across the globe.
By David Jones • July 24, 2025 -
Clorox files $380 million suit blaming Cognizant for 2023 cyberattack
The attack, linked to Scattered Spider, disrupted production of household cleaners and other goods.
By David Jones • July 23, 2025 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
SharePoint hacking campaign affects hundreds of systems worldwide
CISA is responding to potential compromises at federal agencies and various state and local entities.
By David Jones • Updated July 23, 2025 -
Microsoft sees China-backed nation-state hackers among adversaries targeting SharePoint
The company urged customers to apply security updates as security researchers warn of escalating attacks.
By David Jones • July 22, 2025 -
Ransomware attacks in education jump 23% year over year
Education was the fourth-most-targeted sector during the first half of 2025, according to a report from Comparitech.
By Briana Mendez-Padilla • July 22, 2025 -
Deep Dive
Dwindling federal cyber support for critical infrastructure raises alarms
A plan to transfer cybersecurity and resilience responsibilities to states could have major unintended consequences.
By Eric Geller • July 22, 2025 -
AI-powered attacks rise as CISOs prioritize AI security risks
Security executives are concerned about flaws in AI agents but also eager to see them replace humans in some roles, according to a new report.
By Eric Geller • July 17, 2025 -
UNFI expects cyberattack to cost it at least $350 million in sales
Operations at the grocery distributor, whose customers include Whole Foods, have largely returned to normal, the company said.
By Sam Silverstein • July 16, 2025 -
Threat actor targets end-of-life SonicWall SMA 100 appliances in ongoing campaign
The hacker has deployed a backdoor to modify the boot process and has exploited several different vulnerabilities during the attack spree.
By David Jones • July 16, 2025 -
Businesses are overconfident as mobile phishing scams surge
Nearly six in 10 companies experienced incidents because of voice or text phishing attacks that led to executive impersonation, according to a new report from Lookout.
By Eric Geller • July 11, 2025 -
Ingram Micro restores global operations following hack
The company is still assessing the full impact of the ransomware attack, which has been linked to the SafePay hacker group.
By David Jones • July 10, 2025 -
UK authorities arrest 4 people in probe of retail cyberattack spree
The arrests mark the first major break in a case linked to the Scattered Spider cybercrime group, although additional work continues with multiple agencies.
By David Jones • Updated July 10, 2025 -
Iran-linked hackers target US transportation, manufacturing firms
U.S. authorities have been warning of potential state-linked or hacktivist threats since the country intervened in the Israel-Iran war.
By Eric Geller • July 9, 2025 -
M&S chairman calls for mandatory disclosure of material cyberattacks
The chairman testified before British lawmakers following a major social-engineering attack on the department-store chain.
By David Jones • July 9, 2025 -
Qantas says cyberattack affected 5.7 million customers
The incident follows a notorious hacker gang’s pivot to targeting transportation companies with its trademark social-engineering attacks.
By David Jones • July 9, 2025 -
Ingram Micro makes progress on restoring operations following attack
An attack linked to the ransomware gang SafePay has disrupted certain fulfillment capabilities.
By David Jones • July 8, 2025