Threats


  • Rendered image depicting global networks.
    Image attribution tooltip
    DKosig via Getty Images
    Image attribution tooltip

    Catastrophic cyber event could cause widespread disruptions to global infrastructure, study suggests

    The study by Munich Re and CyberCube also warned that the internet of things and large language models present near-term risks.  

    By July 15, 2025
  • A medical team takes a patient into the isolation ward in the emergency department of a full-service acute hospital facility.
    Image attribution tooltip
    Lisa Maree Williams via Getty Images
    Image attribution tooltip

    Risk management, legacy tech pose major threats to healthcare firms, report finds

    Companies have improved their recovery processes and user controls but still lag in risk preparedness, according to the report.

    By July 15, 2025
  • Empty interior of modern security system control room with workstations with multiple displays and big screens mounted on the wall. Explore the Trendline
    Image attribution tooltip
    .shock via Getty Images
    Image attribution tooltip
    Trendline

    Risk Management

    An esclation of cyber risks facing businesses and government has made cyber resilience a major priority. 

    By Cybersecurity Dive staff
  • Belk storefront.
    Image attribution tooltip
    Kaarin Vembar/Cybersecurity Dive
    Image attribution tooltip

    DragonForce hackers claim responsibility for Belk data breach

    The North Carolina-based retailer is the latest known victim in a spree of attacks in the U.K. and U.S.

    By July 15, 2025
  • Norfolk Southern train Bellevue Yard Ohio
    Image attribution tooltip

    Retrieved from Norfolk Southern 

    Image attribution tooltip

    Major railroad-signaling vulnerability could lead to train disruptions

    The high-severity flaw could let a hacker abruptly halt — and potentially derail — a train.

    By Updated July 14, 2025
  • A hand with a phone in it and laptop in frame.
    Image attribution tooltip

     

    Shutterstock / TippaPatt

    Image attribution tooltip

    Businesses are overconfident as mobile phishing scams surge

    Nearly six in 10 companies experienced incidents because of voice or text phishing attacks that led to executive impersonation, according to a new report from Lookout.

    By July 11, 2025
  • close up programmer man hand typing on keyboard laptop for register data system or access password at dark operation room , cyber security concept - stock photo
    Image attribution tooltip
    Chainarong Prasertthai via Getty Images
    Image attribution tooltip

    Ingram Micro restores global operations following hack

    The company is still assessing the full impact of the ransomware attack, which has been linked to the SafePay hacker group.

    By July 10, 2025
  • Harrods is one of three UK-based retail companies responding to a spree of attacks beginning in April 2025.
    Image attribution tooltip
    Hollie Adams via Getty Images
    Image attribution tooltip

    UK authorities arrest 4 people in probe of retail cyberattack spree

    The arrests mark the first major break in a case linked to the Scattered Spider cybercrime group, although additional work continues with multiple agencies.

    By Updated July 10, 2025
  • An Iranian flag hangs on the side of a damaged building
    Image attribution tooltip
    Majid Saeedi via Getty Images
    Image attribution tooltip

    Iran-linked hackers target US transportation, manufacturing firms

    U.S. authorities have been warning of potential state-linked or hacktivist threats since the country intervened in the Israel-Iran war.

    By July 9, 2025
  • Qantas plane
    Image attribution tooltip
    Scott Barbour via Getty Images
    Image attribution tooltip

    Qantas says cyberattack affected 5.7 million customers

    The incident follows a notorious hacker gang’s pivot to targeting transportation companies with its trademark social-engineering attacks.

    By July 9, 2025
  • Symbolic of Sino-American relations, the flag of the United States of America and the flag of the Republic of China fly together on flag poles next to each other on a sunny, windy day.
    Image attribution tooltip
    Stock via Getty Images
    Image attribution tooltip

    Suspected contractor for China’s Hafnium group arrested in Italy

    U.S. authorities charged the man and a co-conspirator with hacking COVID-19 researchers and kicking off a cyberattack spree targeting Microsoft Exchange servers. 

    By July 8, 2025
  • A general view of the exterior of the branch of retailer Marks and Spencer at Westfield White City on October 20, 2020 in London, England. Marks & Spencer said customer data was accessed in an April 2025 cyberattack.
    Image attribution tooltip
    Leon Neal via Getty Images
    Image attribution tooltip

    Scattered Spider poses serious risk to several hundred major companies

    A new report shows that a select group of large companies uses technologies that the hacker group often targets.

    By July 8, 2025
  • exclamation point depicted hovering above network infrastructure
    Image attribution tooltip
    Just_Super/Getty Images via Getty Images
    Image attribution tooltip

    Ingram Micro makes progress on restoring operations following attack

    An attack linked to the ransomware gang SafePay has disrupted certain fulfillment capabilities.  

    By July 8, 2025
  • Team of hackers dressed in black work on computers in dark room.
    Image attribution tooltip
    gorodenkoff via Getty Images
    Image attribution tooltip

    Ingram Micro investigating ransomware attack

    The technology company said the attack has affected its ability to process and ship orders.

    By July 7, 2025
  • Sen Ron Wyden sits behind a wooden podium with a microphone.
    Image attribution tooltip
    Sarah Silbiger / Stringer via Getty Images
    Image attribution tooltip

    FBI cyber guidance to lawmakers falls short, US senator says

    Sen. Ron Wyden wants FBI briefings to cover four often-overlooked cybersecurity practices.

    By July 2, 2025
  • The flag of North Korea flies from a propaganda tower near the Demilitarized Zone with South Korea
    Image attribution tooltip
    Carl Court via Getty Images
    Image attribution tooltip

    US authorities unmask North Korean IT worker schemes and their American accomplices

    Federal officials said businesses should carefully verify the identities of remote employees to avoid falling prey to similar scams.

    By June 30, 2025
  • A man holds an upside-down American flag and an Iranian flag as he marches down a street. Behind him, other people hold signs, one of which says, "No War On Iran."
    Image attribution tooltip
    Apu Gomes via Getty Images
    Image attribution tooltip

    US government warns of new Iran-linked cyber threats on critical infrastructure

    Companies should disconnect operational technology from the internet and enforce strong protections for user accounts, a joint alert from CISA, the FBI, NSA and DoD said.

    By June 30, 2025
  • he Hawaiian Airlines logo is displayed at a check-in area at Los Angeles International Airport (LAX) on December 4, 2023 in Los Angeles, California.
    Image attribution tooltip
    Mario Tama via Getty Images
    Image attribution tooltip

    Scattered Spider appears to pivot toward aviation sector

    A cyberattack on Hawaiian Airlines carries some hallmarks of the notorious cybercrime group.

    By Updated June 27, 2025
  • An American flag and a flag bearing the seal of the Cybersecurity and Infrastructure Security Agency (which features an eagle holding a shield with elements of a skyline on it) flank a large upright square panel bearing the same CISA seal. On the wall to the right of the panel and the flags, a row of digital clocks shows the time in the four major U.S. time zones.
    Image attribution tooltip
    Eric Geller/Cybersecurity Dive
    Image attribution tooltip
    Deep Dive

    ‘Suspended animation’: US government upheaval has frayed partnerships with critical infrastructure

    Recent federal cuts, reorganizations and other disruptions have alarmed industry leaders, who say the government is a less reliable partner even as cyber threats increase.

    By June 25, 2025
  • regenerative agriculture
    Image attribution tooltip
    Scott Olson via Getty Images
    Image attribution tooltip

    Federal officials, critical infrastructure leaders remain on guard for Iran-linked hacks

    Amid an uneasy truce, security teams in the U.S. said they have not seen any credible or specific threats.

    By June 24, 2025
  • Creative image depicting a ransomware attack.
    Image attribution tooltip
    bin kontan / Getty Images via Getty Images
    Image attribution tooltip

    Fewer ransomware attacks encrypting data, report finds

    Hackers are increasingly performing extortion-only attacks.

    By June 24, 2025
  • Chairman of the Joint Chiefs of Staff Air Force Gen. Dan Caine discusses the mission details of a strike on Iran during a news conference at the Pentagon on June 22, 2025 in Arlington, Virginia. U.S. President Donald Trump gave an address to the nation last night after three Iranian nuclear facilities were struck by the U.S. military.
    Image attribution tooltip
    Andrew Harnik via Getty Images
    Image attribution tooltip

    DHS warns of heightened cyber threat as US enters Iran conflict

    Federal officials are warning that pro-Iran hacktivists or state-linked actors may target poorly secured U.S. networks.

    By June 23, 2025
  • Aflac duck at awards ceremony
    Image attribution tooltip
    John Lamparski/WireImage via Getty Images
    Image attribution tooltip

    Aflac discloses cyber intrusion linked to wider crime spree targeting insurance industry

    The breach marks the latest in a series of recent attacks linked to cybercrime group Scattered Spider.

    By Updated June 20, 2025
  • An attendee passes an AWS logo on a escalator at the AWS re:Invent 2024 conference hosted at in Las Vegas on December 3, 2024.
    Image attribution tooltip
    Noah Berger / Stringer via Getty Images
    Image attribution tooltip

    Cloud storage buckets leaking secret data despite security improvements

    New data from Tenable highlighted significant improvements in the number of businesses with publicly exposed and critically vulnerable buckets storing sensitive data.

    By June 18, 2025
  • Businessman with protective hands gesture and insurance icons.
    Image attribution tooltip
    Galeanu Mihai via Getty Images
    Image attribution tooltip

    Threat group linked to UK, US retail attacks now targeting insurance industry

    The warning from Google researchers follows a recent incident at Erie Insurance, although the perpetrators of that attack have not been identified.

    By June 16, 2025
  • Fire and smoke arise after an attack on the Shahran oil depot in Tehran, Iran on June 15, 2025.
    Image attribution tooltip
    Stringer via Getty Images
    Image attribution tooltip

    US critical infrastructure could become casualty of Iran-Israel conflict

    Researchers warn that Iran-aligned threat groups could soon target U.S. companies and individuals in cyber espionage or sabotage attacks.

    By June 16, 2025