The Latest

• 

  Qantas says cyberattack affected 5.7 million customers

  The incident follows a notorious hacker gang’s pivot to targeting transportation companies with its trademark social-engineering attacks.

  Cyberattacks

• 

  Suspected contractor for China’s Hafnium group arrested in Italy

  U.S. authorities charged the man and a co-conspirator with hacking COVID-19 researchers and kicking off a cyberattack spree targeting Microsoft Exchange servers. 

  Threats

• 

  Ingram Micro makes progress on restoring operations following attack

  An attack linked to the ransomware gang SafePay has disrupted certain fulfillment capabilities.  

  Cyberattacks

• 

  Scattered Spider poses serious risk to several hundred major companies

  A new report shows that a select group of large companies uses technologies that the hacker group often targets.

  Strategy

• 

  Security coalition urges Congress to renew 2015 CISA law

  A group of top cybersecurity and technology firms said the law provided critical protections for sharing essential vulnerability information.

  Strategy

• 

  SEC seeks SolarWinds settlement in reversal for agency under new leadership

  The decision by the commission, now under Republican control, could reshape the landscape of corporate accountability for cyber incidents.

  Breaches

• 

  Ingram Micro investigating ransomware attack

  The technology company said the attack has affected its ability to process and ship orders.

  Cyberattacks

• 

  Qantas says large amount of customer data stolen in cyberattack on call center

  The attack follows a recent increase in cyberattacks and disruptions at major airlines.

  Updated July 7, 2025

  Cyberattacks

• 

  FBI cyber guidance to lawmakers falls short, US senator says

  Sen. Ron Wyden wants FBI briefings to cover four often-overlooked cybersecurity practices.

  Strategy

• 

  Ahold Delhaize USA says cyberattack exposed personal data of 2M people

  The intruders who gained access to the grocer’s online systems in November had access to information including birthdays, Social Security numbers and bank account details.

  Breaches

• 

  US authorities unmask North Korean IT worker schemes and their American accomplices

  Federal officials said businesses should carefully verify the identities of remote employees to avoid falling prey to similar scams.

  Strategy

• 

  US government warns of new Iran-linked cyber threats on critical infrastructure

  Companies should disconnect operational technology from the internet and enforce strong protections for user accounts, a joint alert from CISA, the FBI, NSA and DoD said.

  Strategy

• 

  Scattered Spider appears to pivot toward aviation sector

  A cyberattack on Hawaiian Airlines carries some hallmarks of the notorious cybercrime group.

  Updated June 27, 2025

  Cyberattacks

• 

  Hackers exploiting critical Citrix Netscaler flaw, researchers say

  After confirming exploitation of a separate zero-day flaw, Cloud Software Group promises to be transparent.

  Vulnerability

• 

  AI security issues dominate corporate worries, spending

  Two reports illustrate how business leaders are thinking about and budgeting for generative AI.

  Strategy

• 

  United Natural Foods says cyberattack will reduce quarterly earnings

  The company, which supplies Whole Foods and other grocery stores nationwide, had to disable electronic ordering systems while responding to the attack earlier this month.

  Breaches

• 

  Microsoft to make Windows more resilient following 2024 IT outage

  The company has been working with security partners to make sure future software updates don’t lead to operational disruptions for customers.

  Updated June 26, 2025

  Strategy

• 

  Deep Dive

  ‘Suspended animation’: US government upheaval has frayed partnerships with critical infrastructure

  Recent federal cuts, reorganizations and other disruptions have alarmed industry leaders, who say the government is a less reliable partner even as cyber threats increase.

  Strategy

• 

  Critical vulnerability in Citrix Netscaler raises specter of exploitation wave

  Threat researchers warn the flaw could open up a flood of attacks that rival the 2023 CitrixBleed crisis. 

  Updated June 25, 2025

  Vulnerability

• 

  Cyber insurance premiums drop for first time, report finds

  Despite a decline in both premiums and prices, the market continues to be profitable.

  Strategy

• 

  Federal officials, critical infrastructure leaders remain on guard for Iran-linked hacks

  Amid an uneasy truce, security teams in the U.S. said they have not seen any credible or specific threats.

  Strategy

• 

  Fewer ransomware attacks encrypting data, report finds

  Hackers are increasingly performing extortion-only attacks.

  Cyberattacks

• 

  Steelmaker Nucor restores operations, confirms limited data breach

  The steel products giant said it does not expect the cyberattack to have a material impact on its operations.

  Breaches

• 

  DHS warns of heightened cyber threat as US enters Iran conflict

  Federal officials are warning that pro-Iran hacktivists or state-linked actors may target poorly secured U.S. networks.

  Strategy

• 

  Aflac discloses cyber intrusion linked to wider crime spree targeting insurance industry

  The breach marks the latest in a series of recent attacks linked to cybercrime group Scattered Spider.

  Updated June 20, 2025

  Breaches

More stories