Fancybear: The state-backed hacker cell

Anonymous' war against Russia

Anonymous has been waging a cyber war on Russia for invading Ukraine. CNBC takes a look at how effective the collective’s six main strategies have been.

20 of the most common cyberattacks

While there are dozens of different types of cyber attacks, this article explains the top 20 most common network attack examples, including phishing, whale-phishing, and spear-phishing attacks. Learn how to best protect yourself.

A timeline of how Claude Code was used to execute cyberespionage

In September 2025, a Chinese state-sponsored group targeted 30 large tech companies, financial institutions, chemical manufacturing companies, and government agencies by manipulating Claude Code, having succeeded in infiltrating a small subset. The cyberattack is believed to have been the first of its scale carried out without major human intervention.

NATO leads cyber war games in Estonia

Estonia is host to one of the world’s largest annual interactive cybersecurity drills. Russia is always considered the main threat, but this year, the war in Ukraine has only added to the stakes.

Watch an ethical hacker provide a tour of the dark web

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

How to prepare for cyberattacks

An easy-to-digest checklist on the many ways you want protect yourself from a cyberattack before it happens, if it happens, and after it happens.

Bear raiding is a manipulative tactic to bring a stock price down—and part of why short selling can be controversial

Bear raids occur when short sellers use manipulative tactics—like spreading false rumors or coordinating trades—to artificially drive down a stock's price and profit from short positions. Although bear raids are an illegal form of market manipulation, they can spook investors, prompting large selloffs of shares and causing a company's value to plummet. As a result, investors may be hesitant to invest in the company in the future, creating a feedback loop of stock downturn.

Anthropic's Frontier Red Team assesses the dangers of its AI tools through 'evals'—safety tests that probe models to disclose sensitive information.

OSINT: How hackers find their marks

What is OSINT? How do hackers gather intel about targets? Just how much can they learn about you? Learn more as we dig in to the world of OSINT.

Malware has transitioned from notoriety-driven to profit- and data-driven

Many of the first researchers and hobbyists who created viruses and worms showed a natural curiosity in experimenting with and designing such software to make a name for themselves and advance the field of computer science. In the future, AI-augmented malware may adapt in real-time or design enhanced cryptojackers, infostealers, and ransomware for cybercriminals.

Palantir once investigated a cyberattack on the Dalai Lama's computer

In 2008, officials realized the Dalai Lama's email had been hacked after details of an event that hadn't been made public yet began circulating. Palantir's software was able to identify both the hack and the hacker network.

Your device can become infected with malware by simply browsing the internet

During a drive-by download attack, security flaws in a program or operating system (e.g., Windows) used to access online content are exploited, and malicious code is downloaded—for example, when loading a hacked webpage—onto a user's device without their knowledge. Restricting internet browsing to safe sites and installing security updates helps prevent these attacks.

The TikTok ban isn't just for TikTok

The Protecting Americans from Foreign Adversary Controlled Applications Act makes it unlawful for any “foreign-adversary controlled” entity to distribute, maintain, or update any “website, desktop application, mobile application, or augmented or immersive technology application” within the US.

Trudging through the dark web to expose child abuse

A computer expert who created a system to track down sources of revenge porn and an investigative journalist joined forces to investigate digital abuse. Their investigations focused on so-called clear nets, websites that make up the web most users surf. Then, they turned their investigation toward the dark web, where they found a child abuse website with more than 1 million registered users.

Watch a cybersecurity expert answers questions about hacking

From firewalls and VPNs to ransomware and viruses, IBM Distinguished Engineer Jeff Crume has seen many changes in cybersecurity during his 40 years of IT experience. In this video, he explores some of the most significant hacking events in history and provides advice on protecting yourself online.

Explore an interactive timeline of the world's biggest data breaches and hacks, led by the 2024 National Public Data breach, which involved almost three billion stolen records, including full names and Social Security numbers.

The dark web can expose anonymous users to potentially dangerous environments

Browsing the dark web requires onion routing, which prevents visitors from being identified and the locations from which they connect from being traced. This has been useful to activists in environments affected by political oppression or instability. However, those unfamiliar with navigating the space may encounter malware and network attacks from denizen hackers.

Different types of malware are categorized by how they spread or operate

Computer viruses require user interaction to execute a file and spread, whereas worms can self-replicate across systems without human intervention. Ransomware locks systems until a key is provided, spyware tracks and reports user activity to a third party, and trojans disguise various types of malware as legitimate software.

How to dine like they do in 'The Bear'

One of the most exciting aspects of FX's hit show "The Bear" is how it highlights real Chicago restaurants and businesses. This guide to some of the restaurants visited by the show’s characters (and a few that aren’t) includes the real Michelin inspectors’ notes on each spot.

As occurred during the 2026 hack of an AI platform by OpenAI, agentic AI may exploit a system vulnerability to access sensitive data if that information enables it to complete its assigned task.

The worst cyberattacks of the last 10 years

It’s been a rough 10 years in cybersecurity—and it’s only getting worse. From the Stuxnet to the Sony Hack, learn about the worst cyberattacks over the last decade.

Learn about the Black Bear Sports Group—a hockey conglomerate changing the ice rink industry

Ice rinks are notoriously difficult to operate, due to the complex cooling systems required to maintain the ice itself, and have an average operating lifespan of 25 years. However, Black Bear Sports Group has made millions by buying up failing ice rinks and running robust youth sports programming.

Visualizing cyberattacks by country

Cyber crime is expected to cost the global economy trillions per year by 2025. This data illustration showcases the countries with the most severe cyber attacks from 2006-2020.

Russia's private military force, explained

Not all participants in the Russian/Ukraine war are enlisted or drafted soldiers. Some, like the Wagner Group, are private mercenaries. But their reach extends past Russia and Ukraine's borders. This eight-minute video explores the activities of this shadowy company and how they aid Vladimir Putin in his military endeavors.

Burglars accessed the DNC once before their failed June 17 attempt

Long before the notorious June 17 intrusion, the burglars successfully accessed and planted listening devices in the DNC offices on May 28—showing how deeply premeditated the operation was and how the scandal's roots stretched back well before the arrests.

View a list of simple ways you can avoid catching a computer virus

Because this type of malware requires human intervention, such as plugging an infected flash drive into a computer or downloading and running an infected file, the chance of infection can be greatly reduced by being cautious about unfamiliar emails, attachments, and links. Keeping systems up to date with the latest security fixes is also crucial.

Security technician hacks a voting machine to reveal its vulnerabilities

A technician bought an old, likely-decommissioned voting machine from 2013 and took it apart to see how a would-be hacker might be able to exploit its vulnerabilities. Get a sense of the needs for secure, up-to-date voting machines with this...

Visualizing the consequence of data breaches

To get a sense of the grim state of data security today, take a look at this infographic from TruthFinder that explains why 2018 was the year of the data breach tsunami.

Individuals have been convicted of ordering assassinations from the dark web

Researchers have uncovered online storefronts allegedly run by members of various mafia or hitmen that offer to harm or murder individuals in exchange for monetary payment. However, no known murder has been attributed to any of them, and cybercrime task forces believe them to be scams (warning—sensitive content).

Try out ShieldFont, a specialized web font that swaps the HTML code corresponding to certain onscreen words to protect website content from AI scrapers.

Dystopian narratives have influenced real-life extremists

J.M. Berger, a senior research fellow at Middlebury’s Center on Terrorism, Extremism, and Counterterrorism, traced how terrorist organizations have latched on to dystopian narratives, with some groups even embracing the texts’ lexicons and iconographies.

Learn how governments around the world restrict internet access for their citizens

Various countries around the world, including China, Russia, and Iran, control their local DNS infrastructure, allowing them to block access to online content by preventing the internet "phone book" from finding the IP addresses for specific URLs. Government-controlled internet service providers can also cut off access entirely or throttle specific traffic.

Crunching the numbers on the cost of ransomware

This blog is a preview of the 2022 Crypto Crime Report, offering a summary of ransomware activity in 2021, the most active strains of ransomware, and more (w/ data, charts, and illustrations).

Polar bears find refuge in an abandoned Russian village

Russia's Wrangel Island hosts one of the world’s largest seasonal gatherings of polar bears. Hundreds of females come ashore to den and raise cubs, often entering abandoned homes for protection. See videos and pictures of the endangered species mingling on the island.

Since its founding, Palantir has refused to sell its software to China or Russia

In line with the founding principle of supporting Western institutions, Palantir has vowed to not share its technology with companies or government agencies in China and Russia—which Palantir frequently calls the West's largest threats.

Watch a guided video tour of the Museum of Malware Art

The site includes installations, sculptures, textiles, musical pieces, and galleries inspired by malicious software and related technologies, including the ILOVEYOU virus, encryption protocols from ransomware attacks, and the Industroyer malware framework used by Russia to cut power to Ukraine.

A US Department of Defense research lab developed the technology for the dark web

Although encryption existed to mask the content of communications across the internet before the 1990s, those managing overseas network infrastructure could determine a spy's affiliation based on where they saw data sent to and received from. To keep this information secret, the US Naval Research Laboratory developed onion routing, which enabled anonymized web browsing. The release of the technology to the public obscured sensitive communications further by growing the volume of anonymous data.

The history of malware includes computer viruses, worms, trojans, and ransomware

Some of the earliest significant pieces of malware—the Creeper worm and the Elk Cloner virus—displayed silly messages to users without causing major harm. As computer science has advanced, malware has become more easily spread, incorporated social engineering to manipulate users, targeted infrastructure systems, and been used by governments for virtual espionage.

Researchers report that Anthropic's Claude Mythos AI model has identified thousands of high-severity vulnerabilities across various software, including major operating systems and web browsers, and has suggested ways to exploit them.

Conspiracy theories today are often born from online radicalization

New York Times tech columnist Kevin Roose examines how individuals become radicalized while using platforms like YouTube. Hate crimes that took place before the COVID-19 pandemic inspired the podcast, which looks at online commentators, algorithms, and isolation, and possible explanations for how increased online activity can sometimes lead to violent crime.

In 2018, it took about 2.3 years to develop a way to exploit a software bug for malicious purposes, but as of 2026, AI tools have reduced this time to about 20 hours.

Creating malware requires more than knowledge of programming languages

Because computer viruses, worms, and other malicious software reside within a computer's operating system, which manages computer hardware and software, cybercriminals writing effective malicious code must understand how the OS manages input and output, permissions, memory, etc. Knowledge of credentials and network access also helps create malware that easily spreads.

Some viruses evade detection by altering their own code or hiding in Microsoft Office

Computer viruses are often classified by how they spread or which files they infect, with the oldest ones—boot sector viruses—targeting systems that are active when a computer is turned on. Macros—custom codes in office productivity programs authored to automate tasks—spawned their own class of viruses.

19 fungal pathogens are of key concern to world health officials

In 2022, this global health body issued its first-ever list of top fungal threats to human health. It said fungal threats are spreading and occurring more frequently. The WHO’s list included 19 fungal pathogens to watch, and said that the most dangerous ones to public health are Cryptococcus neoformans, Aspergillus fumigatus, Candida albicans, and Candida auris. There are only a handful of classes of medication currently available to combat fungal pathogens, with few others in the pipeline even though antimicrobial resistance is growing.

Through prompt injection attacks, bad actors provide deceptive prompts to generative AI systems in order to manipulate their outputs and acquire sensitive data.

View a list of the 25 most common passwords according to an analysis of 2.5 terabytes of public data breaches.

BankFind is a tool that helps you find current and former FDIC-insured banking institutions

The tool from the Federal Deposit Insurance Corporation (also known as the FDIC) allows users to search for these institutions by name, location, and more.

In 2019, a laptop loaded with six of the worst malware in history and described as 'an exhibit of historical weaponry' sold for $1.3M.

Explore demonstrations of hundreds of viruses and other malware in action

On their YouTube channel, Malware historian Daniel White has documented what happens when various types of malware—mostly from the 1980s and 90s—run on a computer or Nokia cell phone. The demonstrations were safely conducted within virtual machines—older operating systems run within contained windows of modern software, resembling a picture-in-picture setup.

Technical vulnerabilities prevent full-proof anonymity when browsing the dark web

Despite encrypting data and relaying it within the Tor network, traffic between the network exit and the final destination is no longer hidden and can be captured. Law enforcement agencies can also attempt to deanonymize users by monitoring and matching data signal patterns entering and leaving the network via a correlation algorithm.