OSINT: How hackers find their marks

Watch an ethical hacker provide a tour of the dark web

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

Explaining how open source systems like Linux can be secure, despite their public source code

While no computer system is immune to all cyberattacks and malware, the transparency of open-source technology means many thousands of developers can review and oversee the underlying code powering the software on an ongoing basis. This increases the likelihood of catching and patching vulnerabilities more quickly than smaller groups of cybercriminals looking to exploit them.

The dark web can expose anonymous users to potentially dangerous environments

Browsing the dark web requires onion routing, which prevents visitors from being identified and the locations from which they connect from being traced. This has been useful to activists in environments affected by political oppression or instability. However, those unfamiliar with navigating the space may encounter malware and network attacks from denizen hackers.

Explore an interactive timeline of the world's biggest data breaches and hacks, led by the 2024 National Public Data breach, which involved almost three billion stolen records, including full names and Social Security numbers.

Explore metrics on the Tor network, the infrastructure of the dark web

While internet traffic within the network is concealed, public, nonsensitive data can be used to estimate the number of active users, the number of relay servers, network performance speed and reliability, etc. Researchers can use this data to indirectly identify political upheavals or censorship campaigns worldwide, such as the Arab Spring.

Watch a cybersecurity expert answers questions about hacking

From firewalls and VPNs to ransomware and viruses, IBM Distinguished Engineer Jeff Crume has seen many changes in cybersecurity during his 40 years of IT experience. In this video, he explores some of the most significant hacking events in history and provides advice on protecting yourself online.

The worst cyberattacks of the last 10 years

It’s been a rough 10 years in cybersecurity—and it’s only getting worse. From the Stuxnet to the Sony Hack, learn about the worst cyberattacks over the last decade.

Visualizing the consequence of data breaches

To get a sense of the grim state of data security today, take a look at this infographic from TruthFinder that explains why 2018 was the year of the data breach tsunami.

A brief guide to espionage

Spies have one of the most challenging and dangerous jobs in the world, risking their lives and legacy to extract secrets in the interest of their country. This in-depth explainer breaks down one of the profession's oft-ignored aspects: The...

20 of the most common cyberattacks

While there are dozens of different types of cyber attacks, this article explains the top 20 most common network attack examples, including phishing, whale-phishing, and spear-phishing attacks. Learn how to best protect yourself.

As occurred during the 2026 hack of an AI platform by OpenAI, agentic AI may exploit a system vulnerability to access sensitive data if that information enables it to complete its assigned task.

The story of Susy Thunder, the female hacker who disappeared

Here's the story of Susan Thunder, a woman who entered the hacker underground scene in the late 1970s and one day disappeared completely. She had a troubled past, facing abuse and hardship, and found solace in manipulating phone systems and later computer systems. She became involved with prominent hackers and her ability to control systems mirrored her quest for personal control. Her story highlights the role of social engineering in hacking.

Malware has transitioned from notoriety-driven to profit- and data-driven

Many of the first researchers and hobbyists who created viruses and worms showed a natural curiosity in experimenting with and designing such software to make a name for themselves and advance the field of computer science. In the future, AI-augmented malware may adapt in real-time or design enhanced cryptojackers, infostealers, and ransomware for cybercriminals.

Creating malware requires more than knowledge of programming languages

Because computer viruses, worms, and other malicious software reside within a computer's operating system, which manages computer hardware and software, cybercriminals writing effective malicious code must understand how the OS manages input and output, permissions, memory, etc. Knowledge of credentials and network access also helps create malware that easily spreads.

Google Search trends reveal truths about society that traditional surveys miss

Studies of human behavior show that survey respondents may lie to present themselves more favorably. By studying anonymous search data, researchers have uncovered hidden racism, mental health struggles, and interest in taboo or stigmatized topics.

How to prepare for cyberattacks

An easy-to-digest checklist on the many ways you want protect yourself from a cyberattack before it happens, if it happens, and after it happens.

Security technician hacks a voting machine to reveal its vulnerabilities

A technician bought an old, likely-decommissioned voting machine from 2013 and took it apart to see how a would-be hacker might be able to exploit its vulnerabilities. Get a sense of the needs for secure, up-to-date voting machines with this...

How companies track you around the internet, explained

Being able to track how users behave on websites is a massive opportunity for companies to hone their products, target their ads, and more. Dozens of trackers are on the average website you visit, depending on how you deal with that site's cookie policy, and Google is the chief tracker of them all. Learn about these companies and what they are tracking with this informative blog visualization.

My experience with biohacking

A general approach that employs technology to enhance the functioning of the human body, biohacking enthusiasts are continuously seeking new ways to optimize their performance. Martin Kremmer, an entrepreneur who became interested in the topic after experiencing burnout, explores his own experiences in biohacking his own diet and lifestyle in pursuit of a longer, healthier life.

Technical vulnerabilities prevent full-proof anonymity when browsing the dark web

Despite encrypting data and relaying it within the Tor network, traffic between the network exit and the final destination is no longer hidden and can be captured. Law enforcement agencies can also attempt to deanonymize users by monitoring and matching data signal patterns entering and leaving the network via a correlation algorithm.

Are smart cities a dumb idea?

Smart cities require vast troves of data to run, making their systems attractive to hackers. Listen to this one hour podcast to learn about the risks and what is being done to mitigate them.

Visualizing the growth of botnets

Botnets are a network of computers that have been infected with a variant of malware that coordinates and leverages them for automated mass attacks such as data theft and crashing servers. This interactive map highlights where botnets have been located between 2014-2020.

Listen to a podcast episode that goes inside the 2017 Equifax credit bureau hack

This podcast episode details a 2017 credit bureau hack in which Equifax data about millions of Americans was compromised. It dives into the history of credit bureaus, specifically how they became legally allowed to access Americans' financial information without Americans actually volunteering it themselves.

Through prompt injection attacks, bad actors provide deceptive prompts to generative AI systems in order to manipulate their outputs and acquire sensitive data.

Biohacking: The effort to optimize health and extend life through technology

Biohacking seeks to optimize human health and performance through everything from simple lifestyle adjustments to more radical interventions like body modifications and experimental technology. At its core, biohacking covers a wide spectrum—ranging from improving sleep and focus to implanting devices that integrate technology with the human body.

Has your information been compromised on the internet?

Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.

Fancybear: The state-backed hacker cell

Fancy Bear (APT28) is a Russian-based hacker group that targets a variety of organizations across the globe. Learn how to prevent Fancy Bear.

Everything scientists could learn by looking at your skull

Our skulls are all unique, but they also share characteristics across groups of people. In the absence of fingerprints, forensic scientists can learn a lot about you just from your skull.

Trudging through the dark web to expose child abuse

A computer expert who created a system to track down sources of revenge porn and an investigative journalist joined forces to investigate digital abuse. Their investigations focused on so-called clear nets, websites that make up the web most users surf. Then, they turned their investigation toward the dark web, where they found a child abuse website with more than 1 million registered users.

What is biohacking? An overview

Biohacking is a broad collection of self-improvement techniques meant to enhance a human's health, lifespan, or ability. There are basic biohacks, like the use of caffeine, and more extreme ones, like under-the-skin implants. The difference between biohacking and standard medicine is that biohacking is primarily a do-it-yourself approach and is mostly unregulated.

Anthropic's Frontier Red Team assesses the dangers of its AI tools through 'evals'—safety tests that probe models to disclose sensitive information.

Credit monitoring services may oversell the benefits of dark web monitoring

Currently, technology exists to scrape and download data from webpages, which can then be analyzed to identify a user's information. However, scrapers cannot access or remove personal data from dark websites because they are often protected by paywalls, rendering monitoring ineffective beyond reporting publicly available data breaches.

Social media platforms benefit not just from ensuring they have satisfied users, but also from the personal data they scoop up and can then sell to online advertisers.

Accessing the dark web is legal in the US, the EU, and most countries worldwide

As long as users do not pay for illegal goods or services or acquire illegal content, they cannot be prosecuted. Those on the dark web include academics, researchers, and cybersecurity experts gathering threat intelligence on cybercriminals, cyberterrorists, and state actors, as well as protesters, activists, and grassroots organizers.

How the NSA has changed through history

The National Security Agency was born in the Cold War and then transformed by 9/11. This article answers all the basic questions you might have about the NSA, from what it does to how much data it collects to some of its useful intercepts.

Fraud and identity theft are among the most common dark web-related crimes.

Your device can become infected with malware by simply browsing the internet

During a drive-by download attack, security flaws in a program or operating system (e.g., Windows) used to access online content are exploited, and malicious code is downloaded—for example, when loading a hacked webpage—onto a user's device without their knowledge. Restricting internet browsing to safe sites and installing security updates helps prevent these attacks.

True crime fans can derail lives with misguided accusations

In the wake of four stabbing deaths at the University of Idaho in November 2023, online sleuths, without any supporting evidence, were quick to point accusatory fingers at potential perpetrators. Poring over news reports, social media pages, and internet interactions can reveal viable information that can help solve crimes. Such (sometimes monetizable) behavior can also easily give rise to rumors and threats while impeding official investigations.(Some readers may experience a paywall.)

Onion routing disguises internet traffic in layers resembling a nesting doll

Data is encrypted at least three times before being sent to a node—a server that can only decrypt one layer. Then, the underlying encrypted data is relayed to another node, and the process repeats until all layers are decrypted. Thousands of possible nodes make it extremely difficult to trace activity within the system.

Your iPhone started with a Cold War secret

Silicon Valley wasn't supposed to happen. A stretch of California orchard land somehow became the place that built the modern world: chips, PCs, the internet, the smartphone, and now AI. But the real story isn't the garage myth. It's a series of contradictions hiding in plain sight.

A 2020 study suggests just 6.7% of Tor network users visit sites on the dark web

It did not distinguish between visits to malicious sites and traffic to legitimate institutions with .onion domains, such as the BBC or Buzzfeed, and thus claimed that 6.7% of anonymized users engage in nefarious activity. The low percentage still highlights that most users of the technology underlying the dark web do not use it to browse the hidden portion of the internet.

A US Department of Defense research lab developed the technology for the dark web

Although encryption existed to mask the content of communications across the internet before the 1990s, those managing overseas network infrastructure could determine a spy's affiliation based on where they saw data sent to and received from. To keep this information secret, the US Naval Research Laboratory developed onion routing, which enabled anonymized web browsing. The release of the technology to the public obscured sensitive communications further by growing the volume of anonymous data.

How hash functions encrypt stored passwords and can be enhanced with 'salt'

Hash functions convert text into unique, random sets of characters, a process that is computationally expensive and time-consuming to undo. Because hashed outputs for many common passwords are publicly listed, some sites use a salt—additional characters appended to a password—before hashing to produce an output that is not known. When entering a password, it is salted and hashed, then checked against the database for a matching hash before permitting login.

Unlike the models made by large AI companies, open-weight models can have their safeguards removed or weakened, a process that has become increasingly easy and may expose users to harmful information.

The Ocean Observatories Initiative aims to provide freely accessible, real-time ocean data for up to 30 years to help scientists identify and analyze short- and long-term ocean processes.

Conspiracy theories today are often born from online radicalization

New York Times tech columnist Kevin Roose examines how individuals become radicalized while using platforms like YouTube. Hate crimes that took place before the COVID-19 pandemic inspired the podcast, which looks at online commentators, algorithms, and isolation, and possible explanations for how increased online activity can sometimes lead to violent crime.

The dark web cannot be stumbled upon by accident

Many pages on the dark web are not publicly broadcast and are available only to relevant parties on a need-to-know basis. Although some online directories list the URLs for these webpages, connecting to them still requires specialized software, as these pages block connections from traditional web browsers such as Chrome.

Smart cities without strong cybersecurity can leave utilities extremely vulnerable

Insecure devices connected to the Internet of Things pose risks to the entire network, which cybercriminals can hijack to compromise infrastructure and private resident data. Poorly secured systems that become inoperable can undermine the promise of smart cities by worsening the quality of life.

Different types of malware are categorized by how they spread or operate

Computer viruses require user interaction to execute a file and spread, whereas worms can self-replicate across systems without human intervention. Ransomware locks systems until a key is provided, spyware tracks and reports user activity to a third party, and trojans disguise various types of malware as legitimate software.

How political campaigns use your data

What do campaigns know about US voters, and how do they use that information to shape their strategies during elections? US political campaigns base their strategies and tactics on data collected from more than 200 million voting-age Americans. This visualization by Reuters breaks down how data firms create national databases of voter files, collecting information from a variety of sources to create detailed voter profiles and how political campaigns use that data.