20 of the most common cyberattacks

How to prepare for cyberattacks

An easy-to-digest checklist on the many ways you want protect yourself from a cyberattack before it happens, if it happens, and after it happens.

View a list of the 25 most common passwords according to an analysis of 2.5 terabytes of public data breaches.

The worst cyberattacks of the last 10 years

It’s been a rough 10 years in cybersecurity—and it’s only getting worse. From the Stuxnet to the Sony Hack, learn about the worst cyberattacks over the last decade.

Visualizing cyberattacks by country

Cyber crime is expected to cost the global economy trillions per year by 2025. This data illustration showcases the countries with the most severe cyber attacks from 2006-2020.

View a list of simple ways you can avoid catching a computer virus

Because this type of malware requires human intervention, such as plugging an infected flash drive into a computer or downloading and running an infected file, the chance of infection can be greatly reduced by being cautious about unfamiliar emails, attachments, and links. Keeping systems up to date with the latest security fixes is also crucial.

Watch a cybersecurity expert answers questions about hacking

From firewalls and VPNs to ransomware and viruses, IBM Distinguished Engineer Jeff Crume has seen many changes in cybersecurity during his 40 years of IT experience. In this video, he explores some of the most significant hacking events in history and provides advice on protecting yourself online.

Different types of malware are categorized by how they spread or operate

Computer viruses require user interaction to execute a file and spread, whereas worms can self-replicate across systems without human intervention. Ransomware locks systems until a key is provided, spyware tracks and reports user activity to a third party, and trojans disguise various types of malware as legitimate software.

Explore the cost of major viruses and other malware incidents through 2017

The first significant malware was the Morris worm in 1988, which caused an estimated $10,000 to $10M in damage to computers. With $38B in damage caused, Mydoom is the most costly piece of malware in history. Spread via email and, at one point, accounting for about 25% of all messages sent worldwide, the malware infected computers to create a botnet that launched cyberattacks.

The history of malware includes computer viruses, worms, trojans, and ransomware

Some of the earliest significant pieces of malware—the Creeper worm and the Elk Cloner virus—displayed silly messages to users without causing major harm. As computer science has advanced, malware has become more easily spread, incorporated social engineering to manipulate users, targeted infrastructure systems, and been used by governments for virtual espionage.

Although there are 10,000 possible combinations of four-digit personal identification numbers, data suggests that about 27% of all PINs are one of 20 combinations, including 1234, 1111, and 0000.

Crunching the numbers on the cost of ransomware

This blog is a preview of the 2022 Crypto Crime Report, offering a summary of ransomware activity in 2021, the most active strains of ransomware, and more (w/ data, charts, and illustrations).

Your device can become infected with malware by simply browsing the internet

During a drive-by download attack, security flaws in a program or operating system (e.g., Windows) used to access online content are exploited, and malicious code is downloaded—for example, when loading a hacked webpage—onto a user's device without their knowledge. Restricting internet browsing to safe sites and installing security updates helps prevent these attacks.

Watch an ethical hacker provide a tour of the dark web

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

Explaining how open source systems like Linux can be secure, despite their public source code

While no computer system is immune to all cyberattacks and malware, the transparency of open-source technology means many thousands of developers can review and oversee the underlying code powering the software on an ongoing basis. This increases the likelihood of catching and patching vulnerabilities more quickly than smaller groups of cybercriminals looking to exploit them.

Visualizing the consequence of data breaches

To get a sense of the grim state of data security today, take a look at this infographic from TruthFinder that explains why 2018 was the year of the data breach tsunami.

Visualizing the growth of botnets

Botnets are a network of computers that have been infected with a variant of malware that coordinates and leverages them for automated mass attacks such as data theft and crashing servers. This interactive map highlights where botnets have been located between 2014-2020.

Animal-to-human pathogens constitute 75% of emerging infectious diseases

Zoonotic diseases encompass more than 200 diseases transmitted from animals to humans, wherein humans are usually accidental hosts. Ranging from rabies to HIV to monkeypox, this overview lists some of the most common viral threats.

Fancybear: The state-backed hacker cell

Fancy Bear (APT28) is a Russian-based hacker group that targets a variety of organizations across the globe. Learn how to prevent Fancy Bear.

A timeline of how Claude Code was used to execute cyberespionage

In September 2025, a Chinese state-sponsored group targeted 30 large tech companies, financial institutions, chemical manufacturing companies, and government agencies by manipulating Claude Code, having succeeded in infiltrating a small subset. The cyberattack is believed to have been the first of its scale carried out without major human intervention.

Explore an interactive timeline of the world's biggest data breaches and hacks, led by the 2024 National Public Data breach, which involved almost three billion stolen records, including full names and Social Security numbers.

19 fungal pathogens are of key concern to world health officials

In 2022, this global health body issued its first-ever list of top fungal threats to human health. It said fungal threats are spreading and occurring more frequently. The WHO’s list included 19 fungal pathogens to watch, and said that the most dangerous ones to public health are Cryptococcus neoformans, Aspergillus fumigatus, Candida albicans, and Candida auris. There are only a handful of classes of medication currently available to combat fungal pathogens, with few others in the pipeline even though antimicrobial resistance is growing.

Anonymous' war against Russia

Anonymous has been waging a cyber war on Russia for invading Ukraine. CNBC takes a look at how effective the collective’s six main strategies have been.

50 famous memes and what they mean

Memes are one of the most immediate ways to communicate. The 50 most popular ones are found everywhere on the internet. Sources for this article came from Tumblr, Twitter, Know Your Meme, and other online pop culture resources and publications. This piece examines memes from the early 2000s through 2019.

OSINT: How hackers find their marks

What is OSINT? How do hackers gather intel about targets? Just how much can they learn about you? Learn more as we dig in to the world of OSINT.

Some viruses evade detection by altering their own code or hiding in Microsoft Office

Computer viruses are often classified by how they spread or which files they infect, with the oldest ones—boot sector viruses—targeting systems that are active when a computer is turned on. Macros—custom codes in office productivity programs authored to automate tasks—spawned their own class of viruses.

Fraud and identity theft are among the most common dark web-related crimes.

Malware has transitioned from notoriety-driven to profit- and data-driven

Many of the first researchers and hobbyists who created viruses and worms showed a natural curiosity in experimenting with and designing such software to make a name for themselves and advance the field of computer science. In the future, AI-augmented malware may adapt in real-time or design enhanced cryptojackers, infostealers, and ransomware for cybercriminals.

Creating malware requires more than knowledge of programming languages

Because computer viruses, worms, and other malicious software reside within a computer's operating system, which manages computer hardware and software, cybercriminals writing effective malicious code must understand how the OS manages input and output, permissions, memory, etc. Knowledge of credentials and network access also helps create malware that easily spreads.

NATO leads cyber war games in Estonia

Estonia is host to one of the world’s largest annual interactive cybersecurity drills. Russia is always considered the main threat, but this year, the war in Ukraine has only added to the stakes.

An overview of 12 fundamental types of algorithms and the uses for each

These include search algorithms to quickly process and find important information, cryptographic algorithms to secure communications, randomized algorithms—such as Monte Carlo simulations for estimating probabilities of outcomes—and greedy algorithms, which make optimal choices based on available data in a step-by-step fashion, as seen in navigation apps.

Minor technology failures can spiral into massive internet outages

A mix of centralized cloud infrastructure and legacy protocols leaves the internet susceptible to downtime from minor cyberattacks or software bugs, infrastructure damage caused by extreme weather, and human error if a DNS service provider—the internet's phone book—or a backend system, such as Amazon Web Services, were compromised.

Technical vulnerabilities prevent full-proof anonymity when browsing the dark web

Despite encrypting data and relaying it within the Tor network, traffic between the network exit and the final destination is no longer hidden and can be captured. Law enforcement agencies can also attempt to deanonymize users by monitoring and matching data signal patterns entering and leaving the network via a correlation algorithm.

See 16 art pieces that were inspired by or evoke elements of top phobias.

Through prompt injection attacks, bad actors provide deceptive prompts to generative AI systems in order to manipulate their outputs and acquire sensitive data.

Increasing contact between humans and wild animals is driving zoonotic threats

Zoonotic diseases, which spread from animals to humans, present one of the most significant emerging threats worldwide. Scientists have identified around 200 viruses capable of infecting humans, and unfortunately, the number of such diseases are on the rise—at least 60% of all emerging infectious diseases are zoonotic in origin.

Smart cities without strong cybersecurity can leave utilities extremely vulnerable

Insecure devices connected to the Internet of Things pose risks to the entire network, which cybercriminals can hijack to compromise infrastructure and private resident data. Poorly secured systems that become inoperable can undermine the promise of smart cities by worsening the quality of life.

The 10 most important (other) cryptocurrencies

Bitcoin has not only been a trendsetter, ushering in a wave of cryptocurrencies built on a decentralized peer-to-peer network, but has also become the de facto standard for cryptocurrencies. But it's not the only one. Here are some cryptocurrencies that have held on throughout steep price climbs and nosedives.

The 10 most amazing deep sea creatures

In this video, researchers from the world-renowned Monterey Bay Aquarium discuss the most fascinating deep sea creatures, and how they developed some of their strangest features.

A computer virus is a type of malware that self-replicates and spreads

Spread through emails, downloads, messaging services, and outdated software, viruses attach to programs, self-replicate, and infect other systems. They can delete files, steal data, and cause performance issues as they spread.

Google reveals the top searches of 2023

Google Search remains the world's most popular online search engine, and the tech behemoth reveals the most common searches from at the end of every year. See global as well as more local trends in most common searches for people, films, and more.

The Melissa 'virus' helped associate pornographic sites with computer viruses

A worm-embedded document posted online enticed users to download and open it by alleging to contain passwords to paywalled explicit websites. Upon opening, the worm shared itself with 50 addresses in a user's Outlook contacts, masquerading as a friendly attachment. Its rapid spread overwhelmed email servers and caused $1.1B in damage worldwide.

The dark web makes up about 0.01% of all the data on the internet

The surface web (5%-10%) consists of indexed sites—those traditional search engines have visited and stored so users can discover them via web search. The remaining 90%-95% makes up the deep web, which is not indexed and includes email and banking portals that require login credentials. The dark web is unindexed and requires anonymizing software to visit.

The ILOVEYOU virus exemplified how social engineering could help spread malware

Displaying as LOVE-LETTER-FOR-YOU.TXT on Windows computers, the file appeared to be a love letter, which many users willingly opened. However, the file contained a script that damaged and hid files, caused Internet Explorer to download software to help steal passwords, and copied itself to all Outlook contacts to continue spreading.

The science of cryptography, including methods to encrypt data and how to break encryption

Monoalphabetic ciphers use a set of rules to replace each letter with another consistently, making them susceptible to brute force attacks that try every kind of replacement. While more complex ciphers can transform text in less obvious ways, because certain letters are used more often than others, an analysis of letter frequency may reveal patterns that help uncover the rules that make up a cipher.

In 2018, it took about 2.3 years to develop a way to exploit a software bug for malicious purposes, but as of 2026, AI tools have reduced this time to about 20 hours.

How companies track you around the internet, explained

Being able to track how users behave on websites is a massive opportunity for companies to hone their products, target their ads, and more. Dozens of trackers are on the average website you visit, depending on how you deal with that site's cookie policy, and Google is the chief tracker of them all. Learn about these companies and what they are tracking with this informative blog visualization.

Twenty of the coolest products from CES 2025

This roundup from Cybernews showcases standout CES 2025 innovations—from flying cars and robot dogs to VR headsets and AI-powered gadgets—showing the event’s most talked-about tech.

A list of common questions and answers about hurricanes from NOAA

This FAQ answers many questions hurricane researchers at NOAA have received, sorted by category. The answers provide insights into hurricane classification and naming, forecasting their movement and growth, and tips for preparing ahead of landfall.

The most common birthdays

Nine of the top 10 most common birthdays fall in September, with Sept. 9 being the most common. However, August is the most common birth month, followed by July and December. On the flip side, the least common birthdays are around major holidays, with Christmas Day being the rarest—probably due to doctors scheduling fewer inductions and C-sections on those days. Find out more birthday surprises here.

Explore demonstrations of hundreds of viruses and other malware in action

On their YouTube channel, Malware historian Daniel White has documented what happens when various types of malware—mostly from the 1980s and 90s—run on a computer or Nokia cell phone. The demonstrations were safely conducted within virtual machines—older operating systems run within contained windows of modern software, resembling a picture-in-picture setup.