In 2025, people who built their careers by being some form of Very Online are now some of the most powerful people in the world. Topping the list—as we predicted he would last year—is Donald Trump. The 79-year-old president of… Read More "The Most Dangerous People on the Internet in 2025"
Dec 29, 2026Ravie LakshmananHacking News / Cybersecurity Last week’s cyber news in 2025 was not about one big incident. It was about many small cracks opening at the same time. Tools people trust every day behave in unexpected ways. Old… Read More "MongoDB Attacks, Wallet Breaches, Android Spyware, Insider Crime & More"
A whaling attack is a type of phishing attack that targets high-level executives, such as the CEO or CFO, to steal sensitive information from a company. This could include financial information or employees’ personal information. The reason whaling attacks target high-ranking employees is because they… Read More "What is a Whaling Attack?"
It was a strange year in cyberspace, as US president Donald Trump and his administration launched foreign policy initiatives and massive changes to the federal government that have had significant geopolitical ramifications. Through it all, the steady drumbeat kept pounding… Read More "The Worst Hacks of 2025"
In December 2024, the popular Ultralytics AI library was compromised, installing malicious code that hijacked system resources for cryptocurrency mining. In August 2025, malicious Nx packages leaked 2,349 GitHub, cloud, and AI credentials. Throughout 2024, ChatGPT vulnerabilities allowed unauthorized extraction… Read More "Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors"
The research community mapped this vulnerability quickly and thoroughly. Attackers moved even faster. For defenders, the takeaway is not just to patch, but to reassess what “default safe” really means in an ecosystem where exploitation is automated, immediate, and indifferent… Read More "React2Shell: Anatomy of a max-severity flaw that sent shockwaves through the web"
Security ratings (or cybersecurity ratings) are dynamic quantifications of an organization’s security posture. Calculated through trusted data validation methods, security ratings produce an objective and easy-to-understand representation of an organization’s cybersecurity performance. To reflect cyber threat resilience, security ratings are… Read More "What are Security Ratings? Cybersecurity Risk Scoring Explained"
Privacy isn’t dead. Just ask Kristi Noem. The Department of Homeland Security secretary has spent 2025 trying to convince the American public that identifying roving bands of masked federal agents is “doxing”—and that revealing these public servants’ identities is “violence.”… Read More "The New Surveillance State Is You"
Cybersecurity researchers have disclosed details of what has been described as a “sustained and targeted” spear-phishing campaign that has published over two dozen packages to the npm registry to facilitate credential theft. The activity, which involved uploading 27 npm packages… Read More "27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials"
During a web shell attack, a cybercriminal injects a malicious file into a target web server’s directory and then executes that file from their web browser. After launching a successful web shell attack, cybercriminals could gain access to sensitive resources,… Read More "What are Web Shell Attacks? How to Protect Your Web Servers"
