Most of the operations were feckless efforts with little impact, but they illustrate how AI is changing the game for inauthentic content on both the adversary and defense sides.

Stealthy ad fraud rings turn legitimate marketing into spam at a large scale, creating 200M+ bid requests daily.

North Korea's newest threat actor uses every trick in the nation-state APT playbook, and most of cybercrime's tricks, too. It also developed a whole video game company to hide malware.

Using VPNs as an initial access vector is ironic, given that security is the very reason enterprises employ them in the first place.

Microsoft researchers discover an old-timey scam with a facelift for the cloud era: hacking retailers' portals to make it rain gift cards.

One of China's biggest espionage operations owes its success to longstanding Microsoft Exchange bugs, open source tools, and old malware.

Mandiant warns that defenders must rethink how to thwart Chinese cyber-espionage groups now using professional "infrastructure-as-a-service" operational relay box networks of virtual private servers as well as hijacked smart devices and routers.

Scarred Manticore is the smart, sophisticated one. But when Iran needs something destroyed, it hands the keys over to Void Manticore.

An on-by-default endpoint in ubiquitous logging service Fluent Bit contains an oversight that hackers can toy with to rattle most any cloud environment.

A number of serious Windows bugs still haven't made their way into criminal circles, but that won't remain the case forever — and time is running short before ZDI releases exploit details.

Thankfully, GE ultrasounds aren't Internet-facing. Exploiting most of the bugs to cause serious damage to patients would require physical device access.

Cybercriminals are trafficking Docusign assets that allow for easy extortion and business email compromise.

Scattered Spider is as active as ever, despite authorities claiming that they're close to nailing its members.

Ransomware groups have always created problems for their victims that only they could solve. Black Basta is taking that core idea in a creative, new direction.

CISA's agreement is voluntary and, frankly, basic. Signatories say that's a good thing.

F5 customers should patch immediately, though even that won't protect them from every problem with their networked devices.

Iran follows in Russia's disinformation footsteps but with a different, more economical, and potentially higher-impact model.

MITRE's hackers made use of at least five different Web shells and backdoors as part of their attack chain.

As Verizon Business redefines "supply chain breach," it could either help organizations address third-party risk holistically or just conflate and confuse.

The space agency needs to implement stricter policies and standards when it comes to its cybersecurity practices, but doing so the wrong way would put machinery at risk, a federal review found.

Organizations can go a long way toward preventing spoofing attacks by changing one basic parameter in their DNS settings.

Weaponizing Microsoft's own services for command-and-control is simple and costless, and it helps attackers better avoid detection.

A recent campaign targeting Middle Eastern government organizations plays standard detection tools like a fiddle. With cyberattackers getting more creative, defenders must start keeping pace.

USBs have something the newest, hottest attack techniques lack: the ability to bridge air gaps.

While other professions are making up ground, cybersecurity still lags behind in female representation, thanks to a lack of respect and inclusion.

Hackers can influence voters with media and breach campaigns, or try tampering with votes. Or they can combine these tactics to even greater effect.

Mobile malware-as-a-service operators are upping their game by automatically churning out hundreds of unique samples on a whim.