In-depth write-ups of high-impact intrusions, breaches and malware campaigns — how they happened, and what defenders can learn.
127 reports
In February 2015, Anthem, one of the largest health insurance companies in the U.S., suffered a data breach that led to the exposure of personal information of nearly 78.8 million people. The…
The cyber attack on Sony Pictures Entertainment in 2014 was a meticulously planned operation that began with careful preparation well in advance of the publicized attack date. The attackers…
Operation Aurora: a modern CTI deep dive into the 2009–2010 intrusion set Operational CTI, incident response, nation-state tradecraft, CVE-2010-0249, Internet Explorer, Hydraq, Elderwood, IP…
Stuxnet, first discovered in 2010, was a malicious computer worm that caused substantial damage to Iran's nuclear program. The worm targeted supervisory control and data acquisition (SCADA)…
The eBay cyberattack in May 2014 stands as one of the most substantial cybersecurity incidents of the year. The breach compromised a database containing encrypted passwords and other non-financial…
In 2014, JPMorgan Chase, one of the world's leading financial institutions, suffered one of the most significant data breaches in history. The attackers compromised data from 76 million households…
Although the initial breach occurred in late 2013, the impact and implications of the Target data breach were felt well into 2014 and beyond. The breach saw the theft of credit and debit card…
