In-depth write-ups of high-impact intrusions, breaches and malware campaigns — how they happened, and what defenders can learn.
111 reports
In November 2017, Uber, the ride-hailing service provider, disclosed a significant data breach that occurred in late 2016. The breach impacted approximately 57 million Uber users and drivers…
In May 2017, the WannaCry ransomware attack swept across the globe, infecting hundreds of thousands of computers in over 150 countries. This high-profile cyberattack disrupted critical systems,…
In 2017, Equifax, one of the largest credit reporting agencies in the United States, experienced a massive data breach that exposed the personal information of millions of individuals. This breach…
CTI Report: Lazarus/APT38 tradecraft against SWIFT Alliance Access and downstream laundering via Manila
Hong Kong-based electronic toy manufacturer VTech announced in November 2015 that it had suffered a significant data breach. The breach resulted in unauthorized access to personal data related to…
In October 2015, TalkTalk, a UK-based telecommunications company, experienced a substantial data breach affecting around 4% of its customers. Hackers were able to gain access to a wealth of data,…
In July 2015, Ashley Madison, a Canadian online dating service marketed to people who are married or in relationships, was hacked by a group calling itself The Impact Team. The breach led to the…
In June 2015, the U.S. Office of Personnel Management (OPM) announced a substantial data breach, marking one of the most significant breaches in U.S. government history. Initially, the breach was…
In February 2015, Anthem, one of the largest health insurance companies in the U.S., suffered a data breach that led to the exposure of personal information of nearly 78.8 million people. The…
The cyber attack on Sony Pictures Entertainment in 2014 was a meticulously planned operation that began with careful preparation well in advance of the publicized attack date. The attackers…
Operation Aurora: a modern CTI deep dive into the 2009–2010 intrusion set Operational CTI, incident response, nation-state tradecraft, CVE-2010-0249, Internet Explorer, Hydraq, Elderwood, IP…
Stuxnet, first discovered in 2010, was a malicious computer worm that caused substantial damage to Iran's nuclear program. The worm targeted supervisory control and data acquisition (SCADA)…
