Computer Security US Blog

Computer Security News and Insights

Computer Security Advice

Computer Security Advice That Actually Works in 2026

A school district in Arizona lost $3.5 million in January 2024 after a single employee followed a spoofed email's wire transfer instructions. No malware. No sophisticated zero-day exploit. Just one person who didn't recognize a social engineering attack. That's why most computer security

Carl B. Johnson Jun 12, 2026 5 min read
Types of Malware

Types of Malware: What Every Organization Must Know

In February 2024, Change Healthcare — one of the largest health payment processors in the U.S. — was hit by the ALPHV/BlackCat ransomware group. The attack disrupted claims processing for hospitals and pharmacies nationwide, exposed protected health information for an estimated 100 million people, and reportedly led to a $22

Carl B. Johnson Jun 12, 2026 6 min read
Spoofing Caller

Spoofing Caller Attacks: How Hackers Weaponize Trust

Your Bank Just Called. Except It Didn't. In 2023, the FBI's Internet Crime Complaint Center reported over $1.2 billion in losses from call center fraud and impersonation scams. A significant chunk of those losses started the same way: a spoofing caller displaying a legitimate number

Carl B. Johnson Jun 12, 2026 5 min read
Business Email Compromise

Business Email Compromise: The $2.9 Billion Threat

In 2023, the FBI's Internet Crime Complaint Center (IC3) reported that business email compromise caused $2.9 billion in adjusted losses — making it the single most financially devastating cybercrime category they track. Not ransomware. Not credential theft rings. BEC. And that number only reflects what gets reported. I&

Carl B. Johnson Jun 11, 2026 5 min read
Data Breach Examples 2026

Data Breach Examples 2026: Lessons from Real Attacks

In January 2026, a major U.S. healthcare network disclosed that threat actors had exfiltrated over 3 million patient records after compromising a single employee's credentials through a phishing email. It wasn't sophisticated malware. It wasn't a zero-day. It was a fake password-reset page.

Carl B. Johnson Jun 11, 2026 5 min read
SaaS Security

SaaS Security Best Practices Your Team Needs in 2026

The Average Company Runs 130 SaaS Apps — And Secures Maybe Half In early 2024, a threat actor breached Snowflake customer environments — not by exploiting a zero-day, but by using stolen credentials harvested from infostealer malware. The result? Hundreds of millions of records exposed across companies like Ticketmaster and AT&

Carl B. Johnson Jun 10, 2026 6 min read
Cloud Storage Security Risks

Cloud Storage Security Risks Your Team Is Ignoring

A Single Misconfigured S3 Bucket Exposed 540 Million Facebook Records Back in 2019, researchers at UpGuard discovered that two third-party Facebook app developers had left hundreds of millions of user records sitting in publicly accessible Amazon S3 buckets. No hacking required. No sophisticated exploit. Just wide-open cloud storage that anyone

Carl B. Johnson Jun 10, 2026 5 min read
Data Breach Response Plan

Data Breach Response Plan: Build One Before You Need It

The Breach That Exposed 147 Million People — and a Broken Plan When Equifax disclosed its 2017 breach, the company technically had a data breach response plan. They had security teams, legal counsel, and a PR department. What they didn't have was a plan that actually worked under pressure.

Carl B. Johnson Jun 10, 2026 6 min read