Computer Security News and Insights
The Breach That Put Every Law Firm on Notice In 2023, the international law firm Bryan Cave Leighton Paisner disclosed a data breach that exposed the personal information of over 51,000 individuals — including clients of major corporations like Mondelēz. The firm didn't just lose data. It lost
In 2023, a single phishing email gave attackers access to MGM Resorts' entire IT infrastructure. The result: over $100 million in losses, days of operational chaos, and a security wake-up call that echoed across every industry. The attackers didn't exploit a zero-day vulnerability or deploy sophisticated malware.
In 2024, a finance executive at a multinational firm wired $25 million to threat actors after a deepfake video call impersonated the company's CFO. That wasn't a Hollywood script — it happened in Hong Kong, and it started with a single phishing email. Executive phishing attacks have
In 2017, Verizon knocked $350 million off its acquisition price of Yahoo after discovering the company had suffered two massive data breaches affecting over three billion accounts. That's not a rounding error. That's what happens when cybersecurity due diligence gets treated as a last-minute checkbox instead
The Threat Already Inside Your Building In 2022, a former Twitter employee was convicted of spying on behalf of Saudi Arabia, accessing the personal data of thousands of users — including dissidents — using nothing more than his legitimate employee credentials. No malware. No phishing email. Just a trusted insider with access
In 2023, security researchers at Kaspersky identified over 100 million adware attacks in a single quarter. That same year, spyware variants like SpinOk embedded themselves inside legitimate apps on the Google Play Store, affecting over 421 million downloads. Both threats rode in through the front door — and most users never
A Single Email Delivered 11 Different Types of Malware In 2023, the FBI's Internet Crime Complaint Center received over 880,000 complaints with losses exceeding $12.5 billion. A significant chunk of those losses traced back to malware delivered through phishing emails and social engineering. I've
In 2023, MGM Resorts lost roughly $100 million to a ransomware attack that started with a social engineering phone call. The attackers didn't exploit some exotic zero-day. They called a help desk, impersonated an employee, and got credentials reset. MGM had security tools. What they lacked was a
The Breach That Started With a Single Click In 2023, MGM Resorts lost an estimated $100 million after a threat actor social-engineered an IT help desk employee with a ten-minute phone call. The attacker didn't exploit a zero-day vulnerability. They didn't brute-force a password. They simply
In March 2025, CISA and the FBI issued a joint advisory warning that the Medusa ransomware gang had compromised over 300 organizations across critical infrastructure sectors — healthcare, education, legal, insurance, and manufacturing. The attack vector in the vast majority of cases? Phishing emails and credential theft. If you think your
