View a list of the 25 most common passwords according to an analysis of 2.5 terabytes of public data breaches.

Explore an interactive timeline of the world's biggest data breaches and hacks, led by the 2024 National Public Data breach, which involved almost three billion stolen records, including full names and Social Security numbers.

Although there are 10,000 possible combinations of four-digit personal identification numbers, data suggests that about 27% of all PINs are one of 20 combinations, including 1234, 1111, and 0000.

20 of the most common cyberattacks

While there are dozens of different types of cyber attacks, this article explains the top 20 most common network attack examples, including phishing, whale-phishing, and spear-phishing attacks. Learn how to best protect yourself.

Visualizing the consequence of data breaches

To get a sense of the grim state of data security today, take a look at this infographic from TruthFinder that explains why 2018 was the year of the data breach tsunami.

In recent years, NIST has suggested that passwords no longer be created using a mix of symbols, numbers, and capital and lowercase letters, as was once recommended.

The worst cyberattacks of the last 10 years

It’s been a rough 10 years in cybersecurity—and it’s only getting worse. From the Stuxnet to the Sony Hack, learn about the worst cyberattacks over the last decade.

How hash functions encrypt stored passwords and can be enhanced with 'salt'

Hash functions convert text into unique, random sets of characters, a process that is computationally expensive and time-consuming to undo. Because hashed outputs for many common passwords are publicly listed, some sites use a salt—additional characters appended to a password—before hashing to produce an output that is not known. When entering a password, it is salted and hashed, then checked against the database for a matching hash before permitting login.

Visualizing cyberattacks by country

Cyber crime is expected to cost the global economy trillions per year by 2025. This data illustration showcases the countries with the most severe cyber attacks from 2006-2020.

Crunching the numbers on the cost of ransomware

This blog is a preview of the 2022 Crypto Crime Report, offering a summary of ransomware activity in 2021, the most active strains of ransomware, and more (w/ data, charts, and illustrations).

Passkeys, a new authentication method, aim to replace traditional passwords

Passkeys use cryptography keys to secure logins without passwords, resisting phishing and risks from data breaches. The FIDO Alliance developed passkeys as a combination of public and private keys for authentication.

Visualize how passkeys, which rely on asymmetric cryptography to authenticate users, work

After using biometrics or a PIN to access the private key stored on a device, it is combined with a random number generated by the site to produce a cryptographic signature. This signature is verified using the site's public key, allowing a user to log in without entering a password. This reduces the risk of fraudulent messages—phishing attacks—and data breaches.

The most popular American baby names by decade

In 1998, the Social Security Administration began ranking the top 1,000 most common first names for each year dating back to 1880. While that list has since been whittled down, Americans can still gain insight into the trending names of the decade. Whether it’s just for curiosity or to avoid more common choices, check out this list of popular names from the past century.

Trick a large language model into revealing secret passwords over multiple rounds, each with increasing safeguards.

Watch a cybersecurity expert answers questions about hacking

From firewalls and VPNs to ransomware and viruses, IBM Distinguished Engineer Jeff Crume has seen many changes in cybersecurity during his 40 years of IT experience. In this video, he explores some of the most significant hacking events in history and provides advice on protecting yourself online.

Fraud and identity theft are among the most common dark web-related crimes.

The science of cryptography, including methods to encrypt data and how to break encryption

Monoalphabetic ciphers use a set of rules to replace each letter with another consistently, making them susceptible to brute force attacks that try every kind of replacement. While more complex ciphers can transform text in less obvious ways, because certain letters are used more often than others, an analysis of letter frequency may reveal patterns that help uncover the rules that make up a cipher.

How to prepare for cyberattacks

An easy-to-digest checklist on the many ways you want protect yourself from a cyberattack before it happens, if it happens, and after it happens.

Most popular baby names in the US by year

The Social Security is one of the most authoritative sources for data on baby names each year. Here's the list of last year's top ten baby names among those children born in the US.

Has your information been compromised on the internet?

Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.

The most common birthdays

Nine of the top 10 most common birthdays fall in September, with Sept. 9 being the most common. However, August is the most common birth month, followed by July and December. On the flip side, the least common birthdays are around major holidays, with Christmas Day being the rarest—probably due to doctors scheduling fewer inductions and C-sections on those days. Find out more birthday surprises here.

The world's 50 most valuable private companies

While public companies typically have the highest valuations, private companies get close. This list breaks down the top 50 as of 2025, with SpaceX at the top with a value of $350B, followed by ByteDance. Over three-fifths of the list are located in the US, with eight in China.

Charting the most popular email providers since 1997

The email is the most stable feature of the Internet; a rare digital product that changed little over the decades. Nonetheless, the major email service providers have vastly shifted. Watch this time-based chart which shows the number of users of the top 10 email providers since 1997, and see how totally nonexistent Gmail skyrockets to dominance by today.

View how AES—the global standard for symmetric encryption—works

Established by the National Institute of Standards and Technology in 2001, the Advanced Encryption Standard transforms plaintext into ciphertext using multiple rounds of processing, including substitution, transposition, and mixing. Larger keys undergo more rounds to produce 16-byte blocks of scrambled data, with 256-bit AES keys taking 3.31 × 10⁵⁶ years to decrypt via brute force.

Watch an ethical hacker provide a tour of the dark web

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

Explore the most common jobs for Americans, broken down by age and gender.

Worldwide cryptocurrency heists tracker

A look at the biggest cryptocurrency heists, be they from an exchange, smart contract, or a business, including amounts, methods, reparations, and consequences.

Listen to a podcast episode that goes inside the 2017 Equifax credit bureau hack

This podcast episode details a 2017 credit bureau hack in which Equifax data about millions of Americans was compromised. It dives into the history of credit bureaus, specifically how they became legally allowed to access Americans' financial information without Americans actually volunteering it themselves.

Explore the cost of major viruses and other malware incidents through 2017

The first significant malware was the Morris worm in 1988, which caused an estimated $10,000 to $10M in damage to computers. With $38B in damage caused, Mydoom is the most costly piece of malware in history. Spread via email and, at one point, accounting for about 25% of all messages sent worldwide, the malware infected computers to create a botnet that launched cyberattacks.

The mathematics of quantum-based cryptography, and why existing data is already at risk

Seeing the potential of this technology, some governments and malicious actors are thought to have already started storing encrypted data, in the hopes that quantum computers within the next 10 to 20 years will be able to decrypt it. As of 2022, the National Institute of Standards and Technology had selected four algorithms for inclusion in a quantum-resistant encryption standard.

Visualizing the growth of botnets

Botnets are a network of computers that have been infected with a variant of malware that coordinates and leverages them for automated mass attacks such as data theft and crashing servers. This interactive map highlights where botnets have been located between 2014-2020.

Visualize the world's top 20 billionaires in 2026

This data visualization shows the 20 wealthiest people in the world as of January 2026. Topping the list with a net worth of more than $713B is Elon Musk, trailed by Larry Page ($258B), Jeff Bezos ($251B), and Larry Ellison ($243B).

Technical vulnerabilities prevent full-proof anonymity when browsing the dark web

Despite encrypting data and relaying it within the Tor network, traffic between the network exit and the final destination is no longer hidden and can be captured. Law enforcement agencies can also attempt to deanonymize users by monitoring and matching data signal patterns entering and leaving the network via a correlation algorithm.

In 2018, it took about 2.3 years to develop a way to exploit a software bug for malicious purposes, but as of 2026, AI tools have reduced this time to about 20 hours.

Around 87 million users were impacted by Facebook's Cambridge Analytica scandal

Cambridge Analytica, a consulting firm with Russian and conservative ties, harvested data from Facebook users through a research tool that tracked interests across social connections on Facebook. Those profiles were used for targeted ad campaigns supporting Donald Trump in 2016 and pro-Brexit ads. A whistleblower originally said the private data of more than 50 million Facebook users was compromised, but a Facebook officer later estimated the number was around 87 million. Facebook settled the class-action lawsuit over the privacy breach for $725M in 2022.

Google reveals the top searches of 2023

Google Search remains the world's most popular online search engine, and the tech behemoth reveals the most common searches from at the end of every year. See global as well as more local trends in most common searches for people, films, and more.

The dark web makes up about 0.01% of all the data on the internet

The surface web (5%-10%) consists of indexed sites—those traditional search engines have visited and stored so users can discover them via web search. The remaining 90%-95% makes up the deep web, which is not indexed and includes email and banking portals that require login credentials. The dark web is unindexed and requires anonymizing software to visit.

Google data centers possess six layers of security

Property boundaries, such as anti-climb fencing, overlapping cameras, vehicle crash barriers, and circulating patrols, are coupled with lobby iris scans and ID and badge checks. The security operations center monitors individuals throughout their visit, including the less than 1% of Google users who ever receive permission to visit the data center floor.

Explore a map of data centers worldwide, numbering over 12,250 as of August 2026, with over 4,500 in the US.

The Melissa 'virus' helped associate pornographic sites with computer viruses

A worm-embedded document posted online enticed users to download and open it by alleging to contain passwords to paywalled explicit websites. Upon opening, the worm shared itself with 50 addresses in a user's Outlook contacts, masquerading as a friendly attachment. Its rapid spread overwhelmed email servers and caused $1.1B in damage worldwide.

View a list of simple ways you can avoid catching a computer virus

Because this type of malware requires human intervention, such as plugging an infected flash drive into a computer or downloading and running an infected file, the chance of infection can be greatly reduced by being cautious about unfamiliar emails, attachments, and links. Keeping systems up to date with the latest security fixes is also crucial.

The global defense industry in one chart

The world's most valuable defense companies (for example, Lockheed Martin) make up much of the global defense industry. As of 2025, RTX led the pack with a roughly $183B market cap.

19 fungal pathogens are of key concern to world health officials

In 2022, this global health body issued its first-ever list of top fungal threats to human health. It said fungal threats are spreading and occurring more frequently. The WHO’s list included 19 fungal pathogens to watch, and said that the most dangerous ones to public health are Cryptococcus neoformans, Aspergillus fumigatus, Candida albicans, and Candida auris. There are only a handful of classes of medication currently available to combat fungal pathogens, with few others in the pipeline even though antimicrobial resistance is growing.

Credit monitoring services may oversell the benefits of dark web monitoring

Currently, technology exists to scrape and download data from webpages, which can then be analyzed to identify a user's information. However, scrapers cannot access or remove personal data from dark websites because they are often protected by paywalls, rendering monitoring ineffective beyond reporting publicly available data breaches.

The 30 most popular YouTubers

From music superstars like Justin Bieber and Taylor Swift to streamers like PewDiePie and MrBeast, the ranks of YouTube’s most-subscribed-to accounts includes a mix of everything from celebrities whose YouTube presence complements the rest of their persona to stars who made a name for themselves solely from the platform. This ranking from Search Engine Journal breaks down the 30 biggest YouTube accounts as of June 2004.

See the lists of the worst hurricanes in the US through 2024

Several metrics, including wind speed, pressure, damage costs, and casualties, may be used to define the most devastating hurricanes. This page provides the top 10 hurricanes across each of these sorting methods.

As of 2025, Wikipedia is one of the top 10 most-visited sites in the world

Alphabet Inc.'s Google search engine and YouTube received nearly 150 billion combined visits in November, followed by Facebook, ChatGPT, and Instagram, which each received over 5 billion visits during the same span. With 4.42 billion visits for the month, Wikipedia ranked just behind Reddit's 4.85 billion.

Researchers report that Anthropic's Claude Mythos AI model has identified thousands of high-severity vulnerabilities across various software, including major operating systems and web browsers, and has suggested ways to exploit them.

Visualize the world's top 50 private equity firms in 2025 by capital raised.

In 2019, a laptop loaded with six of the worst malware in history and described as 'an exhibit of historical weaponry' sold for $1.3M.

The most critical superbug strains (as of 2024)

The World Health Organization updated its list of the highest priority pathogens known to have developed antimicrobial resistance. Topping the 2024 update is Acinetobacter baumannii, carbapenem-resistant ("CRAB"), which has a mortality rate close to 50% and has evolved defenses against last-line medications. Download the full report here.