Unlike malicious hackers who attack computer systems for unethical reasons, ethical hackers are authorized to test and penetrate a system to identify vulnerabilities.

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

What is OSINT? How do hackers gather intel about targets? Just how much can they learn about you? Learn more as we dig in to the world of OSINT.

Biohacking seeks to optimize human health and performance through everything from simple lifestyle adjustments to more radical interventions like body modifications and experimental technology. At its core, biohacking covers a wide spectrum—ranging from improving sleep and focus to implanting devices that integrate technology with the human body.

A technician bought an old, likely-decommissioned voting machine from 2013 and took it apart to see how a would-be hacker might be able to exploit its vulnerabilities. Get a sense of the needs for secure, up-to-date voting machines with this...

From firewalls and VPNs to ransomware and viruses, IBM Distinguished Engineer Jeff Crume has seen many changes in cybersecurity during his 40 years of IT experience. In this video, he explores some of the most significant hacking events in history and provides advice on protecting yourself online.

Biohacking is a broad collection of self-improvement techniques meant to enhance a human's health, lifespan, or ability. There are basic biohacks, like the use of caffeine, and more extreme ones, like under-the-skin implants. The difference between biohacking and standard medicine is that biohacking is primarily a do-it-yourself approach and is mostly unregulated.

A general approach that employs technology to enhance the functioning of the human body, biohacking enthusiasts are continuously seeking new ways to optimize their performance. Martin Kremmer, an entrepreneur who became interested in the topic after experiencing burnout, explores his own experiences in biohacking his own diet and lifestyle in pursuit of a longer, healthier life.

While no computer system is immune to all cyberattacks and malware, the transparency of open-source technology means many thousands of developers can review and oversee the underlying code powering the software on an ongoing basis. This increases the likelihood of catching and patching vulnerabilities more quickly than smaller groups of cybercriminals looking to exploit them.

An easy-to-digest checklist on the many ways you want protect yourself from a cyberattack before it happens, if it happens, and after it happens.

Because computer viruses, worms, and other malicious software reside within a computer's operating system, which manages computer hardware and software, cybercriminals writing effective malicious code must understand how the OS manages input and output, permissions, memory, etc. Knowledge of credentials and network access also helps create malware that easily spreads.

While there are dozens of different types of cyber attacks, this article explains the top 20 most common network attack examples, including phishing, whale-phishing, and spear-phishing attacks. Learn how to best protect yourself.

Fancy Bear (APT28) is a Russian-based hacker group that targets a variety of organizations across the globe. Learn how to prevent Fancy Bear.

Many of the first researchers and hobbyists who created viruses and worms showed a natural curiosity in experimenting with and designing such software to make a name for themselves and advance the field of computer science. In the future, AI-augmented malware may adapt in real-time or design enhanced cryptojackers, infostealers, and ransomware for cybercriminals.

Browsing the dark web requires onion routing, which prevents visitors from being identified and the locations from which they connect from being traced. This has been useful to activists in environments affected by political oppression or instability. However, those unfamiliar with navigating the space may encounter malware and network attacks from denizen hackers.

As long as users do not pay for illegal goods or services or acquire illegal content, they cannot be prosecuted. Those on the dark web include academics, researchers, and cybersecurity experts gathering threat intelligence on cybercriminals, cyberterrorists, and state actors, as well as protesters, activists, and grassroots organizers.

During a drive-by download attack, security flaws in a program or operating system (e.g., Windows) used to access online content are exploited, and malicious code is downloaded—for example, when loading a hacked webpage—onto a user's device without their knowledge. Restricting internet browsing to safe sites and installing security updates helps prevent these attacks.

Computer viruses require user interaction to execute a file and spread, whereas worms can self-replicate across systems without human intervention. Ransomware locks systems until a key is provided, spyware tracks and reports user activity to a third party, and trojans disguise various types of malware as legitimate software.

In September 2025, a Chinese state-sponsored group targeted 30 large tech companies, financial institutions, chemical manufacturing companies, and government agencies by manipulating Claude Code, having succeeded in infiltrating a small subset. The cyberattack is believed to have been the first of its scale carried out without major human intervention.

Here's the story of Susan Thunder, a woman who entered the hacker underground scene in the late 1970s and one day disappeared completely. She had a troubled past, facing abuse and hardship, and found solace in manipulating phone systems and later computer systems. She became involved with prominent hackers and her ability to control systems mirrored her quest for personal control. Her story highlights the role of social engineering in hacking.

Estonia is host to one of the world’s largest annual interactive cybersecurity drills. Russia is always considered the main threat, but this year, the war in Ukraine has only added to the stakes.

Currently, technology exists to scrape and download data from webpages, which can then be analyzed to identify a user's information. However, scrapers cannot access or remove personal data from dark websites because they are often protected by paywalls, rendering monitoring ineffective beyond reporting publicly available data breaches.

Hackers using stolen credit cards would create "Fortnite" accounts and purchase V-bucks, the in-game currency. The hackers would then sell the entire "Fortnite" account on sites like eBay. For instance, an account with $100 worth of stolen V-bucks might sell $25 on eBay.

Insecure devices connected to the Internet of Things pose risks to the entire network, which cybercriminals can hijack to compromise infrastructure and private resident data. Poorly secured systems that become inoperable can undermine the promise of smart cities by worsening the quality of life.

The first viral infections were identified by comparing the computer code of programs and files with a database of known virus codes, a method known as signature detection. The ongoing creation of new malware made databases continuously outdated, leading to the development of systems that detect patterns consistent with known viral activity.

An HP analysis found that 77% of cybercriminal marketplaces require vendors to purchase a license to sell their products, which can cost up to $3,000. About 92% of these marketplaces also use a third-party dispute-resolution service to handle customer service issues, thereby promoting "honor among thieves."

A key ethical dilemma—the contemplation conundrum—explores whether implants might misinterpret mere imagination as intent to act. Neuroscientists have found no brain signal that clearly marks when someone decides to act, making intent hard to detect in neurotechnological systems.

On their YouTube channel, Malware historian Daniel White has documented what happens when various types of malware—mostly from the 1980s and 90s—run on a computer or Nokia cell phone. The demonstrations were safely conducted within virtual machines—older operating systems run within contained windows of modern software, resembling a picture-in-picture setup.

A computer expert who created a system to track down sources of revenge porn and an investigative journalist joined forces to investigate digital abuse. Their investigations focused on so-called clear nets, websites that make up the web most users surf. Then, they turned their investigation toward the dark web, where they found a child abuse website with more than 1 million registered users.

Despite encrypting data and relaying it within the Tor network, traffic between the network exit and the final destination is no longer hidden and can be captured. Law enforcement agencies can also attempt to deanonymize users by monitoring and matching data signal patterns entering and leaving the network via a correlation algorithm.

Some of the earliest significant pieces of malware—the Creeper worm and the Elk Cloner virus—displayed silly messages to users without causing major harm. As computer science has advanced, malware has become more easily spread, incorporated social engineering to manipulate users, targeted infrastructure systems, and been used by governments for virtual espionage.

Besides those authored in research labs as proofs of concept for self-replicating software, hobbyists would create malware that played music or displayed text and animations that intentionally revealed the infection as a means of showing off, rather than hiding their spread.

By using a network of devices, including digital meters, sensors, and controllers, smart grids can quickly detect mechanical issues and fluctuations in supply and demand, automatically adjusting electricity flow to prevent cascading failures. While this is important for variable solar and wind power generation, many of these computer systems are designed to be controlled remotely, which increases the risk of malicious access.

The DIY nature of biohacking gives the work an entrepreneurial feel, as seen by the emergence of community labs, at-home testing kits, and corporation-backed cities that don't necessarily require government-approved testing standards. Próspera, Honduras, created by a business of the same (first) name, was born from legislation that allowed international businesses to shave off a slice of the country to establish their own micronations.

A suite of cutting-edge hardware and computation-intensive software creates the potential for self-driving cars to be safer, more fuel-efficient, and more accessible to a broader range of drivers. However, automation also introduces potential cybersecurity threats.

These attacks can manipulate AI behavior by hiding instructions in websites and PDFs that become part of training data. The more companies connect sites, services, and sensitive datasets to AI tools, the greater the chances of exposure to malicious code.

This research paper explores whether virtual reality should be used as a tool for improving our moral character — and, if not, what ethical alternatives could be.

Engineers working on the Mark II computer at Harvard University identified a moth in one of its components in 1947, which caused it to malfunction. Describing the incident as the "first actual case of bug being found," the term first used by Thomas Edison in 1878 to describe faults in an apparatus caught on.

It’s been a rough 10 years in cybersecurity—and it’s only getting worse. From the Stuxnet to the Sony Hack, learn about the worst cyberattacks over the last decade.

Smart cities require vast troves of data to run, making their systems attractive to hackers. Listen to this one hour podcast to learn about the risks and what is being done to mitigate them.

Hash functions convert text into unique, random sets of characters, a process that is computationally expensive and time-consuming to undo. Because hashed outputs for many common passwords are publicly listed, some sites use a salt—additional characters appended to a password—before hashing to produce an output that is not known. When entering a password, it is salted and hashed, then checked against the database for a matching hash before permitting login.