Explore a list of bug bounty programs, which pay ethical hackers for finding vulnerabilities in computing systems.

An HP analysis found that 77% of cybercriminal marketplaces require vendors to purchase a license to sell their products, which can cost up to $3,000. About 92% of these marketplaces also use a third-party dispute-resolution service to handle customer service issues, thereby promoting "honor among thieves."

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

Many of the first researchers and hobbyists who created viruses and worms showed a natural curiosity in experimenting with and designing such software to make a name for themselves and advance the field of computer science. In the future, AI-augmented malware may adapt in real-time or design enhanced cryptojackers, infostealers, and ransomware for cybercriminals.

While no computer system is immune to all cyberattacks and malware, the transparency of open-source technology means many thousands of developers can review and oversee the underlying code powering the software on an ongoing basis. This increases the likelihood of catching and patching vulnerabilities more quickly than smaller groups of cybercriminals looking to exploit them.

The first significant malware was the Morris worm in 1988, which caused an estimated $10,000 to $10M in damage to computers. With $38B in damage caused, Mydoom is the most costly piece of malware in history. Spread via email and, at one point, accounting for about 25% of all messages sent worldwide, the malware infected computers to create a botnet that launched cyberattacks.

This blog is a preview of the 2022 Crypto Crime Report, offering a summary of ransomware activity in 2021, the most active strains of ransomware, and more (w/ data, charts, and illustrations).

What is OSINT? How do hackers gather intel about targets? Just how much can they learn about you? Learn more as we dig in to the world of OSINT.

The untraceable cryptocurrency Monero is used in about 60% of transactions across more than 37 active marketplaces that sell copyrighted materials, private information, and phishing kits—tools that help bad actors more easily create fake sites to steal users' data—for financial fraud.

From firewalls and VPNs to ransomware and viruses, IBM Distinguished Engineer Jeff Crume has seen many changes in cybersecurity during his 40 years of IT experience. In this video, he explores some of the most significant hacking events in history and provides advice on protecting yourself online.

Currently, technology exists to scrape and download data from webpages, which can then be analyzed to identify a user's information. However, scrapers cannot access or remove personal data from dark websites because they are often protected by paywalls, rendering monitoring ineffective beyond reporting publicly available data breaches.

Hackers using stolen credit cards would create "Fortnite" accounts and purchase V-bucks, the in-game currency. The hackers would then sell the entire "Fortnite" account on sites like eBay. For instance, an account with $100 worth of stolen V-bucks might sell $25 on eBay.

Cyber crime is expected to cost the global economy trillions per year by 2025. This data illustration showcases the countries with the most severe cyber attacks from 2006-2020.

A technician bought an old, likely-decommissioned voting machine from 2013 and took it apart to see how a would-be hacker might be able to exploit its vulnerabilities. Get a sense of the needs for secure, up-to-date voting machines with this...

Engineers working on the Mark II computer at Harvard University identified a moth in one of its components in 1947, which caused it to malfunction. Describing the incident as the "first actual case of bug being found," the term first used by Thomas Edison in 1878 to describe faults in an apparatus caught on.

A look at the biggest cryptocurrency heists, be they from an exchange, smart contract, or a business, including amounts, methods, reparations, and consequences.

As long as users do not pay for illegal goods or services or acquire illegal content, they cannot be prosecuted. Those on the dark web include academics, researchers, and cybersecurity experts gathering threat intelligence on cybercriminals, cyberterrorists, and state actors, as well as protesters, activists, and grassroots organizers.

Maybe you've seen one of Hannah Williams' videos on social media. On her viral "Salary Transparent Street" accounts, Williams stands on the street with a microphone and asks passersby to tell her how much money they make per year. This podcast interview with Williams details what she's learned about pay transparency in the process. Listen to it here.

At social media management platform Buffer, employees have been able to see each other's salaries since the year 2013. This article explains how Buffer's decision to make these numbers public has impacted the social media company's workplace culture, internal wage growth, and more. Read the article here.

To get a sense of the grim state of data security today, take a look at this infographic from TruthFinder that explains why 2018 was the year of the data breach tsunami.

Research on pay transparency's impacts has been limited given the short amount of time since American states began passing pay transparency legislation. However, this early study from researchers out of Brown and Harvard found that increasing pay transparency could have the potential to decrease worker bargaining power, resulting in lower average wages for employees. Read the research here.

Pay transparency laws in the US are evolving quickly, as some states introduce them for the first time and others update existing legislation. This resource has an updated list of key pay transparency legislation in states across the country, as well as general explainers about what each of those laws dictate. Check it out here.

A computer expert who created a system to track down sources of revenge porn and an investigative journalist joined forces to investigate digital abuse. Their investigations focused on so-called clear nets, websites that make up the web most users surf. Then, they turned their investigation toward the dark web, where they found a child abuse website with more than 1 million registered users.

Fancy Bear (APT28) is a Russian-based hacker group that targets a variety of organizations across the globe. Learn how to prevent Fancy Bear.

Have a fistful of Bitcoin? SpendMeNot provides a fascinating infographic that shows which companies currently accept the cryptocurrency. If you want to know where you can engage in Bitcoin transactions, this extensive resource directs you to the right merchants. Food, jewelry, banks, travel services and more are all represented here.

That adds up to close to $1T in what's known as the "tax gap." Read a breakdown on the main drivers of tax evasion (distinct from legal tax avoidance) in the US.

Biohacking seeks to optimize human health and performance through everything from simple lifestyle adjustments to more radical interventions like body modifications and experimental technology. At its core, biohacking covers a wide spectrum—ranging from improving sleep and focus to implanting devices that integrate technology with the human body.

In 2025, five more states enacted pay transparency laws, requiring employers to disclose salaries in job postings. The goal? Reduce wage gaps and promote fairness. But despite these laws, 42% of job listings still hide pay details.

It’s been a rough 10 years in cybersecurity—and it’s only getting worse. From the Stuxnet to the Sony Hack, learn about the worst cyberattacks over the last decade.

Researchers have uncovered online storefronts allegedly run by members of various mafia or hitmen that offer to harm or murder individuals in exchange for monetary payment. However, no known murder has been attributed to any of them, and cybercrime task forces believe them to be scams (warning—sensitive content).

This podcast episode details a 2017 credit bureau hack in which Equifax data about millions of Americans was compromised. It dives into the history of credit bureaus, specifically how they became legally allowed to access Americans' financial information without Americans actually volunteering it themselves.

While there are dozens of different types of cyber attacks, this article explains the top 20 most common network attack examples, including phishing, whale-phishing, and spear-phishing attacks. Learn how to best protect yourself.

While the benefits of pay transparency may seem plentiful to some, there are a few less obvious downsides. For instance, some argue companies that implement pay transparency could end up hiring fewer people or pitting employees against each other. For a full list of perceived pros and cons of pay transparency, click here.

In September 2025, a Chinese state-sponsored group targeted 30 large tech companies, financial institutions, chemical manufacturing companies, and government agencies by manipulating Claude Code, having succeeded in infiltrating a small subset. The cyberattack is believed to have been the first of its scale carried out without major human intervention.

A paper from the National Bureau of Economic Research found that without H-1B workers, American computer scientists would earn 2.6% to 5.1% more and domestic employment could rise by 11%, but consumers would pay more for advanced technology, and output would decrease.

A general approach that employs technology to enhance the functioning of the human body, biohacking enthusiasts are continuously seeking new ways to optimize their performance. Martin Kremmer, an entrepreneur who became interested in the topic after experiencing burnout, explores his own experiences in biohacking his own diet and lifestyle in pursuit of a longer, healthier life.

Generally speaking, pay transparency occurs when an employer provides compensation information. But that idea can take many different forms in different states with different pay transparency laws depending on what each specific law dictates. To learn about more pay transparency basics like the ones above, read this article.

James Parker discovered a glitch in an Australian cryptocurrency exchange that would allow him to cash in credits worth over $20M and make big gifts to his friends. Like most loopholes, the authorities found out, but not before his life was transformed. The first in a six-part series.

A US government estimate puts the cost of all foodborne illness in 2023 at almost $75 billion dollars. In a report published by the US Department of Agriculture’s Economic Research Service, government analysts detailed how the burden of foodborne illness includes medical costs, but also more hidden costs like lost wages. The analysis also breaks down estimated costs by pathogen.

Here's the story of Susan Thunder, a woman who entered the hacker underground scene in the late 1970s and one day disappeared completely. She had a troubled past, facing abuse and hardship, and found solace in manipulating phone systems and later computer systems. She became involved with prominent hackers and her ability to control systems mirrored her quest for personal control. Her story highlights the role of social engineering in hacking.