The City of Inman, South Carolina, confirmed on January 9, 2026, that it was the victim of a cyber attack—an incident that occurred seven months earlier in June 2025. The delayed disclosure raises critical questions about municipal breach notification practices and the growing vulnerability of small-city government infrastructure. The
Copenhagen's First Public Attribution Reveals GRU-Linked Groups Behind Critical Infrastructure Assault Denmark has publicly blamed Russia for orchestrating two separate cyberattacks against its critical infrastructure in 2024 and 2025, marking the first time Copenhagen has formally attributed such incidents to Moscow. The attacks targeted a water utility that
Five months of financial chaos, $1M+ in recovery costs, and hard lessons for municipal cybersecurity On January 16, 2026, the City of Middletown, Ohio finally announced the restoration of its water billing system—bringing an end to a five-month nightmare that left 24,000 customers in billing limbo and cost
January 20, 2026 — A devastating cyberattack on Higham Lane School in Nuneaton, Warwickshire forced the complete closure of the 1,400-student institution for nearly two weeks, highlighting the alarming vulnerability of UK educational establishments to cyber threats. The incident, which occurred over the New Year weekend, crippled every aspect of
As anti-government protests engulf Iran with death tolls potentially reaching 20,000, the Islamic Republic finds itself fighting a two-front cyber war—defending against unprecedented attacks on its own infrastructure while maintaining offensive operations against Western targets. This escalating cyber conflict, intertwined with the U.S. military operation in Venezuela
Strategic Analysis: What Security Leaders Need to Know About Beijing's Latest Move in the Global Tech Decoupling China's latest directive banning cybersecurity software from more than a dozen U.S. and Israeli firms represents far more than a protectionist trade policy—it's a calculated
Cisco Talos reveals China-nexus threat actor deploying zero-day exploits and advanced toolkit in targeted attacks on high-value organizations In a stark warning to critical infrastructure operators across North America, Cisco Talos has unveiled details of an ongoing espionage campaign orchestrated by UAT-8837, a sophisticated China-nexus advanced persistent threat (APT) actor
Executive Summary The Global Risks Report 2026 presents a progressively darkening outlook for the world, characterized by an era of intense competition, the decay of multilateral cooperation, and the compounding effects of interconnected risks across geopolitical, economic, societal, technological, and environmental domains. Analysis based on the Global Risks Perception Survey
Rethinking How We Measure Cyber Catastrophe Published in partnership with CISO Marketplace | January 2026 Executive Summary The year 2025 will be remembered as a watershed moment in cybersecurity history. Traditional metrics of breach severity—record counts in the millions, even billions—tell only part of the story. The most consequential
Executive Summary Canada is confronting an increasingly complex and aggressive cyber threat landscape, characterized by a growing array of state and non-state actors targeting national security and critical infrastructure. State adversaries are evolving beyond traditional espionage, pre-positioning within critical networks for potential future disruptive attacks and combining cyber operations with
On January 7, 2026, a threat actor operating under the alias "Solonik" dropped a dataset titled "INSTAGRAM.COM 17M GLOBAL USERS — 2024 API LEAK" on BreachForums. The dump contained approximately 17.5 million records including usernames, display names, email addresses, phone numbers, and partial physical addresses—
Incident Response
The $10.22 Million Question It's 3:47 AM. Your security operations center (or worse, your email) alerts you: "Suspicious activity detected. Possible data exfiltration." Your next 72 hours will determine whether you're looking at: * Best case: $500,000 in containment and notification costs