Colonial Pipeline says ransomware only infected its business network, not the operations network that controls gas flow. But experts say it had potential to spread to control network and suppliers

//// If you missed the live chat today with Alex Stamos and Chris Krebs, I’ve uploaded a recording of it here: //// Hi  Everyone, This is just an FYI to let you know that this Friday (April 30) at 11am PST/2pm EST, I’ll be interviewing Alex Stamos and Chris

Researchers at RiskIQ have discovered 18 additional command servers used in the hacking campaign, which may help identify more victims. They also spotted mysterious server activity in February 2020.

A little-seen report issued last month by the Atlantic Council described in detail what a source confirms was the company’s alleged activities on behalf of the Russian government.

Launching a new Discord channel with seven other writers for Zero Day subscribers and others who want to discuss important topics and stories, or just spill the tea

A timeline of sabotage and assassinations against Iran’s nuclear program

Experts say an electrical blackout on Sunday at the Natanz uranium enrichment plant in Iran wasn't just about halting the centrifuges, but likely was aimed specifically at damaging them.

These included 10,000 daily phishing attempts and an average of 1.8 million web-based “attacks” per month.

Officials have said the SolarWinds hacking campaign succeeded in part because of a gap in NSA surveillance power. But what exactly is the gap and how might the gov use it to gain domestic spy power?

The SolarWinds hacking campaign has raised a lot of questions about why intruders behind the operation, believed to be from Russia, weren’t caught sooner as they moved through government and private networks for months undetected. Some have wondered why the National Security Agency’s signals intelligence and skilled hackers,