Nominations can be submitted for the 2025 CyberScoop 50 awards!

Click here!

Matt Kapko

Matt Kapko is a reporter at CyberScoop. His beat includes cybercrime, ransomware, software defects and vulnerability (mis)management. The lifelong Californian started his journalism career in 2001 with previous stops at Cybersecurity Dive, CIO, SDxCentral and RCR Wireless News. Matt has a degree in journalism and history from Humboldt State University.

Articles by Author

(Getty Images)

Researchers raise alarm about critical Next.js vulnerability

Cybersecurity

Traffic streaks past the Department of Justice (DOJ) headquarters building late in the evening on May 18, 2024 in Washington, DC. (Photo by J. David Ake/Getty Images)

Canadian citizen allegedly involved in Snowflake attacks consents to extradition to US

Cybercrime

Microsoft — (Jeenah Moon/Getty Images)

Nation-state groups hit hundreds of organizations with Microsoft Windows zero-day

Cybercrime

(Getty Images)

Infostealers fueled cyberattacks and snagged 2.1B credentials last year

Cybersecurity

A picture of a toll booth in New Jersey. Scammers have been sending text messages about unpaid toll violations. (Getty Images)

Who is sending those scammy text messages about unpaid tolls?

Cybercrime

In this picture taken near the truce village of Panmunjom inside the demilitarized zone (DMZ) separating the two Koreas, a bird flies near a North Korean flag fluttering in the wind at the propaganda village of Gijungdong in North Korea on October 4, 2022. (Photo by ANTHONY WALLACE/AFP via Getty Images)

Lazarus Group deceives developers with 6 new malicious npm packages

Threats

A view of the Microsoft corporate logo in front of the Microsoft Office building on 41st street and 8th avenue on July 19, 2024 in New York City. (Photo by Craig T Fruchtman/Getty Images)

Microsoft patches 57 vulnerabilities, including 6 zero-days

Threats

External researchers can’t determine the originating IP addresses for the flood of malicious traffic that hit X’s servers without direct access to X’s systems. (Photo by KIRILL KUDRYAVTSEV/AFP via Getty Images)

X suffered a DDoS attack. Its CEO and security researchers can’t agree on who did it.

Threats

National General, an insurance company Allstate acquired for $4 billion in 2021, failed to notify almost 12,000 people their driver’s license numbers were compromised. (Getty Images)

New York sues Allstate and subsidiaries for back-to-back data breaches

Government