Somewhat breathless worries of an electrical-grid Pearl Harbor aside, ISIS continues to concentrate on information operations, both in social media (showing considerable agility in Twitter) and in propaganda of the deed (displaying heartbreaking savagery).

Minor cyber-rioting gutters on in Pakistan.

NATO continues to stiffen its interpretation of Article 5 (collective defense) as it applies to cyberspace. The alliance is also discussing measures against ISIS and Russian aggression (the latter far likelier to be cyber and economic than kinetic).

Home Depot advises its customers to look to their financial statements as it acknowledges a pay card breach. Beyond that the retailer continues its fairly tight-lipped investigation. Credit cards evidently stolen from Home Depot stores — some analysts think essentially every store was affected — have turned up in the Rescator carder black market. There's a veneer of Russian patriotism over Rescator nowadays, but this incident seems fairly straightforward criminality. (Still, it can be hard to tell. See studies of the burgeoning Chinese criminal underground and its overlap with state security.)

Ars Technica provides an account of the JPMorgan hackers' "long game."

iCloud may not have suffered a system-wide breach, but the celebrity photo leaks drop plenty of odium on Apple nonetheless. Much criticism centers on failure to protect customers against brute-forcing. Wired goes so far as to publish a call to litigation. The incident prompts handwringing over cloud security as a whole.

Cyberintel says it's discovered a long-running business cyber espionage campaign ("Harkonnen," in an homage to "Dune") active in Europe since 2002.