ChaosDB: The Azure Cosmos DB Chain That Crossed Tenants
A notebook container bug, an embedded certificate, and a confused gateway let any Cosmos DB customer read every other tenant's data. Fixed in 48 hours, taught forever.
Poly Network: The $611M Bridge Hack That Got Returned
A forged keeper-list substitution drained $611M across three chains. Then the attacker gave it all back. The bridge bug class that defined Web3's worst year.
T-Mobile 2021: 76.6 Million Records Through One Unprotected API
No zero-days, no malware — just weak router credentials, a flat network, and an internal API with no authentication. The Binns breach rewrote telecom disclosure playbooks.
ProxyShell: The August 2021 Exchange Pillage After Hafnium
Three patched-but-unapplied Exchange bugs chained into unauthenticated RCE. Webshells, mailbox theft, and ransomware followed at population scale within two weeks.