Nobelium’s Password Spray: The Channel Becomes the Supply Chain
The SolarWinds actor returned with no implant at all — sprayed passwords, replayed tokens, and delegated partner admin rights over 609 channel companies.
Twitch Leak: 125GB of Source Code and Payouts on 4chan
No malware, no zero-day — one exposed internal endpoint handed over Twitch's entire codebase and three years of creator earnings.
Facebook’s BGP Outage: Six Hours, Self-Inflicted, Total
One maintenance command withdrew Facebook's backbone routes, took DNS with it, and locked engineers out of the fix. The outage defended itself.
Apache Path Traversal: CVE-2021-41773 Broke in 24 Hours
A single encoded GET walked out of Apache's docroot, and the first patch didn't hold. Inside the October 2021 traversal zero-day scramble.