Lapsus$ vs Microsoft: When Teen Hackers Beat a Hyperscaler’s Odds
37GB claimed, one account compromised, no customer data lost — and a DEV-0536 profile that taught the industry how social engineering beats MFA.
Ronin Bridge: The $625M Heist That Ran on Five Keys
North Korea's Lazarus Group drained Axie Infinity's Ronin bridge of $625M with five forged signatures and a leftover permission nobody revoked.
Okta’s Weak Link: When Your IdP’s Vendor Gets Pwned
One contractor's stolen credentials reached super-admin support tooling across 366 Okta tenants. The identity supply chain's hardest lesson.
Dirty Pipe: Writing to Files You Cannot Write
One stale pipe flag let unprivileged users overwrite read-only files — /etc/passwd included — for 18 months on every modern Linux kernel.
Samsung’s 190 GB: Lapsus$ and Source-Code Extortion
One contractor's credentials, 190 GB of Galaxy bootloader and biometrics code, and the pure steal-and-dump model that outlived encryption ransomware.