Follina: The Office Zero-Day That Needed No Macros
A protocol handler, a remote template, a signed diagnostic tool — CVE-2022-30190 executed PowerShell from a Word file with macros fully disabled.
Your Phone Is a Beacon: BLE Location Tracking Goes Mainstream
Rotating MAC addresses were supposed to make Bluetooth anonymous. May 2022's synthesis of research, stalker hardware, and detection tools proved they never did.
Heroku Held the Keys: Anatomy of a Vendor-Token Breach
GitHub's OAuth tokens lived in Heroku's infrastructure. One compromised CI cache later, an ecosystem learned where vendor tokens really live.
Terra/Luna: The $60B Collapse That Wasn’t a Hack
No stolen keys, no exploit — just a death spiral in the mechanism itself. Why UST's fall is mandatory reading for DeFi threat modelling.