Twitter’s 5.4M Scrape: When an API Becomes a Breach Oracle
A patched OAuth endpoint answered one question too honestly: which phone belongs to which handle. The dataset sold for $30k — the class lesson is still with us.
LockBit 3.0’s Bug Bounty: When Ransomware Ran Its Own QA
A criminal franchise paid up to $1M for flaws in its own malware, website, and Tor infrastructure — Silicon Valley tactics inside the ransomware economy.
Predatory Sparrow: The OT Hack That Melted Steel on Camera
Furnaces halted, footage released, workers warned. How a state-aligned group turned industrial sabotage into broadcast messaging.