26 Million Requests Per Second: Cloudflare’s Record DDoS
Five thousand cloud VMs, each pushing 5,000 rps of encrypted traffic at one small website. June 2022's record flood and the edge doctrine it sealed.
Harmony Horizon: $100M for Two Stolen Keys
A 2-of-5 multisig guarding nine figures. Lazarus took the two keys it needed, and the bridge-custody era changed for good.
Follina in the Wild: TA413, Patch Gaps and Zero-Day Economics
Sixteen days between disclosure and patch. Who exploited Follina in the gap, how fast state and commodity actors moved, and the doctrine it forged.
Confluence CVE-2022-26134: OGNL Injection RCE Under Fire
Exploited in the wild two days before the patch existed. How OGNL injection turned Confluence into June 2022's internet-scale fire drill — and the playbook it left behind.
Follina: The Office Zero-Day That Needed No Macros
A protocol handler, a remote template, a signed diagnostic tool — CVE-2022-30190 executed PowerShell from a Word file with macros fully disabled.
Your Phone Is a Beacon: BLE Location Tracking Goes Mainstream
Rotating MAC addresses were supposed to make Bluetooth anonymous. May 2022's synthesis of research, stalker hardware, and detection tools proved they never did.
Heroku Held the Keys: Anatomy of a Vendor-Token Breach
GitHub's OAuth tokens lived in Heroku's infrastructure. One compromised CI cache later, an ecosystem learned where vendor tokens really live.
Terra/Luna: The $60B Collapse That Wasn’t a Hack
No stolen keys, no exploit — just a death spiral in the mechanism itself. Why UST's fall is mandatory reading for DeFi threat modelling.
Beanstalk’s $182M Flash-Loan Governance Attack: Thirteen Seconds
No key stolen, no bug exploited — an attacker borrowed a voting majority on Aave, passed his own proposal, and drained the vaults in one block.
Costa Rica’s Conti Emergency: When Ransomware Became a National Crisis
Conti encrypted the treasury during tax season, declared war on the government, and forced the world's first ransomware state of emergency.
GitHub’s OAuth supply chain: the Heroku Token Heist That Reached npm
Attackers stole GitHub integration tokens from Heroku and Travis CI, pivoted into npm, and downloaded ~109,000 publishing credentials.
Spring4Shell: The RCE That Wasn’t Log4Shell (but Still Bit Hard)
A JDK 9 property path reopened a 2010-era bug class in Spring's data binder — and gave every Tomcat admin a very bad 48 hours.