April 2023

Genesis Market Takedown: Sessions Are the New Passwords

Post author:Prabhu Kalyan Samal
Post published:April 25, 2023
Post category:Emerging Tech & Architecture Identity & Phishing Security

Operation Cookie Monster seized the market selling browser sessions, cookies, and saved credentials for ~2M identities, with 119 arrests across 17+ countries. Session-security lessons.

MSI’s BootGuard Key Leak: Hardware Trust on the Market

Post author:Prabhu Kalyan Samal
Post published:April 24, 2023
Post category:Cryptography & PKI Security Supply Chain Security

MSI's ransomware extorted Intel BootGuard OEM signing keys onto underground markets — keys that certify firmware as bootable. Key ceremony lessons.

Papercut RCE 2023: Print Servers as the Softest Door

Post author:Prabhu Kalyan Samal
Post published:April 19, 2023
Post category:Cloud & Infrastructure Security Web & API Security

CVE-2023-27350 gave unauthenticated RCE on PaperCut MF/NG servers across schools and hospitals, with access handed toward ransomware crews.

Western Digital’s My Cloud Outage: Vendor Risk for NAS

Post author:Prabhu Kalyan Samal
Post published:April 11, 2023
Post category:Cloud & Infrastructure Ransomware & Malware Security

WD's 2023 intrusion took My Cloud services offline mid-extortion claims, locking users out of their own files. Cloud-tethered storage lessons.