LastPass 2022: The Dev-Environment Breach That Came Back
August’s ‘contained’ developer-account compromise returned in December as stolen vault backups. Inside the two-act breach.
Plex’s 15M Credential Leak: When Your Forum Post Becomes a Combo List
A forums database with bcrypt hashes and salts hit a criminal forum. The real blast radius was everywhere else users reused passwords.
Solana’s 9,000-Wallet Drain: Who Logged the Seed Phrases?
Slope’s telemetry backend held plaintext seed phrases, and attackers harvested them. The chain saw only valid signatures — and that is the whole lesson.
0ktapus: The SMS Phishing Wave That Hit 130+ Companies
Fake Okta pages, real-time MFA relay, and one crew harvesting 10,000 identities. Why Cloudflare walked away clean and Twilio didn’t.
Nomad Bridge: The $190M Config Bug That Became a Mob Looting
A routine upgrade left message proofs rubber-stamped. Hundreds of copycats drained the bridge in crypto’s most chaotic heist.
Twitter’s 5.4M Scrape: When an API Becomes a Breach Oracle
A patched OAuth endpoint answered one question too honestly: which phone belongs to which handle. The dataset sold for $30k — the class lesson is still with us.
LockBit 3.0’s Bug Bounty: When Ransomware Ran Its Own QA
A criminal franchise paid up to $1M for flaws in its own malware, website, and Tor infrastructure — Silicon Valley tactics inside the ransomware economy.
26 Million Requests Per Second: Cloudflare’s Record DDoS
Five thousand cloud VMs, each pushing 5,000 rps of encrypted traffic at one small website. June 2022’s record flood and the edge doctrine it sealed.
Harmony Horizon: $100M for Two Stolen Keys
A 2-of-5 multisig guarding nine figures. Lazarus took the two keys it needed, and the bridge-custody era changed for good.
Follina in the Wild: TA413, Patch Gaps and Zero-Day Economics
Sixteen days between disclosure and patch. Who exploited Follina in the gap, how fast state and commodity actors moved, and the doctrine it forged.
Confluence CVE-2022-26134: OGNL Injection RCE Under Fire
Exploited in the wild two days before the patch existed. How OGNL injection turned Confluence into June 2022’s internet-scale fire drill — and the playbook it left behind.
Follina: The Office Zero-Day That Needed No Macros
A protocol handler, a remote template, a signed diagnostic tool — CVE-2022-30190 executed PowerShell from a Word file with macros fully disabled.
- Go to the previous page
- 1
- …
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- …
- 23
- Go to the next page