PetitPotam and ESC8: The NTLM Relay Chain That Owned Active Directory
PetitPotam coerced Windows machines to authenticate, AD CS web enrollment happily minted a DC certificate, and domains fell in an afternoon. The relay class is still with us.
All articles published by
Hmmnm
Hands-on cybersecurity tutorials, CVE breakdowns, and guided learning paths. Every technique is explained, tested, and paired with its mitigation — so you learn the attack and the defense together.
HiveNightmare: The Two-Line Bug That Leaked Every Local Password Hash
One broken inheritance flag left Windows SAM, SYSTEM, and SECURITY hives readable by any user. With shadow copies in play, that meant every local NTLM hash on the box.
Pegasus Zero-Click: Spyware That Needed No Click at All
The Pegasus Project exposed 50,000 targeted numbers and a hard truth: modern mercenary spyware infects phones through iMessage and WhatsApp without the victim doing anything.
Kaseya VSA Ransomware: 60 MSPs, 1,500 Businesses, One Friday
REvil turned Kaseya’s remote-management platform into a mass-encryption weapon, hitting ~60 MSPs and up to 1,500 downstream businesses days before a patch could land.
PrintNightmare: When the Patch Didn’t Fix Anything
A leaked PoC, a patch that didn’t patch, and weeks of registry-hardening confusion — how CVE-2021-34527 turned Windows Print Spooler into a domain-takeover primitive.
Fastly CDN Outage 2021: One Config, 10% of the Web Down
No attack, no breach — a single customer config met a dormant software bug and took Reddit, the Guardian, and roughly a tenth of the internet offline for an hour. The concentration-risk wake-up call.
EA Source Code Theft: A $10 Cookie That Beat MFA
780 GB of Frostbite engine and FIFA code left EA through a purchased Slack cookie and one help-desk MFA reset. The breach that proved sessions, not passwords, are the modern front door.
JBS Foods Ransomware: Paying $11M Even With Working Backups
REvil halted the world’s largest meat processor over a holiday weekend; JBS restored from backups — and still paid $11M for leak suppression and restart insurance. The economics of ransom beyond decryption.
Biden’s Zero Trust Executive Order: The Procurement Pivot
EO 14028 turned zero trust from slide-ware into federal procurement doctrine — MFA, SBOMs, NIST 800-207, the Cyber Safety Review Board — and reset vendor incentives industry-wide.
AirTag Stalking: Five Years of Catch-Up on a $29 Tracker
AirTags made competent covert tracking cost $29 and zero skill. From pre launch warnings to prosecutions and the Apple-Google alert spec, the full history of a safety-by-design failure — and the platform fixes that finally landed.
Colonial Pipeline Ransomware: One Password, 17 Emergency States
DarkSide entered through a no-MFA legacy VPN password, exfiltrated 100 GB, and encrypted Colonial’s IT — prompting a precautionary shutdown of 45% of East Coast fuel supply. Anatomy of the most policy-consequential ransomware ever.
App Tracking Transparency: Apple’s Consent Earthquake, Five Years On
ATT turned iOS advertising identifiers opt-in overnight, denial rates hit 80%+, and Meta booked a $10B impact. How one consent dialog restructured an ad economy — and pushed tracking into fingerprinting’s arms.
- Go to the previous page
- 1
- …
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- …
- 33
- Go to the next page