0ktapus: The SMS Phishing Wave That Hit 130+ Companies
Fake Okta pages, real-time MFA relay, and one crew harvesting 10,000 identities. Why Cloudflare walked away clean and Twilio didn’t.
Blog
Nomad Bridge: The $190M Config Bug That Became a Mob Looting
A routine upgrade left message proofs rubber-stamped. Hundreds of copycats drained the bridge in crypto’s most chaotic heist.
Twitter’s 5.4M Scrape: When an API Becomes a Breach Oracle
A patched OAuth endpoint answered one question too honestly: which phone belongs to which handle. The dataset sold for $30k — the class lesson is still with us.
LockBit 3.0’s Bug Bounty: When Ransomware Ran Its Own QA
A criminal franchise paid up to $1M for flaws in its own malware, website, and Tor infrastructure — Silicon Valley tactics inside the ransomware economy.
26 Million Requests Per Second: Cloudflare’s Record DDoS
Five thousand cloud VMs, each pushing 5,000 rps of encrypted traffic at one small website. June 2022’s record flood and the edge doctrine it sealed.
Harmony Horizon: $100M for Two Stolen Keys
A 2-of-5 multisig guarding nine figures. Lazarus took the two keys it needed, and the bridge-custody era changed for good.
Follina in the Wild: TA413, Patch Gaps and Zero-Day Economics
Sixteen days between disclosure and patch. Who exploited Follina in the gap, how fast state and commodity actors moved, and the doctrine it forged.
Confluence CVE-2022-26134: OGNL Injection RCE Under Fire
Exploited in the wild two days before the patch existed. How OGNL injection turned Confluence into June 2022’s internet-scale fire drill — and the playbook it left behind.
Follina: The Office Zero-Day That Needed No Macros
A protocol handler, a remote template, a signed diagnostic tool — CVE-2022-30190 executed PowerShell from a Word file with macros fully disabled.
Your Phone Is a Beacon: BLE Location Tracking Goes Mainstream
Rotating MAC addresses were supposed to make Bluetooth anonymous. May 2022’s synthesis of research, stalker hardware, and detection tools proved they never did.
Heroku Held the Keys: Anatomy of a Vendor-Token Breach
GitHub’s OAuth tokens lived in Heroku’s infrastructure. One compromised CI cache later, an ecosystem learned where vendor tokens really live.
Terra/Luna: The $60B Collapse That Wasn’t a Hack
No stolen keys, no exploit — just a death spiral in the mechanism itself. Why UST’s fall is mandatory reading for DeFi threat modelling.
- Go to the previous page
- 1
- …
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- …
- 33
- Go to the next page