Blog – Page 20 – Hmmnm – Cybersecurity Tutorials

Medibank 2022: The Ransom Refusal That Published Patients

Post author:Hmmnm
Post published:October 18, 2022
Post category:Emerging Tech & Architecture Ransomware & Malware Security

Criminals entered Medibank via a contractor's VPN credentials on a gateway without MFA, then dumped 9.7M customers' health data after the ransom refusal.

Text4Shell: The 9.8 Severity Score That Wasn’t Log4Shell

Post author:Hmmnm
Post published:October 13, 2022
Post category:Security Supply Chain Security

CVE-2022-42889 in Apache Commons Text scored CVSS 9.8 but needed apps to interpolate attacker strings — most never did. The reachability-triage lesson.

Fortinet CVE-2022-40684: Admin Access Without a Password

Post author:Hmmnm
Post published:October 10, 2022
Post category:Cloud & Infrastructure Security Web & API Security

A CVSS 9.8 authentication bypass let attackers add their own SSH keys to FortiOS admin accounts via crafted HTTPS requests. Exploited at disclosure.

WhatsApp’s 2022 Ring-Phase RCE: Code Execution Before You Answer

Post author:Hmmnm
Post published:September 26, 2022
Post category:Security Web & API Security

CVE-2022-36934 gave WhatsApp a CVSS 9.8 integer-overflow RCE that could execute during the video-call ring — before the victim answered. Zero interaction.

GTA VI Leak: When Your Slack Workspace Is the Vault

Post author:Hmmnm
Post published:September 25, 2022
Post category:Identity & Phishing Security Supply Chain Security

A Lapsus$-linked teenager allegedly reached Rockstar's Slack via helpdesk social engineering and posted 90+ GTA VI dev clips. The collaboration suite was the vault.

Optus 2022: 9.8M Records, One Unauthenticated API, Zero Exploits

Post author:Hmmnm
Post published:September 22, 2022
Post category:Identity & Phishing Security Web & API Security

Australia's second-largest telco exposed ~9.8M customer records via an API left unauthenticated in production. No zero-day, no phishing — just enumeration.

Uber’s 2022 Hack: A Bought Password, a Flood of Pushes, and vSphere

Post author:Hmmnm
Post published:September 15, 2022
Post category:Cloud & Infrastructure Identity & Phishing Security

An 18-year-old bought a contractor's Uber password, bombarded them with MFA pushes until one was approved, then roamed to vSphere via hardcoded credentials.

LastPass 2022: The Dev-Environment Breach That Came Back

Post author:Hmmnm
Post published:August 27, 2022
Post category:Cloud & Infrastructure Identity & Phishing Security

August's 'contained' developer-account compromise returned in December as stolen vault backups. Inside the two-act breach.

Plex’s 15M Credential Leak: When Your Forum Post Becomes a Combo List

Post author:Hmmnm
Post published:August 25, 2022
Post category:Identity & Phishing Security

A forums database with bcrypt hashes and salts hit a criminal forum. The real blast radius was everywhere else users reused passwords.

Solana’s 9,000-Wallet Drain: Who Logged the Seed Phrases?

Post author:Hmmnm
Post published:August 18, 2022
Post category:Cryptography & PKI Identity & Phishing Security

Slope's telemetry backend held plaintext seed phrases, and attackers harvested them. The chain saw only valid signatures — and that is the whole lesson.