Twitter’s 5.4M Scrape: When an API Becomes a Breach Oracle
A patched OAuth endpoint answered one question too honestly: which phone belongs to which handle. The dataset sold for $30k — the class lesson is still with us.
LockBit 3.0’s Bug Bounty: When Ransomware Ran Its Own QA
A criminal franchise paid up to $1M for flaws in its own malware, website, and Tor infrastructure — Silicon Valley tactics inside the ransomware economy.
Predatory Sparrow: The OT Hack That Melted Steel on Camera
Furnaces halted, footage released, workers warned. How a state-aligned group turned industrial sabotage into broadcast messaging.
26 Million Requests Per Second: Cloudflare’s Record DDoS
Five thousand cloud VMs, each pushing 5,000 rps of encrypted traffic at one small website. June 2022's record flood and the edge doctrine it sealed.
Harmony Horizon: $100M for Two Stolen Keys
A 2-of-5 multisig guarding nine figures. Lazarus took the two keys it needed, and the bridge-custody era changed for good.
Follina in the Wild: TA413, Patch Gaps and Zero-Day Economics
Sixteen days between disclosure and patch. Who exploited Follina in the gap, how fast state and commodity actors moved, and the doctrine it forged.
Confluence CVE-2022-26134: OGNL Injection RCE Under Fire
Exploited in the wild two days before the patch existed. How OGNL injection turned Confluence into June 2022's internet-scale fire drill — and the playbook it left behind.
Follina: The Office Zero-Day That Needed No Macros
A protocol handler, a remote template, a signed diagnostic tool — CVE-2022-30190 executed PowerShell from a Word file with macros fully disabled.
Your Phone Is a Beacon: BLE Location Tracking Goes Mainstream
Rotating MAC addresses were supposed to make Bluetooth anonymous. May 2022's synthesis of research, stalker hardware, and detection tools proved they never did.
Heroku Held the Keys: Anatomy of a Vendor-Token Breach
GitHub's OAuth tokens lived in Heroku's infrastructure. One compromised CI cache later, an ecosystem learned where vendor tokens really live.
Terra/Luna: The $60B Collapse That Wasn’t a Hack
No stolen keys, no exploit — just a death spiral in the mechanism itself. Why UST's fall is mandatory reading for DeFi threat modelling.
Beanstalk’s $182M Flash-Loan Governance Attack: Thirteen Seconds
No key stolen, no bug exploited — an attacker borrowed a voting majority on Aave, passed his own proposal, and drained the vaults in one block.
- Go to the previous page
- 1
- …
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- …
- 28
- Go to the next page