Costa Rica’s Conti Emergency: When Ransomware Became a National Crisis
Conti encrypted the treasury during tax season, declared war on the government, and forced the world's first ransomware state of emergency.
GitHub’s OAuth supply chain: the Heroku Token Heist That Reached npm
Attackers stole GitHub integration tokens from Heroku and Travis CI, pivoted into npm, and downloaded ~109,000 publishing credentials.
Spring4Shell: The RCE That Wasn’t Log4Shell (but Still Bit Hard)
A JDK 9 property path reopened a 2010-era bug class in Spring's data binder — and gave every Tomcat admin a very bad 48 hours.
Lapsus$ vs Microsoft: When Teen Hackers Beat a Hyperscaler’s Odds
37GB claimed, one account compromised, no customer data lost — and a DEV-0536 profile that taught the industry how social engineering beats MFA.
Ronin Bridge: The $625M Heist That Ran on Five Keys
North Korea's Lazarus Group drained Axie Infinity's Ronin bridge of $625M with five forged signatures and a leftover permission nobody revoked.
Okta’s Weak Link: When Your IdP’s Vendor Gets Pwned
One contractor's stolen credentials reached super-admin support tooling across 366 Okta tenants. The identity supply chain's hardest lesson.
Dirty Pipe: Writing to Files You Cannot Write
One stale pipe flag let unprivileged users overwrite read-only files — /etc/passwd included — for 18 months on every modern Linux kernel.
Samsung’s 190 GB: Lapsus$ and Source-Code Extortion
One contractor's credentials, 190 GB of Galaxy bootloader and biometrics code, and the pure steal-and-dump model that outlived encryption ransomware.
Conti’s 60,000 Chats: Anatomy of a Ransomware Giant
A pro-Russia statement, a furious insider, and the full Jabber archive of history's most damaging ransomware brand — dumped for everyone to read.
OpenSea’s $1.7M Phish: The Signature Trap
Seventeen users, one fake migration flow, and $1.7M in Apes gone — the phishing heist that made signature UX a security discipline.
HermeticWiper: Cyber Arson on Invasion Eve
Hours before tanks rolled, a signed wiper shredded hundreds of Ukrainian networks. The anatomy of the first invasion-synced destructive campaign.
M-22-09: The Memo That Made Zero Trust Federal Law
OMB's January 2022 mandate gave zero trust deadlines, named technologies, and an oversight structure — rewriting industry roadmaps worldwide.
- Go to the previous page
- 1
- …
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- …
- 28
- Go to the next page