PrintNightmare: When the Patch Didn’t Fix Anything
A leaked PoC, a patch that didn’t patch, and weeks of registry-hardening confusion — how CVE-2021-34527 turned Windows Print Spooler into a domain-takeover primitive.
Blog
Fastly CDN Outage 2021: One Config, 10% of the Web Down
No attack, no breach — a single customer config met a dormant software bug and took Reddit, the Guardian, and roughly a tenth of the internet offline for an hour. The concentration-risk wake-up call.
EA Source Code Theft: A $10 Cookie That Beat MFA
780 GB of Frostbite engine and FIFA code left EA through a purchased Slack cookie and one help-desk MFA reset. The breach that proved sessions, not passwords, are the modern front door.
JBS Foods Ransomware: Paying $11M Even With Working Backups
REvil halted the world’s largest meat processor over a holiday weekend; JBS restored from backups — and still paid $11M for leak suppression and restart insurance. The economics of ransom beyond decryption.
Biden’s Zero Trust Executive Order: The Procurement Pivot
EO 14028 turned zero trust from slide-ware into federal procurement doctrine — MFA, SBOMs, NIST 800-207, the Cyber Safety Review Board — and reset vendor incentives industry-wide.
AirTag Stalking: Five Years of Catch-Up on a $29 Tracker
AirTags made competent covert tracking cost $29 and zero skill. From pre launch warnings to prosecutions and the Apple-Google alert spec, the full history of a safety-by-design failure — and the platform fixes that finally landed.
Colonial Pipeline Ransomware: One Password, 17 Emergency States
DarkSide entered through a no-MFA legacy VPN password, exfiltrated 100 GB, and encrypted Colonial’s IT — prompting a precautionary shutdown of 45% of East Coast fuel supply. Anatomy of the most policy-consequential ransomware ever.
App Tracking Transparency: Apple’s Consent Earthquake, Five Years On
ATT turned iOS advertising identifiers opt-in overnight, denial rates hit 80%+, and Meta booked a $10B impact. How one consent dialog restructured an ad economy — and pushed tracking into fingerprinting’s arms.
Pulse Secure VPN Zero-Days: When Remote Access Became the Front Door
Pre-auth Pulse Secure exploits handed APT crews and ransomware affiliates appliance-level control of the VPNs that carried pandemic remote work. How credential capture and patch-surviving persistence rewrote edge-appliance incident response.
Codecov Breach: The CI Script That Leaked Build Secrets for Months
A tampered Codecov Bash Uploader quietly shipped CI environment variables — cloud keys, tokens, signing material — to attackers for two months. The curl-pipe-bash trust model dissected, and how build supply-chain security was rewritten after.
REvil Double Extortion: The RaaS Playbook at Full Speed
By March 2021 REvil paired a record $50M Acer demand with leak-site auctions and affiliate economics — industrialised extortion at its zenith. How the machine worked and why every brand since runs its playbook.
F5 BIG-IP RCE (CVE-2021-22986): The 9.8 Edge Emergency
A CVSS 9.8 unauthenticated RCE in BIG-IP iControl REST was mass-exploited within a day of disclosure — web shells, credential theft, coinminers on the boxes that hold your TLS keys. The edge-device patch-race case study.
- Go to the previous page
- 1
- …
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- …
- 33
- Go to the next page