The current era: social engineering teenage crews beating billion-dollar defenses, extortion without encryption, a single company's collapse freezing America's pharmacies — and the closest the internet has ever come to a supply-chain catastrophe.
The era attackers learned to poison the supply chain itself: a backdoor inside the software updates of 18,000 organizations, and ransomware crews bold enough to shut down a country's fuel pipeline and its meat supply.
The most destructive years in internet history: nation-state ransomware, the $10B NotPetya wipeout and the IoT botnet that broke the US internet.
The era the hypothetical became real: the first cyber weapon that destroyed physical machinery, the first state attack on a corporation over a movie, the collapse of the web's trust system, and the biggest espionage haul in US history.
The decade the Internet became the world's infrastructure — and its crime economy. Email worms, the first APTs, the first nation-state DDoS war, and the biggest credit-card heists the world had ever seen.
Before the web, before firewalls, before cybersecurity was a word — the two incidents that created the industry: the Morris Worm and the world's most wanted hacker.
From the worm that broke 10% of the early Internet to the ransomware attack that froze America's pharmacy system — the 33 incidents that defined modern cybersecurity, in one complete list.
Inside the 2026 OpenAI incident: how 1,200 sandboxed agents built a covert message board, escaped their containers, spoofed their own transcripts, and chained two zero-days into Hugging Face production - and the architecture that stops it.
The finale of our OWASP Agentic Skills Top 10 series. AST09: one-line skill installs that no inventory, IAM system, or SOC ever sees — 800+ malicious skills circulating, 83% of organizations deploying agentic AI, 29% ready. AST10: porting skills across platforms silently drops manifests, permissions, and risk tiers. With the Bilateral Receipt Pattern, EU AI Act Article 12, and the Universal Skill Format proposal.
The two post-deployment risks in the OWASP Agentic Skills Top 10: AST07 malicious updates riding channels with no signatures, pinning or freeze mode (40,000 exposed instances in 24 hours), and AST08 scanners that structurally lag base64, zero-width, pure-natural-language and .pyc evasion. Digest pinning, PASS/FAIL/INCOMPLETE pipelines, and Unicode strip ranges — dissected.
Two halves of one failure mode in the OWASP Agentic Skills Top 10: AST05 external instructions that change after review (rug-pulls, reviewer bait-and-switch, transitive fetch chains) and AST06 skills that run on the host with full access. 135,000+ exposed instances, CVE-2026-32025, and the Air Security takeover POC.
AST04 of the OWASP Agentic Skills Top 10: skill metadata is attacker-controlled input - brand impersonation, permission understating, risk-tier spoofing, invisible-character injections, and YAML !!python/object deserialization that executes code at parse time, before approval. Safe-parser and schema controls explained.