Log4Shell (CVE-2021-44228): How One Logging Library
A single JNDI lookup string turned every Java logger into a front door. The anatomy, response, and lasting lessons of Log4Shell.
AWS us-east-1 Outage: When Multi-Region Wasn’t
A DYNOMITE autoscaler impairment cascaded through AWS's busiest region and its own consoles. The dependency-concentration landmark.
Emotet Resurgence: TrickBot Delivers the Loader Back
Ten months after its takedown, Emotet returned via a TrickBot module. The lesson: criminal franchises rebuild through partners.
Fake FBI Warnings: The 2021 fbi.gov Email Spoofing
Attackers abused a misconfigured FBI notification system to spam fake cyber-warnings from the real fbi.gov address, exposing the limits of email trust.
GoDaddy Breach: One Phished Password, 1.2 Million Sites Exposed
Two months of undetected access to managed WordPress hosting, wholesale sFTP and database credential harvesting, and SSL keys in the bargain.
npm Hijacking Wave: coa, rc, node-ipc and Stolen Maintainers
Popular packages with dormant maintainers pushed info-stealers through postinstall scripts. The registry was fine; the accounts were not.
Nobelium’s Password Spray: The Channel Becomes the Supply Chain
The SolarWinds actor returned with no implant at all — sprayed passwords, replayed tokens, and delegated partner admin rights over 609 channel companies.
Twitch Leak: 125GB of Source Code and Payouts on 4chan
No malware, no zero-day — one exposed internal endpoint handed over Twitch's entire codebase and three years of creator earnings.
Facebook’s BGP Outage: Six Hours, Self-Inflicted, Total
One maintenance command withdrew Facebook's backbone routes, took DNS with it, and locked engineers out of the fix. The outage defended itself.
Apache Path Traversal: CVE-2021-41773 Broke in 24 Hours
A single encoded GET walked out of Apache's docroot, and the first patch didn't hold. Inside the October 2021 traversal zero-day scramble.
REvil Takedown: How 14 Arrests Killed Ransomware’s Worst Brand
October 2021's FSB operation ended REvil with arrests, asset seizures, and infrastructure capture. The talent lived on elsewhere.
DST Root CA X3 Expiry: The Scheduled Outage That Mostly Wasn’t
Five years of notice, one expired root, and a clever cross-sign that kept old Android trusting Let's Encrypt. The rehearsal for every future trust migration.