hero-efb-part2
EFB Hardware Explained: Class 1, Class 2, Class 3 and Portable vs Installed
Class 1, 2, 3 EFB hardware explained — plus how AC 120-76E replaced classes with portable vs installed. Displays, AIDs, buses, power, mounting.
Engineering deep dives for builders: MCP and AI-tooling internals, API design and abuse cases, cloud and infrastructure (Terraform, Kubernetes, CI/CD), and the platform-security angles that come with them. Written by the researcher behind Hmmnm – practical, current, and tied to the security practice.
Meta’s €1.2B GDPR Fine: Transfers vs. Reality
Ireland’s DPC fined Meta €1.2B over EU-US transfers that Schrems II had already doomed — the largest GDPR fine ever, ordering suspension and deletion. Transfer-governance lessons for security teams.
LAPSUS$ Convictions: Teenagers, Helpdesks, and the GTA VI Leak
A London jury convicted the teenage LAPSUS$ hackers whose SIM swaps, MFA-fatigue pushes, and helpdesk manipulation breached Nvidia, Microsoft, Okta, Uber, and Rockstar — closing the criminal case that proved identity is the real perimeter.
Guardian Ransomware: The Newsroom That Kept Printing
Ransomware forced the Guardian’s newsroom off its networks for weeks in late 2022 — yet print and web kept publishing. Editorial continuity lessons.
SVB’s Collapse: When Banking Becomes a Security Problem
SVB’s March 2023 run froze payroll for half of venture-backed tech and minted a fraud wave targeting displaced customers. Treasury continuity lessons.
Royal Mail vs LockBit: The $80M Ransom Refusal
LockBit encrypted Royal Mail’s international sorting operations in January 2023 and demanded $80M. Royal Mail paid nothing and kept the letters moving.
SEC v. Binance and Coinbase: Custody Meets Law
The SEC’s June 2023 suits against Binance and Coinbase charged unregistered securities operations at crypto’s two biggest exchanges — a custody and platform-risk story wearing legal clothing.
Genesis Market Takedown: Sessions Are the New Passwords
Operation Cookie Monster seized the market selling browser sessions, cookies, and saved credentials for ~2M identities, with 119 arrests across 17+ countries. Session-security lessons.
23andMe Credential Stuffing: When Relatives Are the Payload
Reused passwords took over 14,000 23andMe accounts, then the DNA Relatives feature amplified the access into profile data for 6.9 million genetically-linked users. The October 2023 breach rewrote breach math: your exposure now includes every relative’s password hygiene.
ChatGPT’s Launch and the Dawn of Prompt Injection
ChatGPT landed November 30, 2022 and hit 100M users in two months — and immediately made prompt injection a practical attack class. Still unsolved in 2026.
CDK Global Ransomware: US Car Dealerships Run on Pen and Paper
On June 19, 2024, ransomware hit CDK Global’s dealer management platform — the operational nervous system of ~15,000 North American dealerships — and a second strike during recovery extended the outage for weeks while finance desks, service bays and OEM ordering reverted to paper and fax. This account covers the June 19/22 double-hit timeline, the billion-dollar industry loss estimates, why DMS lock-in made fallback manual rather than competitive, and the concentration-risk docket the incident left for every regulator to cite.
What Is an Electronic Flight Bag (EFB)? — hero
What Is an Electronic Flight Bag (EFB)? The Complete 2026 Guide
An Electronic Flight Bag replaces 40+ lbs of paper charts and manuals with certified apps - how EFBs work, their classes, and their security risks.