Facebook’s BGP Outage: Six Hours, Self-Inflicted, Total
One maintenance command withdrew Facebook’s backbone routes, took DNS with it, and locked engineers out of the fix. The outage defended itself.
Apache Path Traversal: CVE-2021-41773 Broke in 24 Hours
A single encoded GET walked out of Apache’s docroot, and the first patch didn’t hold. Inside the October 2021 traversal zero-day scramble.
REvil Takedown: How 14 Arrests Killed Ransomware’s Worst Brand
October 2021’s FSB operation ended REvil with arrests, asset seizures, and infrastructure capture. The talent lived on elsewhere.
FORCEDENTRY: The Zero-Click iMessage Exploit That Beat BlastDoor
NSO’s FORCEDENTRY turned a PDF font parser into a tiny computer and owned iPhones with no tap. The Citizen Lab anatomy and Apple’s Lockdown Mode response.
T-Mobile 2021: 76.6 Million Records Through One Unprotected API
No zero-days, no malware — just weak router credentials, a flat network, and an internal API with no authentication. The Binns breach rewrote telecom disclosure playbooks.
Poly Network: The $611M Bridge Hack That Got Returned
A forged keeper-list substitution drained $611M across three chains. Then the attacker gave it all back. The bridge bug class that defined Web3’s worst year.
ProxyShell: The August 2021 Exchange Pillage After Hafnium
Three patched-but-unapplied Exchange bugs chained into unauthenticated RCE. Webshells, mailbox theft, and ransomware followed at population scale within two weeks.
PetitPotam and ESC8: The NTLM Relay Chain That Owned Active Directory
PetitPotam coerced Windows machines to authenticate, AD CS web enrollment happily minted a DC certificate, and domains fell in an afternoon. The relay class is still with us.
HiveNightmare: The Two-Line Bug That Leaked Every Local Password Hash
One broken inheritance flag left Windows SAM, SYSTEM, and SECURITY hives readable by any user. With shadow copies in play, that meant every local NTLM hash on the box.
Pegasus Zero-Click: Spyware That Needed No Click at All
The Pegasus Project exposed 50,000 targeted numbers and a hard truth: modern mercenary spyware infects phones through iMessage and WhatsApp without the victim doing anything.
Kaseya VSA Ransomware: 60 MSPs, 1,500 Businesses, One Friday
REvil turned Kaseya’s remote-management platform into a mass-encryption weapon, hitting ~60 MSPs and up to 1,500 downstream businesses days before a patch could land.
Fastly CDN Outage 2021: One Config, 10% of the Web Down
No attack, no breach — a single customer config met a dormant software bug and took Reddit, the Guardian, and roughly a tenth of the internet offline for an hour. The concentration-risk wake-up call.
- Go to the previous page
- 1
- …
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- Go to the next page