ls -lt ./archive/
Archive
175 articles across 3 years
2026 - 90 articles
- 0x0AFReal Certificates, Fake Control: Hijacking ccTLD Registries to Mint Trusted TLS Certs for Google
- 0x0AEFortiBleed: 86,000 Compromised FortiGates, No CVE, and a Number That Keeps Changing Meaning
- 0x0ADOne Breach, Four Numbers: The Oracle Health Extortion and the 20 Million That Isn't Confirmed Yet
- 0x0ACCVE-2026-104286: One Unauthenticated File Write, Preloaded Into Every Process on a FortiMail Box
- 0x0ABThe Persistence Layer IR Tools Cannot See: LoJax, CosmicStrand, BlackLotus and What It Takes to Find Firmware-Level Implants
- 0x0AASecure Against Whom? The Hardware of Resisting Surveillance, With the Marketing Removed
- 0x0A9When Encryption Was a Weapon: The Cypherpunks, the Crypto Wars, and the Book That Beat the Munitions List
- 0x0A8An Extortion Group With a Reputation to Protect: CVE-2026-35273, ShinyHunters, and the FBI Advisory They Want Deleted
- 0x0A7Nobody Logged In: How ShinyHunters Emptied Hundreds of Salesforce Tenants Through OAuth Grants Nobody Owned
- 0x0A6From a Bing Search to Domain-Wide Akira in 44 Hours: SEO Poisoning, wbadmin and the Software Already on the Network
- 0x0A5$159 of Hardware Breaks Confidential Computing: DDRop, Dropped DDR5 Writes, and Why Encryption Is Not Freshness
- 0x0A4One Bug, Two Official CVSS Scores: CVE-2025-25249, PivotC2, and the 1.7 Points That Decide Whether Anyone Gets Paged
- 0x0A3There Is No C2 Server To Block: EtherRAT, TukTuk, and Command and Control Built Entirely on SaaS
- 0x0A2Somebody Read the Site, Then Came Back Every Week: A Month of Targeted Credential Attacks Against This Server's Own Usernames
- 0x0A1One Key, 511 Hosts: How a Shared SSH Public Key Fingerprints a Botnet That IP Blocklists Cannot See
- 0x0A0Two Ways Into the Build: ChainDrop's npm Worm, XCSSET v40, and Why Valid Provenance Is Not a Defence
- 0x09FTesting a Four-Year-Old Botnet Fingerprint: The mdrfckr Campaign's Published HASSH Is Dead and Its Payload Never Changed
- 0x09E31 Days Inside a Public SSH Honeypot: 1.25 Million Events, Multi-Architecture Malware, and What Automated Attackers Actually Do
- 0x09DEchoLeak: Four Defences, Four Bypasses, and What Zero-Click Prompt Injection Says About Filtering an Unconstrained Capability
- 0x09CWannaCry and EternalBlue: How the NSA's Hoarded Exploit Infected 200,000 Machines in 72 Hours
- 0x09BThe Fall of Dread Pirate Roberts: How One Stack Overflow Post Ended Silk Road
- 0x09AFrom Instagram OGs to $100M Heists: The Rise of the SIM Swapping Scene
- 0x099Operation Bayonet: The Dark Web's Most Sophisticated Takedown
- 0x098OPSEC Hall of Shame: The Mistakes That Ended Careers
- 0x09750 Days of Lulz: The LulzSec Rampage, the Informant, and the Fall
- 0x096The COM: How Teenagers Became the Most Disruptive Hackers in America
- 0x095The Fappening: Anatomy of a Two-Year Celebrity Phishing Campaign
- 0x094ShadowCrew: The Forum That Invented Modern Cybercrime
- 0x093Stuxnet: The First Cyberweapon That Broke Real Machines
- 0x092Mirai: How Three College Students Broke the Internet With Default Passwords
- 0x091NotPetya: The $10 Billion Cyberweapon Disguised as Ransomware
- 0x090Log4Shell: The CVSS 10.0 Vulnerability Hidden Inside Every Java App
- 0x08FColonial Pipeline: The Single Password That Shut Down East Coast Fuel Supply
- 0x08EDNS Security: Cache Poisoning, Nation-State Hijacking, and the Protocol That Never Got Security Right
- 0x08Dnpm, PyPI, and the Package Manager Attack Surface: How Malicious Code Reaches Millions of Developers
- 0x08CPhineas Fisher and the Hacking Team Breach: Hacktivism as Political Direct Action
- 0x08BMt. Gox to Bybit: A History of Cryptocurrency Exchange Hacks and the $10 Billion Stolen
- 0x08AThe Cuckoo's Egg: How a 75-Cent Accounting Error Led to a KGB Spy Hunt in 1986
- 0x089The Juniper Backdoor: How the NSA's Cryptographic Weakness Was Repurposed by a Foreign Adversary
- 0x088FinFisher, Hacking Team, Pegasus: Inside the Commercial Spyware Industry That Sells Surveillance to Governments
- 0x087GameOver Zeus: The $100M Banking Trojan, CryptoLocker, and the Cybercriminal Russia Won't Extradite
- 0x086Yahoo's 3 Billion Compromised Accounts: The Breach That Changed Corporate Disclosure Law
- 0x085Tor and the Dark Web: How a Navy Research Project Became the Infrastructure of the Underground
- 0x084Kaseya and REvil: The Supply Chain Ransomware Attack That Hit 1,500 Businesses on July 4th Weekend
- 0x083MGM vs Caesars: The $100M Casino Hack That Defined the Ransomware Debate
- 0x082The Twitter Hack: How a 17-Year-Old Took Over Obama, Biden, and Musk With One Phone Call
- 0x081The RSA SecurID Breach: When Hackers Stole the Keys to 40 Million Two-Factor Tokens
- 0x080The Bangladesh Bank Heist: How Lazarus Group Stole $81 Million Through the SWIFT Network
- 0x07FAshley Madison: The Breach That Weaponized Personal Data Against 37 Million People
- 0x07EConficker: The 15-Million-Machine Botnet That Did Almost Nothing
- 0x07DThe Morris Worm: How a Graduate Student's Experiment Took Down 10% of the Internet in 1988
- 0x07CSpectre and Meltdown: The CPU Vulnerabilities That Affected Every Computer Since 1995
- 0x07BLAPSUS$: The Teenage Hackers Who Breached Microsoft, Nvidia, and Okta with a Phone and a Telegram Account
- 0x07AThe Equifax Breach: How an Unpatched Server and an Expired Certificate Exposed 147 Million Americans
- 0x079Heartbleed: The Vulnerability That Proved Critical Open Source Was Running on Donations
- 0x078Frequency Hopping: Hedy Lamarr's Trick for Beating Jammers and Interceptors
- 0x077The OPM Breach: How China Stole the Personnel Files of Every US Intelligence Officer
- 0x076The Target Breach: How an HVAC Contractor's Credentials Led to 40 Million Stolen Cards
- 0x075The Sony Pictures Hack: When North Korea Went to War Over a Comedy Film
- 0x074Carbanak: The $1 Billion Bank Heist That Used APT Techniques for Profit
- 0x073BGP Hijacking: The Protocol Flaw That Lets Anyone Reroute the Internet
- 0x072XZ Utils Backdoor: How a Two-Year Social Engineering Campaign Nearly Compromised the Linux Ecosystem
- 0x071Anonymous: From 4chan Raids to Operation Payback and the WikiLeaks War
- 0x070Operation Aurora: How China's Hack of Google Created the APT Era
- 0x06FThe Shadow Brokers: How the NSA's Most Dangerous Arsenal Was Stolen and Leaked
- 0x06ESolarWinds SUNBURST: How Russia Hid a Backdoor in 18,000 Software Updates and Read US Government Email for Nine Months
- 0x06DWiFi Pineapple: Evil Twin Attacks, Captive Portals, and Public WiFi's Unsolved Problem
- 0x06CFlipper Zero Field Guide: Sub-GHz, BadUSB, NFC and the Multi-Tool That Broke Airport Security Theater
- 0x06BHow Fast Does an Exposed Service Get Found?
- 0x06AHackRF One and Software-Defined Radio: How to Listen to Everything the Wireless World Forgot to Encrypt
- 0x069The USB Rubber Ducky: HID Injection, Keystroke Attacks and the Reason You Should Never Plug In a Found USB Drive
- 0x068Pwnagotchi: The AI-Powered Pet That Eats WiFi Handshakes for Breakfast
- 0x067O.MG Cable: The Charging Cable That Owns Your Machine
- 0x066Proxmark3: Cloning Hotel Keys, Office Badges, and Transit Cards in Under 30 Seconds
- 0x065Obscurity Is Not Privacy: Certificate Transparency Exposes Your Subdomains
- 0x063BreachForums and the Dark Web Data Economy: How Stolen Records Become Fraud
- 0x064Fixed Codes, Rolling Codes, and RollJam: Beating a Remote Without Breaking Its Crypto
- 0x062Change Healthcare: How One Ransomware Attack Broke the US Healthcare Payment System
- 0x061The CrowdStrike Outage: How a Content File Took Down 8.5 Million Windows Systems in 79 Minutes
- 0x060The Hacking Team Breach: When the Surveillance Vendor Got Hacked
- 0x05FNSO Group and Pegasus: The Mercenary Spyware Industry and the Journalists Who Were Killed Because of It
- 0x05EThe Conti Leaks: Inside the Corporate Structure of the World's Most Prolific Ransomware Gang
- 0x05DLazarus Group: How North Korea Funds Its Weapons Program with Stolen Cryptocurrency
- 0x05CWho Can Read Your Traffic? TLS Termination and the Tunnel You Trust
- 0x05BVolt Typhoon: China's Pre-Positioned Access to US Critical Infrastructure
- 0x05ASalt Typhoon: How China Breached US Telecom Carriers and Accessed the Wiretap Infrastructure
- 0x059LockBit and Operation Cronos: How Law Enforcement Seized the World's Largest Ransomware Operation
- 0x058Cl0p and MOVEit: The Mass Exploitation Campaign That Hit 2,700 Organizations Without Deploying Ransomware
- 0x057Sandworm and the Ukraine Power Grid: The First Cyberattack to Cut the Lights
- 0x056Uber and Rockstar: An 18-Year-Old on Bail Breached Both Companies with a Fire TV Stick
2025 - 43 articles
- 0x055The Zero-Day Market: Zerodium, Government Buyers, and the Economics of Undisclosed Vulnerabilities
- 0x054The Snowden Disclosures: How One NSA Contractor Revealed the Architecture of Global Surveillance
- 0x053Kevin Mitnick: The Phone Phreak Who Became the World's Most Famous Hacker
- 0x052ANOM: How the FBI Secretly Built and Operated the Encrypted Phone Network Used by 300 Criminal Syndicates
- 0x051Your Container Is Not a Security Boundary
- 0x050Meduza Stealer: Mapping 140+ Active C2 Panels via Certificate Transparency
- 0x04FGPS Is a Clock, Not a Map: How It Works, and How It's Spoofed and Jammed
- 0x04EIs More Gain Better? Overload, the Noise Floor, and the ADS-B Sweet Spot
- 0x04DWriting Effective Sigma Rules for LOLBin Detection in Production SIEMs
- 0x04CQakBot and Operation Duck Hunt: 15 Years of Malware, One FBI Uninstaller, and Another Resurrection
- 0x04BMaze Ransomware and the Invention of Double Extortion
- 0x04AProxyLogon: How Four Exchange Zero-Days Compromised 250,000 Servers in 72 Hours
- 0x049Emotet: The Malware That Sold Beachheads, the Takedown That Used Its Own Update Channel, and the Resurrection
- 0x048Operation Chanology: How a Leaked Tom Cruise Video Turned a Trolling Collective Into a Global Movement
- 0x047The Snowflake Campaign: How 165 Companies Lost Their Data to Stealer Logs and No MFA
- 0x046BEAST, POODLE, FREAK, DROWN, ROBOT: How a Decade of Attacks Built TLS 1.3
- 0x045Tor, VPNs, and What Traffic Correlation Actually Defeats
- 0x044The Stratfor Hack: Jeremy Hammond, FBI Informant Sabu, and the Entrapment Controversy
- 0x043CryptoLocker: The Ransomware That Invented the Modern Extortion Model
- 0x042WEP, WPA, KRACK, and Dragonblood: How Wi-Fi Security Broke and Rebuilt Itself
- 0x041Social Engineering and Pretexting: The Attack Surface Security Training Can't Fix
- 0x040The Internet Archive Hack: 31 Million Users, an Exposed Zendesk Token, and a DDoS from a Completely Different Attacker
- 0x03FThe Cap'n Crunch Whistle and the Birth of Hacking Culture: A History of Phone Phreaking
- 0x03EThe Intercept Chain: Why Metadata Is the Intelligence Encryption Cannot Touch
- 0x03DWhat Your ISP Still Sees After You Encrypt Your DNS
- 0x03CThe $1.5 Billion Bybit Hack: How Lazarus Group Compromised a Hardware Wallet Signing Flow
- 0x03BThe HBGary Federal Hack: SQL Injection, Password Reuse, and 68,000 Emails
- 0x03AThe NSA's ANT Catalog: A Product Brochure for Backdoors in Everything
- 0x039Aaron Swartz, JSTOR, and the CFAA: When Computer Crime Law Ate Itself
- 0x038Fancy Bear, Guccifer 2.0, and the 2016 DNC Hack: Inside Russia's Election Interference Operation
- 0x037The Credential Stuffing Economy: Combolists, Stealer Logs, and the Infrastructure of Account Takeover
- 0x036REvil: Kaseya, the FBI's Withheld Decryptor, the Russia Arrests, and the Geopolitics of Ransomware Tolerance
- 0x035The Internet Research Agency: How Russia's St. Petersburg Troll Farm Actually Worked
- 0x034SQL Injection: 25 Years on OWASP's Top 10, From CardSystems to MOVEit
- 0x033Cellebrite UFED: The Mobile Extraction Tool Used by 100+ Countries and Its Security Implications
- 0x032What Can You Legally Receive? Scanners, the Law, and Why Digital Is Not Encrypted
- 0x031Operation Onymous: 400 Tor Sites Taken Down, One Unanswered Question About How
- 0x030Build Your Own Browser Fingerprint: Why Clearing Cookies and Spoofing Do Not Help
- 0x02FPulling Signals Out of the Air: A Legal SDR Capture Field Guide
- 0x02EPhantom Signals: Images, Aliases, Spurs and Intermod
- 0x02DA Bearing Is a Line: How Direction Finding Turns a Transmission Into a Location
- 0x02BMoonlight Maze: The 1996 Russian Pentagon Hack That Started It All - and Its DNA in Modern Turla Malware
- 0x02CWhat a VPN Actually Hides, and From Whom
2024 - 42 articles
- 0x02AMarriott/Starwood: The Chinese Intelligence Operation Hidden in a Hotel Loyalty Database
- 0x029The LastPass Breach: When the Password Manager Gets Breached
- 0x02823andMe: How a Credential Stuffing Attack Became a Genetic Data Disaster
- 0x027LinkedIn 2012: 117 Million Unsalted SHA-1 Password Hashes and the Four-Year Hidden Breach
- 0x026BlueKeep: The Wormable RDP Vulnerability That Kept the Security World Up at Night
- 0x025Adobe 2013: 153 Million Records, 3DES-ECB Passwords, and the Crossword-Puzzle Crack
- 0x024How a Software-Defined Radio Actually Works: IQ, Nyquist, and the Waterfall
- 0x023DigiNotar: How Iran Compromised a Certificate Authority to Spy on 300,000 Users
- 0x022PrintNightmare: How an Accidental GitHub Post Handed Ransomware Gangs a Domain Takeover 0-Day
- 0x021Turla/Snake: Russia's FSB Malware That Has Run Undetected for 20 Years
- 0x020Emotet, TrickBot, Ryuk: The Three-Stage Ransomware Chain That Devastated Healthcare
- 0x01FAPT41 / Double Dragon: China's Threat Actor That Does Both Espionage and Cybercrime
- 0x01EOkta's Serial Breaches: How the World's Top Identity Provider Got Hacked Twice
- 0x01DT-Mobile's Seven Breaches: How America's Carrier Got Hacked Again and Again
- 0x01CGoDaddy's Multi-Year Compromise: Malware in the Hosting Infrastructure
- 0x01BUber 2016: The $100K Cover-Up That Sent a CSO to Trial
- 0x01ALazarus Group's Crypto Heists: $625M Ronin Hack and North Korea's Blockchain Revenue Stream
- 0x019Follina: The Zero-Day That Let Word Documents Execute Code Without Macros
- 0x018Operation Dark Seoul: North Korea's Simultaneous Wiper Attack on Three Banks and Three TV Stations
- 0x017The Melissa Worm: How a Word Macro Shut Down Microsoft, Intel, and the US Government's Email in 72 Hours
- 0x016ILOVEYOU: The Worm That Infected 45 Million Computers in 10 Hours and Created No Criminals
- 0x015Home Depot 2014: 56 Million Cards, End-of-Life Windows XP on POS Terminals, and the Post-Target Retail Breach Era
- 0x014Shamoon: The Iranian Wiper That Destroyed 30,000 Saudi Aramco Workstations and Invented State-Sponsored Corporate Destruction
- 0x013DNSChanger and Operation Ghost Click: The FBI Malware Takedown That Required Running Criminal Infrastructure as a Public Service
- 0x012How Information Rides a Radio Wave: Modulation and the Spectrum, From Scratch
- 0x011The TJX Breach: Wardriving a Parking Lot, WEP Encryption, and 94 Million Stolen Cards
- 0x010Mafiaboy: The 15-Year-Old Who DDoSed Amazon, eBay, and CNN and Invented the Commercial DDoS Industry
- 0x00FOperation Tovar: How the FBI Killed CryptoLocker, Freed 500,000 Victims, and Still Couldn't Catch the Guy
- 0x00EHeartland Payment Systems: 130 Million Cards, a Government Informant Running the Attack, and PCI's Greatest Failure
- 0x00DeBay 2014: 145 Million Accounts, 229 Days of Undetected Access, and the Breach Nobody Got Fined For
- 0x00CThe Medibank Breach: 9.7 Million Australians' Medical Records, a Refused Ransom, and Published HIV Diagnoses
- 0x00BCode Red: The IIS Worm That Infected 359,000 Servers in 19 Hours and Attacked the White House
- 0x00AKevin Poulsen: The Hacker Who Rigged a Radio Contest by Taking Over the Phone Company to Win a Porsche
- 0x009Vault 7: When WikiLeaks Published the CIA's Entire Hacking Toolkit and a Spy Went to Prison for 40 Years
- 0x008Triton: The Russian Malware Designed to Disable Safety Systems and Allow Industrial Explosions
- 0x007Blaster: The Worm That Attacked Windows Update While Telling Bill Gates to Fix His Software
- 0x006GhostNet: The Chinese Espionage Network That Compromised 1,295 Computers in 103 Countries and Could Watch Through Your Webcam
- 0x005Nimda: The Worm That Used Five Propagation Vectors Simultaneously and Became the Internet's Top Threat in 22 Minutes
- 0x004APT10 Cloud Hopper: How China Compromised 45 MSPs to Reach Hundreds of Their Clients Simultaneously
- 0x003Georgia 2008: The First Cyberattacks Synchronized with a Conventional Military Invasion
- 0x002SQL Slammer: The 376-Byte Worm That Infected 75,000 Servers in 10 Minutes and Is Still the Fastest Malware Ever
- 0x001The 2007 Estonian Cyberattacks: The First Nation-State DDoS Campaign and the Birth of NATO Cyber Defence