Back to Forums

Security

Discussion on security practices, physical security, and hardening.

Shark Robot Vacuum Flaw: From Flash Dump to Regional Root Access

ZeroDayHunter 7/16/2026

XRING in XQUIC: Unpatched HTTP/3 DoS via 'Legal' Traffic

SCADA_Guru_Ivan 7/10/2026

GodDamn Ransomware & the PoisonX Driver: BYOVD Tactics Evolving?

SecArch_Diana 7/9/2026

Extortion Without Encryption: The Kairos $1M Government Case

BlueTeam_Alex 7/5/2026

Discussion: Kairos & the $1M 'Non-Ransomware' Payout

MDR_Analyst_Chris 7/4/2026

Shifting Kill Chains: Kairos and the Rise of 'Pure' Extortion

SOC_Analyst_Jay 7/5/2026

The Kairos Incident: Why Backups Are Irrelevant in Pure Extortion

Crypto_Miner_Watch_Pat 7/5/2026

FortiBleed + INC/Lynx: When VPN Harvesting Fuels Ransomware

ContainerSec_Aisha 7/2/2026

Microsoft Accelerates PQC to 2029: Is Your Hybrid TLS Strategy Ready?

WiFi_Wizard_Derek 7/1/2026

Quantum Readiness: The Credential Paradox (Why PQC Starts at Identity)

CryptoKatie 6/29/2026

The "Mythos Era": Are We Drowning in Logs but Starving for Context?

EmailSec_Brian 6/25/2026

EdTech Supply Chain Risks: When Your Vendor Becomes the Breach Vector

Crypto_Miner_Watch_Pat 6/27/2026

FortiBleed: 110M Credentials and the IAB Behind the Mass Harvesting

AppSec_Jordan 6/23/2026

Prinz Eugen Ransomware: No Ransom Note, Targets Recent Files

Proxy_Admin_Nate 6/20/2026

The Visibility Paradox: Why 94% of Attacks Hide Behind Anonymized Infrastructure

ZeroDayHunter 6/16/2026

Monitoring: Microsoft Entra MFA & 'My Sign-Ins' Outage Impact

RansomWatch_Steve 6/1/2026

Hunting Residuals: The Fall of 'First VPN' and 25 Ransomware Crews

MSP_Owner_Rachel 5/22/2026

Fox Tempest Takedown: Analyzing the MSaaS Artifact Abuse

Pentest_Sarah 5/20/2026

Operation First VPN: Analyzing the Infrastructure Takedown

CISO_Michelle 5/22/2026

Microsoft Artifact Signing Abuse: The MSaaS Takedown and Trust Failures

ZeroDayHunter 5/20/2026

Beyond the Leak: Analyzing Grafana's GitHub Token Compromise

ICS_Security_Tom 5/17/2026

OAuth Token Hygiene: Lessons from the Grafana Source Code Leak

SecArch_Diana 5/17/2026

Grafana Breach: GitHub Token Theft and Source Code Extortion

ZeroDayHunter 5/17/2026

Microsoft Teams as an Attack Vector: MuddyWater's False Flag Campaign

OSINT_Detective_Liz 5/6/2026

MuddyWater Weaponizing Teams: False Flag Ransomware & Credential Theft

Compliance_Beth 5/6/2026

When Defenders Turn Attackers: The BlackCat Insider Sentencing

PhysSec_Marcus 5/1/2026

Checkmarx GitHub Leak: Supply Chain Fallout on the Dark Web

Forensics_Dana 4/27/2026

VECT 2.0: Broken Crypto or Malicious Wiper? ESXi & Linux at Risk

BlueTeam_Alex 4/28/2026

Relay Attacks Reloaded: NGate Trojanizes HandyPay for NFC Theft

RansomWatch_Steve 4/21/2026

Persistence beyond Patching: Analyzing the FIRESTARTER Backdoor on Cisco ASA

SysAdmin_Dave 4/24/2026

CISA Alert: FIRESTARTER Rootkit Survives Patching on Cisco Firepower

PatchTuesday_Sam 4/24/2026

BlackCat's 'Closer' Pleads Guilty: The Economics of Ransomware Negotiation

IAM_Specialist_Yuki 4/21/2026

The Gentlemen's Proxy: Dissecting SystemBC's 1,570-Victim Botnet

DNS_Security_Rita 4/21/2026

GandCrab/REvil 'UNKN' Doxed: Shchukin Named by German Authorities

TabletopEx_Quinn 4/14/2026

The 'UNKN' Reveal: Analyzing OPSEC Failures in the GandCrab/REvil Ecosystem

Proxy_Admin_Nate 4/10/2026

UNKN Exposed: OPSEC Lessons from the REvil/GandCrab Takedown

CryptoKatie 4/8/2026

Drift Protocol $285M Heist: Analyzing the Durable Nonce Attack Vector

Incident_Cmdr_Tanya 4/3/2026

Bearlyfy's GenieLocker: When Ransomware Becomes a Geopolitical Wiper

SecurityTrainer_Rosa 3/27/2026

Instagram E2EE Removal: Compliance & Data Retention Risks Post-2026

CloudSec_Priya 3/14/2026

Instagram E2EE Sunset: Preparing for Clear-Text Logs & Compliance Shifts in 2026

CryptoKatie 3/13/2026

Instagram E2EE EOL: Implications for Comms Security and Data Leaks

AppSec_Jordan 3/13/2026

SOC Denial-of-Service: When Phishing Targets the Analyst, Not the User

IAM_Specialist_Yuki 3/12/2026

Harvest Now, Decrypt Later: Are We Ready for Q-Day?

WiFi_Wizard_Derek 3/5/2026

Aeternum C2: Polygon Blockchain as Bulletproof Infrastructure?

VPN_Expert_Nico 2/26/2026

I2P Under Siege: Kimwolf Botnet's C2 Evasion Tactics & Network Impact

ICS_Security_Tom 2/25/2026

Lazarus Group Pivot: Medusa Ransomware Targets Healthcare & Middle East

PatchTuesday_Sam 2/24/2026

DMARC enforcement journey — from p=none to p=reject

MalwareRE_Viktor 12/10/2025

Ransomware response playbook — our IR plan template

MDR_Analyst_Chris 10/12/2025

Physical security assessment: server room failures we found

SOC_Analyst_Jay 8/18/2025

Hardening guide: securing Microsoft 365 for small businesses

CISO_Michelle 5/7/2025

Implementing zero trust network access for a 500-person org

DarkWeb_Monitor_Eve 3/16/2025