syscfg - Security Research

2026-09-11Original31 Days Inside a Public SSH Honeypot: 1.25 Million Events, Multi-Architecture Malware, and What Automated Attackers Actually DoPublished

2026-09-12OriginalTesting a Four-Year-Old Botnet Fingerprint: The mdrfckr Campaign's Published HASSH Is Dead and Its Payload Never ChangedPublished

2026-09-14OriginalOne Key, 511 Hosts: How a Shared SSH Public Key Fingerprints a Botnet That IP Blocklists Cannot SeePublished

2026-09-15OriginalSomebody Read the Site, Then Came Back Every Week: A Month of Targeted Credential Attacks Against This Server's Own UsernamesPublished

2026-09-05Vuln ResearchEchoLeak: Four Defences, Four Bypasses, and What Zero-Click Prompt Injection Says About Filtering an Unconstrained CapabilityPublished

2026-09-19BreachFrom a Bing Search to Domain-Wide Akira in 44 Hours: SEO Poisoning, wbadmin and the Software Already on the NetworkPublished

2026-09-13MalwareTwo Ways Into the Build: ChainDrop's npm Worm, XCSSET v40, and Why Valid Provenance Is Not a DefencePublished

2026-09-16BreachThere Is No C2 Server To Block: EtherRAT, TukTuk, and Command and Control Built Entirely on SaaSPublished

2026-09-17Vuln ResearchOne Bug, Two Official CVSS Scores: CVE-2025-25249, PivotC2, and the 1.7 Points That Decide Whether Anyone Gets PagedPublished

2026-09-18Hardware$159 of Hardware Breaks Confidential Computing: DDRop, Dropped DDR5 Writes, and Why Encryption Is Not FreshnessPublished

2026-09-22Threat IntelNobody Logged In: How ShinyHunters Emptied Hundreds of Salesforce Tenants Through OAuth Grants Nobody OwnedPublished

2026-09-24BreachAn Extortion Group With a Reputation to Protect: CVE-2026-35273, ShinyHunters, and the FBI Advisory They Want DeletedPublished

2026-09-27HistoryWhen Encryption Was a Weapon: The Cypherpunks, the Crypto Wars, and the Book That Beat the Munitions ListPublished

2026-09-28HardwareSecure Against Whom? The Hardware of Resisting Surveillance, With the Marketing RemovedPublished

2026-10-01MalwareThe Persistence Layer IR Tools Cannot See: LoJax, CosmicStrand, BlackLotus and What It Takes to Find Firmware-Level ImplantsPublished

2026-08-08MalwareWannaCry and EternalBlue: How the NSA's Hoarded Exploit Infected 200,000 Machines in 72 HoursPublished

2026-08-04HistoryThe Fall of Dread Pirate Roberts: How One Stack Overflow Post Ended Silk RoadPublished

2026-08-03Social EngFrom Instagram OGs to $100M Heists: The Rise of the SIM Swapping ScenePublished

2026-07-31HistoryOperation Bayonet: The Dark Web's Most Sophisticated TakedownPublished

2026-07-29HistoryOPSEC Hall of Shame: The Mistakes That Ended CareersPublished

2026-07-25History50 Days of Lulz: The LulzSec Rampage, the Informant, and the FallPublished

2026-07-21HistoryThe COM: How Teenagers Became the Most Disruptive Hackers in AmericaPublished

2026-07-15Social EngThe Fappening: Anatomy of a Two-Year Celebrity Phishing CampaignPublished

2026-07-11HistoryShadowCrew: The Forum That Invented Modern CybercrimePublished

2026-07-10HistoryStuxnet: The First Cyberweapon That Broke Real MachinesPublished

2026-07-09MalwareMirai: How Three College Students Broke the Internet With Default PasswordsPublished

2026-07-07HistoryNotPetya: The $10 Billion Cyberweapon Disguised as RansomwarePublished

2026-07-03MalwareLog4Shell: The CVSS 10.0 Vulnerability Hidden Inside Every Java AppPublished

2026-06-29HistoryColonial Pipeline: The Single Password That Shut Down East Coast Fuel SupplyPublished

2026-06-25ResearchDNS Security: Cache Poisoning, Nation-State Hijacking, and the Protocol That Never Got Security RightPublished

2026-06-21Researchnpm, PyPI, and the Package Manager Attack Surface: How Malicious Code Reaches Millions of DevelopersPublished

2026-06-18HistoryPhineas Fisher and the Hacking Team Breach: Hacktivism as Political Direct ActionPublished

2026-06-15HistoryMt. Gox to Bybit: A History of Cryptocurrency Exchange Hacks and the $10 Billion StolenPublished

2026-06-12HistoryThe Cuckoo's Egg: How a 75-Cent Accounting Error Led to a KGB Spy Hunt in 1986Published

2026-06-07ResearchThe Juniper Backdoor: How the NSA's Cryptographic Weakness Was Repurposed by a Foreign AdversaryPublished

2026-06-02Threat IntelFinFisher, Hacking Team, Pegasus: Inside the Commercial Spyware Industry That Sells Surveillance to GovernmentsPublished

2026-05-31MalwareGameOver Zeus: The $100M Banking Trojan, CryptoLocker, and the Cybercriminal Russia Won't ExtraditePublished

2026-05-28HistoryYahoo's 3 Billion Compromised Accounts: The Breach That Changed Corporate Disclosure LawPublished

2026-05-25HistoryTor and the Dark Web: How a Navy Research Project Became the Infrastructure of the UndergroundPublished

2026-05-23MalwareKaseya and REvil: The Supply Chain Ransomware Attack That Hit 1,500 Businesses on July 4th WeekendPublished

2026-05-18Social EngMGM vs Caesars: The $100M Casino Hack That Defined the Ransomware DebatePublished

2026-05-16Social EngThe Twitter Hack: How a 17-Year-Old Took Over Obama, Biden, and Musk With One Phone CallPublished

2026-05-13HistoryThe RSA SecurID Breach: When Hackers Stole the Keys to 40 Million Two-Factor TokensPublished

2026-05-10HistoryThe Bangladesh Bank Heist: How Lazarus Group Stole $81 Million Through the SWIFT NetworkPublished

2026-05-07HistoryAshley Madison: The Breach That Weaponized Personal Data Against 37 Million PeoplePublished

2026-05-04MalwareConficker: The 15-Million-Machine Botnet That Did Almost NothingPublished

2026-05-03HistoryThe Morris Worm: How a Graduate Student's Experiment Took Down 10% of the Internet in 1988Published

2026-04-30MalwareSpectre and Meltdown: The CPU Vulnerabilities That Affected Every Computer Since 1995Published

2026-04-28Social EngLAPSUS$: The Teenage Hackers Who Breached Microsoft, Nvidia, and Okta with a Phone and a Telegram AccountPublished

2026-04-22HistoryThe Equifax Breach: How an Unpatched Server and an Expired Certificate Exposed 147 Million AmericansPublished

2026-04-18MalwareHeartbleed: The Vulnerability That Proved Critical Open Source Was Running on DonationsPublished

2026-04-13HistoryThe OPM Breach: How China Stole the Personnel Files of Every US Intelligence OfficerPublished

2026-04-09HistoryThe Target Breach: How an HVAC Contractor's Credentials Led to 40 Million Stolen CardsPublished

2026-04-04HistoryThe Sony Pictures Hack: When North Korea Went to War Over a Comedy FilmPublished

2026-03-31MalwareCarbanak: The $1 Billion Bank Heist That Used APT Techniques for ProfitPublished

2026-03-27ResearchBGP Hijacking: The Protocol Flaw That Lets Anyone Reroute the InternetPublished

2026-03-26HistoryXZ Utils Backdoor: How a Two-Year Social Engineering Campaign Nearly Compromised the Linux EcosystemPublished

2026-03-24HistoryAnonymous: From 4chan Raids to Operation Payback and the WikiLeaks WarPublished

2026-03-21HistoryOperation Aurora: How China's Hack of Google Created the APT EraPublished

2026-03-20HistoryThe Shadow Brokers: How the NSA's Most Dangerous Arsenal Was Stolen and LeakedPublished

2026-03-18HistorySolarWinds SUNBURST: How Russia Hid a Backdoor in 18,000 Software Updates and Read US Government Email for Nine MonthsPublished

2026-03-16HardwareWiFi Pineapple: Evil Twin Attacks, Captive Portals, and Public WiFi's Unsolved ProblemPublished

2026-03-13HardwareFlipper Zero Field Guide: Sub-GHz, BadUSB, NFC and the Multi-Tool That Broke Airport Security TheaterPublished

2026-03-09HardwareHackRF One and Software-Defined Radio: How to Listen to Everything the Wireless World Forgot to EncryptPublished

2026-03-06HardwareThe USB Rubber Ducky: HID Injection, Keystroke Attacks and the Reason You Should Never Plug In a Found USB DrivePublished

2026-03-03HardwarePwnagotchi: The AI-Powered Pet That Eats WiFi Handshakes for BreakfastPublished

2026-03-01HardwareO.MG Cable: The Charging Cable That Owns Your MachinePublished

2026-02-26HardwareProxmark3: Cloning Hotel Keys, Office Badges, and Transit Cards in Under 30 SecondsPublished

2026-02-18HistoryBreachForums and the Dark Web Data Economy: How Stolen Records Become FraudPublished

2026-02-17HistoryChange Healthcare: How One Ransomware Attack Broke the US Healthcare Payment SystemPublished

2026-02-13HistoryThe CrowdStrike Outage: How a Content File Took Down 8.5 Million Windows Systems in 79 MinutesPublished

2026-02-10HistoryThe Hacking Team Breach: When the Surveillance Vendor Got HackedPublished

2026-02-08Threat IntelNSO Group and Pegasus: The Mercenary Spyware Industry and the Journalists Who Were Killed Because of ItPublished

2026-02-05HistoryThe Conti Leaks: Inside the Corporate Structure of the World's Most Prolific Ransomware GangPublished

2026-02-02HistoryLazarus Group: How North Korea Funds Its Weapons Program with Stolen CryptocurrencyPublished

2026-01-25Threat IntelVolt Typhoon: China's Pre-Positioned Access to US Critical InfrastructurePublished

2026-01-21Threat IntelSalt Typhoon: How China Breached US Telecom Carriers and Accessed the Wiretap InfrastructurePublished

2026-01-17HistoryLockBit and Operation Cronos: How Law Enforcement Seized the World's Largest Ransomware OperationPublished

2026-01-12HistoryCl0p and MOVEit: The Mass Exploitation Campaign That Hit 2,700 Organizations Without Deploying RansomwarePublished

2026-01-07HistorySandworm and the Ukraine Power Grid: The First Cyberattack to Cut the LightsPublished

2026-01-05Social EngUber and Rockstar: An 18-Year-Old on Bail Breached Both Companies with a Fire TV StickPublished

Archive

2026

2025

2024