• Case #005: The Shipping Manifest Leak

    Target: SatoshiLabs (Trezor) Date: August 2026 Threat Actor:ShinyHunters (via third-party vendor compromise) Attack Vector: Third-Party Supply Chain & Analytics Platform Zero-Day (Metabase SQL Injection) Impact: Over 81,000 customer shipping records leaked and a subsequent…

  • Case #004: The Departure Lounge Leak

    Target: Manchester Airports Group (Manchester, London Stansted, East Midlands)   Date: August 2026   Threat Actor: FulcrumSec   Attack Vector: Exposed API Credentials in Frontend JavaScript   Impact: Exfiltration and leak of 8.8 million…

  • Case #003: The Key to the Kingdom

    Target: Microsoft Date: January 2024 Threat Actor: Storm-0558 / Midnight Blizzard (Russian SVR) Attack Vector: Stolen Signing Key & Non-Human Identity Exploitation Impact: Widespread geopolitical fallout, severe reputational damage and…

Scroll to Top