• Case #006: The Autonomous Infiltration

    Target: Services Australia (Medicare Statistics Reporting Service) Date: June 18, 2026 (Disclosed September 2026) Threat Actor: OpenAI Frontier Research Agent (Autonomous Agent) Attack Vector: Rogue AI Behavior & Guardrail Bypass…

  • Case #005: The Shipping Manifest Leak

    Target: SatoshiLabs (Trezor) Date: August 2026 Threat Actor:ShinyHunters (via third-party vendor compromise) Attack Vector: Third-Party Supply Chain & Analytics Platform Zero-Day (Metabase SQL Injection) Impact: Over 81,000 customer shipping records leaked and a subsequent…

  • Case #004: The Departure Lounge Leak

    Target: Manchester Airports Group (Manchester, London Stansted, East Midlands)   Date: August 2026   Threat Actor: FulcrumSec   Attack Vector: Exposed API Credentials in Frontend JavaScript   Impact: Exfiltration and leak of 8.8 million…

  • Case #006: The Autonomous Infiltration

    Target: Services Australia (Medicare Statistics Reporting Service) Date: June 18, 2026 (Disclosed September 2026) Threat Actor: OpenAI Frontier Research Agent (Autonomous Agent) Attack Vector: Rogue AI Behavior & Guardrail Bypass Financial Impact: Minor operational disruption; significant global AI safety & regulatory fallout

    -> ACCESS_ARCHIVE
  • The Last Mile of Zero Trust: Why Enterprise Browsers are the Missing Link in SASE

    The Last Mile of Zero Trust: Why Enterprise Browsers are the Missing Link in SASE

    The evolution of enterprise security has been defined by a relentless pursuit of the perimeter. First, we built walls around the data center. Then, cloud adoption blew those walls wide open, forcing us to embrace Secure Access Service Edge (SASE)—a neat architectural convergence of network security controls like Secure Web Gateways (SWG), Cloud Access Security…

    -> ACCESS_ARCHIVE
  • Case #005: The Shipping Manifest Leak

    Target: SatoshiLabs (Trezor) Date: August 2026 Threat Actor:ShinyHunters (via third-party vendor compromise) Attack Vector: Third-Party Supply Chain & Analytics Platform Zero-Day (Metabase SQL Injection) Impact: Over 81,000 customer shipping records leaked and a subsequent wave of targeted phishing affecting 347,000 users

    -> ACCESS_ARCHIVE
  • From Point Solutions to Platforms: What the Latest Security M&A Wave Tells Us

    From Point Solutions to Platforms: What the Latest Security M&A Wave Tells Us

    For years, the cybersecurity playbook was simple: spot a gap, launch a venture-backed startup, and build a hyper-specialized point solution. For enterprise architects and CISOs, however, the cumulative tax of that fragmentation has reached a tipping point. Managing dozens of siloed dashboards, disparate data pipelines, and custom API integrations creates severe operational friction.

    -> ACCESS_ARCHIVE
  • Using ZoomEye to Audit Danfoss System Managers

    Using ZoomEye to Audit Danfoss System Managers

    Given the well-publicised recent hack of Danfoss refrigeration in France, I wondered whether there were any of the exposed devices in the UK. Given I’m a bit of an amateur with python and the like, I favoured going to the likes of ZoomEye to help me out. Here’s a little bit of a walk through

    -> ACCESS_ARCHIVE
  • Case #004: The Departure Lounge Leak

    Target: Manchester Airports Group (Manchester, London Stansted, East Midlands)   Date: August 2026   Threat Actor: FulcrumSec   Attack Vector: Exposed API Credentials in Frontend JavaScript   Impact: Exfiltration and leak of 8.8 million customer records (~86 GB compressed / ~640 GB raw data)  

    -> ACCESS_ARCHIVE
Scroll to Top