• From Point Solutions to Platforms: What the Latest Security M&A Wave Tells Us

    From Point Solutions to Platforms: What the Latest Security M&A Wave Tells Us

    For years, the cybersecurity playbook was simple: spot a gap, launch a venture-backed startup, and build a hyper-specialized point solution. For enterprise architects and CISOs, however, the cumulative tax of that fragmentation has reached a tipping point. Managing dozens of siloed dashboards, disparate data pipelines, and custom API integrations creates severe operational friction.

    -> EXAMINE_LOG
  • Using ZoomEye to Audit Danfoss System Managers

    Using ZoomEye to Audit Danfoss System Managers

    Given the well-publicised recent hack of Danfoss refrigeration in France, I wondered whether there were any of the exposed devices in the UK. Given I’m a bit of an amateur with python and the like, I favoured going to the likes of ZoomEye to help me out. Here’s a little bit of a walk through

    -> EXAMINE_LOG
  • Case #004: The Departure Lounge Leak

    Target: Manchester Airports Group (Manchester, London Stansted, East Midlands)   Date: August 2026   Threat Actor: FulcrumSec   Attack Vector: Exposed API Credentials in Frontend JavaScript   Impact: Exfiltration and leak of 8.8 million…

  • Case #003: The Key to the Kingdom

    Target: Microsoft Date: January 2024 Threat Actor: Storm-0558 / Midnight Blizzard (Russian SVR) Attack Vector: Stolen Signing Key & Non-Human Identity Exploitation Impact: Widespread geopolitical fallout, severe reputational damage and…

  • Case #002: Trojan Supply Chain Attack

    Target: SolarWinds (and ~18,000 downstream customers) Date: December 2020 Threat Actor: APT29 / Cosy Bear / Nobelium (Russian SVR) Attack Vector: Software Supply Chain Compromise (Code Build Injection) Impact: Estimated…

  • From Point Solutions to Platforms: What the Latest Security M&A Wave Tells Us

    From Point Solutions to Platforms: What the Latest Security M&A Wave Tells Us

    For years, the cybersecurity playbook was simple: spot a gap, launch a venture-backed startup, and build a hyper-specialized point solution. For enterprise architects and CISOs, however, the cumulative tax of that fragmentation has reached a tipping point. Managing dozens of siloed dashboards, disparate data pipelines, and custom API integrations creates severe operational friction.

    -> ACCESS_ARCHIVE
  • Using ZoomEye to Audit Danfoss System Managers

    Using ZoomEye to Audit Danfoss System Managers

    Given the well-publicised recent hack of Danfoss refrigeration in France, I wondered whether there were any of the exposed devices in the UK. Given I’m a bit of an amateur with python and the like, I favoured going to the likes of ZoomEye to help me out. Here’s a little bit of a walk through

    -> ACCESS_ARCHIVE
  • Case #004: The Departure Lounge Leak

    Target: Manchester Airports Group (Manchester, London Stansted, East Midlands)   Date: August 2026   Threat Actor: FulcrumSec   Attack Vector: Exposed API Credentials in Frontend JavaScript   Impact: Exfiltration and leak of 8.8 million customer records (~86 GB compressed / ~640 GB raw data)  

    -> ACCESS_ARCHIVE
  • The AI Token Hangover: Why Reactive Dashboards Won’t Fix Your Runaway LLM Spend

    The AI Token Hangover: Why Reactive Dashboards Won’t Fix Your Runaway LLM Spend

    When foundation model invoices land, most teams face a massive bill with zero attribution. Shared API keys create financial blindspots, infinite dev loops, and major security risks. Learn how routing traffic through the Prisma AIRS AI Gateway combines active FinOps control—like virtual key attribution and semantic caching—with real-time threat protection in a single inline hop.

    -> ACCESS_ARCHIVE
  • Case #003: The Key to the Kingdom

    Target: Microsoft Date: January 2024 Threat Actor: Storm-0558 / Midnight Blizzard (Russian SVR) Attack Vector: Stolen Signing Key & Non-Human Identity Exploitation Impact: Widespread geopolitical fallout, severe reputational damage and overhaul of cloud identity architecture

    -> ACCESS_ARCHIVE
  • Case #002: Trojan Supply Chain Attack

    Target: SolarWinds (and ~18,000 downstream customers) Date: December 2020 Threat Actor: APT29 / Cosy Bear / Nobelium (Russian SVR) Attack Vector: Software Supply Chain Compromise (Code Build Injection) Impact: Estimated $90m+, corporate damages across victim networks in the billions

    -> ACCESS_ARCHIVE
Scroll to Top