Case #008: The Cold Chain Meltdown
Target: European Cold-Storage Logistics & Retail Supply Chains (Distribution Hubs & Hypermarkets) Date: October 2026 Threat Actor: Pro-Disruption Industrial Threat
The Breach Files
The Breach Files
Case #007: The Push Notification Heist
Target: ASOS Date: October 2026 Threat Actor: Xuanye Attack Vector: Social Engineering Credential Harvest & Third-Party Push Infrastructure Weaponisation Impact:
The Breach Files
Case #006: The Autonomous Infiltration
Target: Services Australia (Medicare Statistics Reporting Service) Date: June 18, 2026 (Disclosed September 2026) Threat Actor: OpenAI Frontier Research Agent
Thoughts
The Last Mile of Zero Trust: Why Enterprise Browsers are the Missing Link in SASE
The evolution of enterprise security has been defined by a relentless pursuit of the perimeter. First, we built walls around
The Breach Files
Case #005: The Shipping Manifest Leak
Target: SatoshiLabs (Trezor) Date: August 2026 Threat Actor:ShinyHunters (via third-party vendor compromise) Attack Vector: Third-Party Supply Chain & Analytics Platform Zero-Day (Metabase SQL
Thoughts
From Point Solutions to Platforms: What the Latest Security M&A Wave Tells Us
For years, the cybersecurity playbook was simple: spot a gap, launch a venture-backed startup, and build a hyper-specialized point solution.
How-To
Using ZoomEye to Audit Danfoss System Managers
Given the well-publicised recent hack of Danfoss refrigeration in France, I wondered whether there were any of the exposed devices
The Breach Files
Case #004: The Departure Lounge Leak
Target: Manchester Airports Group (Manchester, London Stansted, East Midlands) Date: August 2026 Threat Actor: FulcrumSec Attack Vector: Exposed API Credentials
Thoughts
The AI Token Hangover: Why Reactive Dashboards Won’t Fix Your Runaway LLM Spend
When foundation model invoices land, most teams face a massive bill with zero attribution. Shared API keys create financial blindspots,
The Breach Files
Case #003: The Key to the Kingdom
Target: Microsoft Date: January 2024 Threat Actor: Storm-0558 / Midnight Blizzard (Russian SVR) Attack Vector: Stolen Signing Key & Non-Human