News
Analysis of Breaches, Hacks, and Vulnerabilities.
Case studies of significant security incidents worldwide, what went wrong, and how authorized penetration testing and IT audits help prevent similar outcomes.
MOVEit Transfer Mass Exploitation (CVE-2023-34362)
A SQL injection flaw in the MOVEit Transfer application for sharing files was exploited at scale to steal data from organisations worldwide.
Log4Shell in Apache Log4j (CVE-2021-44228)
A remote code execution flaw in the widely used Log4j logging library exposed countless applications and services.
Citrix Bleed in NetScaler ADC and Gateway (CVE-2023-4966)
A memory disclosure flaw allowed attackers to steal session tokens from NetScaler appliances and bypass multifactor authentication.
Ivanti Connect Secure Chained Vulnerabilities
An authentication bypass chained with command injection enabled unauthenticated compromise of Ivanti VPN appliances.
SolarWinds Orion Supply Chain Compromise
Trojanised updates of the SolarWinds Orion platform gave attackers covert access to government and corporate networks.
ProxyLogon in Microsoft Exchange Server (CVE-2021-26855)
A chain of Exchange Server flaws allowed unauthenticated attackers to compromise mail servers hosted on premises worldwide.
Change Healthcare Ransomware Attack
A ransomware attack on a major US healthcare payment processor disrupted claims processing nationwide.
Fortinet FortiOS SSL-VPN Heap Overflow (CVE-2022-42475)
A buffer overflow in heap memory in FortiOS SSL-VPN allowed unauthenticated remote code execution on firewalls.
XZ Utils Backdoor (CVE-2024-3094)
A deliberately planted backdoor in the XZ compression library was discovered before it reached most stable Linux releases.
NotPetya Destructive Malware Outbreak
Malware spread through a compromised Ukrainian accounting software update and caused major disruption to multinational companies.
Optus Customer Data Breach
One of Australia's largest telecom providers disclosed a breach affecting millions of current and former customers.
Summaries are based on publicly reported information and official advisories; each article links to its sources.