Incident Analysis
Breakdowns of real-world attacks and breaches: what happened, how it worked, and what defenders should learn from it.
When the Freezers Turned Into Ovens: Inside the Danfoss Supermarket Attack in France
Overnight on 11 October 2026, attackers took over the refrigeration controllers of hundreds of French supermarkets and held freezers in defrost at up to 50 °C. No ransom, no claim, and a decade of warnings that went unheeded. Here is what happened, how it worked, and how to defend against it.
- Aug 182026Aug 18, 2026
No Malware Required: How a Forgotten Router Let Attackers Stop a Polish Power Plant
Attackers crossed from an internet-facing wind farm into the control network of a combined heat and power plant, put its Siemens PLCs into STOP, and bricked devices on the way out. They used no malware at all. CERT Polska calls the entry point a world first, and it is probably sitting in a lot of other networks.
8 min#ot-security#ics#critical-infrastructure
- Mar 312026Mar 31, 2026
The Axios npm Compromise: How the Internet's Most Popular HTTP Client Became a Trojan Horse
A hijacked maintainer account. A phantom dependency. A self-erasing Remote Access Trojan. If you ran `npm install` on March 31, 2026, your infrastructure might already be compromised
4 min#supply-chain#npm#rat
- Feb 242026Feb 24, 2026
Conduent Data Breach: 25+ Million Americans Impacted in One of the Largest U.S. Cyber Incidents
How a third-party government contractor breach escalated into a multi-state crisis involving healthcare data, regulatory probes, and potential class actions.
4 min#data-breach#third-party-risk
- Feb 242026Feb 24, 2026
The Day the Maps Went Blank: Unpacking the Cloudflare BYOIP BGP Outage of 2026
How a single empty string of code wiped 25% of Cloudflare's network. A deep dive into the 2026 BGP outage and the fragility of the web.
7 min#outage#bgp#infrastructure
- Feb 182026Feb 18, 2026
Unpatchable? How Chinese Hackers Hid in Dell VMs for 2 Years Using "Magic Packets"
A deep dive into the critical Dell 0-day. How Chinese hackers used "Ghost NICs" and invisible malware to hide in corporate networks.
6 min#apt#zero-day#persistence
- Feb 172026Feb 17, 2026
The XZ Backdoor (CVE-2024–3094): How a Supply Chain Attack Nearly Compromised Every Linux Server
A breakdown of CVE-2024–3094, how the attacker hijacked liblzma, and why this almost became the biggest supply chain compromise in Linux history.
5 min#supply-chain#linux#cve
- Feb 52026Feb 5, 2026
The Notepad++ Hack: A Deep Dive Into a State-Sponsored Supply Chain Attack
How a beloved code editor was turned into a delivery mechanism for sophisticated spyware, and what it teaches us about modern cybersecurity threats.
5 min#supply-chain#apt
- Sep 102025Sep 10, 2025
Analysis of the NPM Supply Chain Attack
A technical breakdown of the September 2025 malware campaign that targeted 2 billion downloads by compromising 'chalk' and 'debug' packages.
2 min#supply-chain#npm