WannaCry: how an NSA exploit infected 200,000 PCs in 2017
In May 2017, WannaCry used an NSA exploit to infect 200,000 PCs across 150 countries. Brazil was the 5th worst hit — and …
Incident Response 38 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
4 July 2009: the DDoS that revealed the Lazarus Group to the world
On 4 July 2009, hackers knocked over the websites of the White House, the Pentagon and the NYSE in a coordinated DDoS — …
NotPetya: the US$10 billion cyberattack, 9 years on
On 27 June 2017, a wiper disguised as ransomware left Ukraine and caused US$10 billion in damage. Maersk, Merck and …
The "hi, mum" WhatsApp scam: how it works and how to avoid it
Photo, name and even the way of writing, all copied. Here are the two scams behind "hi mum, I've changed my number" and …
Morris Worm: the 1988 worm that nearly took down the internet
On 2 November 1988, a worm released by a Cornell student brought down 6,000 computers and almost stopped the entire …
Clipper malware steals crypto via USB and uses Tor as C2
Microsoft warns of a campaign active since February 2026 that combines a USB worm, clipboard hijacking and Tor-based C2 …
iFood data breach: 1.2 million Brazilian IDs exposed
iFood confirmed a breach dating to December 2025: names, national ID numbers and addresses of 1.2 million customers …
ShinyHunters exploits Oracle PeopleSoft zero-day, 100+ victims
ShinyHunters exploited CVE-2026-35273, a CVSS 9.8 zero-day in Oracle PeopleSoft, to breach 100+ organisations before a …
Aflac: breach exposes the data of 22.7 million people
The US insurer confirms that a June 2025 attack exposed the health data and SSNs of 22.7 million people. It took a year …
Miasma: supply chain worm infects 32 Red Hat npm packages
On 1 June, the Miasma worm compromised 32 Red Hat npm packages and stole AWS, Azure, GCP and Kubernetes credentials …