Incident Report: CVE-2024-YIKES(nesbitt.io)

658 points by miniBill 5 months ago | 156 comments

A satirical incident report by Andrew Nesbitt about a cascading software supply chain attack spanning JavaScript, Rust, and Python package ecosystems.

Thanksgiving 2023 security incident(blog.cloudflare.com)

592 points by nomaxx117 2 years ago | 292 comments

Cloudflare blog post by Matthew Prince and colleagues describing a threat actor detected on its systems on Thanksgiving Day 2023 and the company's response.

Discord API Errors(discordstatus.com)

32 points by mot2ba 1 year ago | 19 comments

Every log must fire: applying Chekhov's gun to cybersecurity incident reports(andreafortuna.org)

4 points by speckx 11 months ago | 0 comments

Mantine-datatable (and others) compromised – owner account suspended(github.com)

63 points by justsomehuman 5 months ago | 24 comments

I have recordings proving Coinbase knew about breach months before disclosure(jonathanclark.com)

600 points by jclarkcom 11 months ago | 179 comments

A personal blog post arguing, with recordings and emails, that phishing attacks tied to the Coinbase data breach began in January 2025, months before Coinbase's disclosure.

The Twitter API is now effectively unmaintained(snarfed.org)

363 points by edent 3 years ago | 461 comments

Ryan Barrett's blog post arguing the Twitter API is effectively unmaintained, citing the decline of Twitter employee posts on the developer forum.

Gheist campaign plants secret-dumping workflows using stolen GitHub tokens(wiz.io)

44 points by acossta 7 days ago | 0 comments

Wiz Research blog post analyzing Gheist, a campaign using stolen GitHub tokens to plant workflows that dump repository secrets, with IOCs and response guidance.

WordPress: Unauthenticated path traversal leading to conditional RCE(github.com)

226 points by vntok 1 month ago | 124 comments

GitHub security advisory for a critical WordPress unauthenticated path traversal in page-template resolution leading to conditional RCE, listing affected and patched versions.

AI handles incidents, engineers lose touch with their systems(sylvainkalache.com)

359 points by sylvainkalache 1 month ago | 309 comments

Blog post by a former LinkedIn SRE arguing that AI tools automating incident response risk making engineers lose understanding of their systems.

GitLab Security Incident: Attempted Exploitation of CVE-2026-97229(alpinelinux.org)

236 points by sashk 4 days ago | 109 comments

Alpine Linux incident report on an attempted exploitation of a critical GitLab/Ruby Onigmo vulnerability against its GitLab instance, with timeline, impact assessment and remediation.

Tailscale SSH: Investigation and remediation update(tailscale.com)

368 points by figmert 5 days ago | 187 comments

Tailscale's update on investigating privilege escalation vulnerabilities in Tailscale SSH, with remediation progress, a planned patch release, and interim mitigation steps.