ZERO DAY
Where cybersecurity meets national security
- Posts
- 96 from 12 Mar 2021 to 28 Oct 2026
- Posting
- monthly (18 in the last year)
- Kind
- personal blog
- Feed
- https://www.zetter-zeroday.com/rss/
2026 18
- Silent Train: Volt Typhoon’s Sophisticated Infection Chain into US Targets Exposed
- Trezor Wallets Also Compromised with Implants
- Who Is Planting Backdoors in Ledger Crypto Wallets?
- Company Behind Graphite Spyware Speaks for First Time about Italy Abuse and Accountability
- US-Based Digital Forensics Firm Hid its Russian Ownership from U.S. Government Customers
- Tracking Peter Stokes and The Com: Allison Nixon and Her Work Unmasking Cybercriminals
- Arrest of Iranian Hacker Spotlights Iran’s Movement into Economic Espionage and IP Theft
- Timeline of Iran’s Nuclear Program and the Stuxnet and Fast16 Attacks
- Experts Confirm the Fast16 Malware Was Sabotaging Nuclear Weapons Tests, Likely in Iran
- Trenchant Exec Who Sold Zero Days to Russian Buyer Ordered to Pay $10 Million in Restitution to Former Employers
- Mystery Around Venezuelan Cyberattack Deepens, with New Discovery of "Highly Destructive" Wiper
- The Sad Decline of Trenchant Exec Who Had Everything, Before Deciding to Steal and Sell Zero Days to Russian Buyer
- Iranian Hacktivists Strike Medical Device Maker Stryker in "Severe" Attack that Wiped Systems
- Trenchant Exec Who Sold His Employer's Zero-Day Exploits to Russian Buyer Sentenced to 7 Years in Prison
- Polish Grid Systems Targeted in Cyberattack Had Little Security, Per New Report
- Attack Against Poland's Grid Disrupted Communication Devices at About 30 Sites
- Booz Allen Tech Contractor Took IRS Job Specifically to Leak Trump's Tax Records
- Cyberattack Targeting Poland’s Energy Grid Used a Wiper
2025 10
- Former Trenchant Exec Sold Stolen Code to Russian Buyer Even After Learning that Other Code He Sold Was Being "Utilized" by Different Broker in South Korea
- John Bolton Indictment Provides Interesting Details About Hack of His AOL Account and Extortion Attempt
- Voting Machine Company Smartmatic Charged in Federal Indictment That Previously Only Charged Executives
- How the Infamous APT-1 Report Exposing China’s PLA Hackers Came to Be
- UAE Recruiting US Personnel Displaced by DOGE to Work on AI for its Military
- Trump Signs Memorandum Revoking Security Clearance of Former CISA Director Chris Krebs
- Did Trump Admin Order U.S. Cyber Command and CISA to Stand Down on Russia? (Story updated)
- Court Documents Shed New Light on DOGE Access and Activity at Treasury Department
- U.S. Government Disclosed 39 Zero-Day Vulnerabilities in 2023, Per First-Ever Report
- Anatomy of a Nuclear Scare
2024 6
- Voting Machine Company Involved in Bribing Scandal Has Long History of Controversy
- Kaspersky Lab Closing U.S. Division; Laying Off Workers
- New Government Ban on Kaspersky Would Prevent Company from Updating Malware Signatures in U.S.
- Apple Chip Flaw Lets Hackers Steal Encryption Keys
- Zero Day Moves to Ghost
- Nevada AG Asks Court to Ban Meta from Providing End-to-End Encryption to Minors
2023 14
- European Standards Body Votes to Release Secret Algorithms
- Sophisticated StripedFly Spy Platform Masqueraded for Years as Crypto Miner
- How North Korean Workers Tricked U.S. Companies into Hiring Them and Secretly Funneled Their Earnings into Weapons Programs
- Standards Body Considers Uncloaking Secret Encryption Algorithms
- Did a Journalist Violate Hacking Law to Leak Fox News Clips? The Government Thinks He Did.
- Radiation Spikes at Chernobyl: A Mystery Few Seem Interested in Solving
- Interview with the ETSI Standards Organization That Created TETRA "Backdoor"
- SEC Targets SolarWinds' CISO for Rare Legal Action Over Russian Hack
- How Volexity Discovered the SolarWinds Hacking Campaign
- Timeline of the SolarWinds Hack and Investigation
- Updates and Timeline for 3CX and X_Trader Hacks
- Software Maker 3CX Was Compromised in First-of-its-Kind Threaded Supply-Chain Hack - Updated
- Leaked Pentagon Document Claims Russian Hacktivists Breached Canadian Gas Pipeline Company
- Hello and an Update
2022 18
- White House Says President Zelensky Set Security Parameters for His Visit to the U.S.
- Security Firms Aiding Ukraine During War Could Be Considered Participants in Conflict
- Viasat Hack "Did Not" Have Huge Impact on Ukrainian Military Communications, Official Says
- Mysterious New Hacking Group Leaves Researchers Baffled
- Colonial Pipeline Ignored Numerous Warnings
- Is the Secret Service’s Claim About Erased Text Messages Plausible? (Updated)
- What It Means that the U.S. Is Conducting Offensive Cyber Operations Against Russia
- Russia Began Setting Stage for Cyberattacks Against Ukraine a Year Ago
- Questions about Cyber Conflict Remain Unresolved, Panelists Note
- Substack Rolls out Two-Factor Authentication for Users
- Unmasking China’s State Hackers
- Intrusion Truth - Five Years of Naming and Shaming China’s Spies
- Second Wiper Attack Strikes Systems in Ukraine and Two Neighboring Countries
- Wiper in Ukraine Used Code Repurposed From WhiteBlackCrypt Ransomware
- Hackers Were in Ukraine Systems Months Before Deploying Wiper
- Dozens of Computers in Ukraine Wiped with Destructive Malware in Coordinated Attack
- What We Know and Don’t Know about the Cyberattacks Against Ukraine - (updated)
- Cyber Ninjas CEO Launched Second Company Last Year - Updated
2021 30
- When Russia Helped the U.S. Nab Cybercriminals
- The Israeli Intelligence Community’s Long History of Targeted Killings
- Sidechannel Interview with Ronen Bergman - Live Oct. 13, 1pm PT/4pm ET
- Controversial Maricopa "Audit" Concludes that Biden Won by More Votes Than Previously Reported
- Former NSA Hacker Describes Being Recruited for UAE Spy Program
- Timeline for Hacking Team Story
- Hacking Team Customer in Turkey Was Arrested for Spying on Police Colleagues [or: The Spy Story That Spun a Tangled Web]
- Hackers Leak Surveillance Camera Videos Purportedly Taken From Inside Iran's Evin Prison
- Pegasus Spyware: How It Works and What It Collects
- The NSO “Surveillance List”: What It Is and Isn’t
- Justice Department Sought Reporter Records from Security Firm Proofpoint, in Bid to Unmask Leak Sources
- Voting’s Hash Problem: When the System for Verifying the Integrity of Voting Software Lacks Integrity Itself
- Negotiating Ransoms: When to Play and When to Fold
- Checking in
- Darkside Retreats to the Dark
- Anatomy of a $2 Million Darkside Ransomware Breach
- What Happens in Maricopa Won’t Stay in Maricopa
- US Gov Issues Emergency Order While Colonial Pipeline Is Down
- Ransomware Infection on Colonial Pipeline Shows Potential for Worse Gas Disruption
- Recording now Available: Live Chat with Alex Stamos/Chris Krebs on Sidechannel, Friday April 30, 11am PST/2pm EST
- Research Uncovers New Command Servers Used in SolarWinds Campaign
- Sanctioned Firm Accused of Helping Russian Intelligence Was Part of Microsoft’s Early Vuln Access Program — MAPP
- Introducing Sidechannel, for Zero Day Subscribers
- Going Nuclear
- Sabotage at Iranian Nuclear Plant Was Likely Meant to Permanently Damage Centrifuges
- AP Says It Experienced Unprecedented Cyber "Attacks" During 2020 Election
- Mind the Gap: How the NSA might use SolarWinds campaign to do warrantless spying
- Delay due to Emergency
- Government Monitoring Won't Stop the Next SolarWinds Campaign, Experts Say
- About the Author