The Curious Engineer

All blogs / Security

ZERO DAY

zetter-zeroday.com

Where cybersecurity meets national security

SecuritySociety / politics / economy

Posts
96 from 12 Mar 2021 to 28 Oct 2026
Posting
monthly (18 in the last year)
Kind
personal blog
Feed
https://www.zetter-zeroday.com/rss/

2026 18

  1. Silent Train: Volt Typhoon’s Sophisticated Infection Chain into US Targets Exposed
  2. Trezor Wallets Also Compromised with Implants
  3. Who Is Planting Backdoors in Ledger Crypto Wallets?
  4. Company Behind Graphite Spyware Speaks for First Time about Italy Abuse and Accountability
  5. US-Based Digital Forensics Firm Hid its Russian Ownership from U.S. Government Customers
  6. Tracking Peter Stokes and The Com: Allison Nixon and Her Work Unmasking Cybercriminals
  7. Arrest of Iranian Hacker Spotlights Iran’s Movement into Economic Espionage and IP Theft
  8. Timeline of Iran’s Nuclear Program and the Stuxnet and Fast16 Attacks
  9. Experts Confirm the Fast16 Malware Was Sabotaging Nuclear Weapons Tests, Likely in Iran
  10. Trenchant Exec Who Sold Zero Days to Russian Buyer Ordered to Pay $10 Million in Restitution to Former Employers
  11. Mystery Around Venezuelan Cyberattack Deepens, with New Discovery of "Highly Destructive" Wiper
  12. The Sad Decline of Trenchant Exec Who Had Everything, Before Deciding to Steal and Sell Zero Days to Russian Buyer
  13. Iranian Hacktivists Strike Medical Device Maker Stryker in "Severe" Attack that Wiped Systems
  14. Trenchant Exec Who Sold His Employer's Zero-Day Exploits to Russian Buyer Sentenced to 7 Years in Prison
  15. Polish Grid Systems Targeted in Cyberattack Had Little Security, Per New Report
  16. Attack Against Poland's Grid Disrupted Communication Devices at About 30 Sites
  17. Booz Allen Tech Contractor Took IRS Job Specifically to Leak Trump's Tax Records
  18. Cyberattack Targeting Poland’s Energy Grid Used a Wiper

2025 10

  1. Former Trenchant Exec Sold Stolen Code to Russian Buyer Even After Learning that Other Code He Sold Was Being "Utilized" by Different Broker in South Korea
  2. John Bolton Indictment Provides Interesting Details About Hack of His AOL Account and Extortion Attempt
  3. Voting Machine Company Smartmatic Charged in Federal Indictment That Previously Only Charged Executives
  4. How the Infamous APT-1 Report Exposing China’s PLA Hackers Came to Be
  5. UAE Recruiting US Personnel Displaced by DOGE to Work on AI for its Military
  6. Trump Signs Memorandum Revoking Security Clearance of Former CISA Director Chris Krebs
  7. Did Trump Admin Order U.S. Cyber Command and CISA to Stand Down on Russia? (Story updated)
  8. Court Documents Shed New Light on DOGE Access and Activity at Treasury Department
  9. U.S. Government Disclosed 39 Zero-Day Vulnerabilities in 2023, Per First-Ever Report
  10. Anatomy of a Nuclear Scare

2024 6

  1. Voting Machine Company Involved in Bribing Scandal Has Long History of Controversy
  2. Kaspersky Lab Closing U.S. Division; Laying Off Workers
  3. New Government Ban on Kaspersky Would Prevent Company from Updating Malware Signatures in U.S.
  4. Apple Chip Flaw Lets Hackers Steal Encryption Keys
  5. Zero Day Moves to Ghost
  6. Nevada AG Asks Court to Ban Meta from Providing End-to-End Encryption to Minors

2023 14

  1. European Standards Body Votes to Release Secret Algorithms
  2. Sophisticated StripedFly Spy Platform Masqueraded for Years as Crypto Miner
  3. How North Korean Workers Tricked U.S. Companies into Hiring Them and Secretly Funneled Their Earnings into Weapons Programs
  4. Standards Body Considers Uncloaking Secret Encryption Algorithms
  5. Did a Journalist Violate Hacking Law to Leak Fox News Clips? The Government Thinks He Did.
  6. Radiation Spikes at Chernobyl: A Mystery Few Seem Interested in Solving
  7. Interview with the ETSI Standards Organization That Created TETRA "Backdoor"
  8. SEC Targets SolarWinds' CISO for Rare Legal Action Over Russian Hack
  9. How Volexity Discovered the SolarWinds Hacking Campaign
  10. Timeline of the SolarWinds Hack and Investigation
  11. Updates and Timeline for 3CX and X_Trader Hacks
  12. Software Maker 3CX Was Compromised in First-of-its-Kind Threaded Supply-Chain Hack - Updated
  13. Leaked Pentagon Document Claims Russian Hacktivists Breached Canadian Gas Pipeline Company
  14. Hello and an Update

2022 18

  1. White House Says President Zelensky Set Security Parameters for His Visit to the U.S.
  2. Security Firms Aiding Ukraine During War Could Be Considered Participants in Conflict
  3. Viasat Hack "Did Not" Have Huge Impact on Ukrainian Military Communications, Official Says
  4. Mysterious New Hacking Group Leaves Researchers Baffled
  5. Colonial Pipeline Ignored Numerous Warnings
  6. Is the Secret Service’s Claim About Erased Text Messages Plausible? (Updated)
  7. What It Means that the U.S. Is Conducting Offensive Cyber Operations Against Russia
  8. Russia Began Setting Stage for Cyberattacks Against Ukraine a Year Ago
  9. Questions about Cyber Conflict Remain Unresolved, Panelists Note
  10. Substack Rolls out Two-Factor Authentication for Users
  11. Unmasking China’s State Hackers
  12. Intrusion Truth - Five Years of Naming and Shaming China’s Spies
  13. Second Wiper Attack Strikes Systems in Ukraine and Two Neighboring Countries
  14. Wiper in Ukraine Used Code Repurposed From WhiteBlackCrypt Ransomware
  15. Hackers Were in Ukraine Systems Months Before Deploying Wiper
  16. Dozens of Computers in Ukraine Wiped with Destructive Malware in Coordinated Attack
  17. What We Know and Don’t Know about the Cyberattacks Against Ukraine - (updated)
  18. Cyber Ninjas CEO Launched Second Company Last Year - Updated

2021 30

  1. When Russia Helped the U.S. Nab Cybercriminals
  2. The Israeli Intelligence Community’s Long History of Targeted Killings
  3. Sidechannel Interview with Ronen Bergman - Live Oct. 13, 1pm PT/4pm ET
  4. Controversial Maricopa "Audit" Concludes that Biden Won by More Votes Than Previously Reported
  5. Former NSA Hacker Describes Being Recruited for UAE Spy Program
  6. Timeline for Hacking Team Story
  7. Hacking Team Customer in Turkey Was Arrested for Spying on Police Colleagues [or: The Spy Story That Spun a Tangled Web]
  8. Hackers Leak Surveillance Camera Videos Purportedly Taken From Inside Iran's Evin Prison
  9. Pegasus Spyware: How It Works and What It Collects
  10. The NSO “Surveillance List”: What It Is and Isn’t
  11. Justice Department Sought Reporter Records from Security Firm Proofpoint, in Bid to Unmask Leak Sources
  12. Voting’s Hash Problem: When the System for Verifying the Integrity of Voting Software Lacks Integrity Itself
  13. Negotiating Ransoms: When to Play and When to Fold
  14. Checking in
  15. Darkside Retreats to the Dark
  16. Anatomy of a $2 Million Darkside Ransomware Breach
  17. What Happens in Maricopa Won’t Stay in Maricopa
  18. US Gov Issues Emergency Order While Colonial Pipeline Is Down
  19. Ransomware Infection on Colonial Pipeline Shows Potential for Worse Gas Disruption
  20. Recording now Available: Live Chat with Alex Stamos/Chris Krebs on Sidechannel, Friday April 30, 11am PST/2pm EST
  21. Research Uncovers New Command Servers Used in SolarWinds Campaign
  22. Sanctioned Firm Accused of Helping Russian Intelligence Was Part of Microsoft’s Early Vuln Access Program — MAPP
  23. Introducing Sidechannel, for Zero Day Subscribers
  24. Going Nuclear
  25. Sabotage at Iranian Nuclear Plant Was Likely Meant to Permanently Damage Centrifuges
  26. AP Says It Experienced Unprecedented Cyber "Attacks" During 2020 Election
  27. Mind the Gap: How the NSA might use SolarWinds campaign to do warrantless spying
  28. Delay due to Emergency
  29. Government Monitoring Won't Stop the Next SolarWinds Campaign, Experts Say
  30. About the Author