incident analysis
6 posts
The door was unlocked, not picked
Federal concern over fable 5 was a trust boundary failure, not a jailbreak. Fix this code targets content, not access enforcement.
The seed money didn't kill that repo.
An AI OSS tool repo archived overnight after a 73M seed round. The targeting, scrub, and OSINT operation are not confirmed. What the facts actually support.
Motorola signed its own kill switch
Motorola's silent firmware push bricked its WiFi router line. The mechanism is identical to AcidRain. Here is what failed and why it repeats.
Contractor PAT leaked 270GB of Times source
The 2024 NYT source code leak was not a credential breach. It was a credential sprawl chain. The mechanism, telemetry gaps, and what still applies.
Detection is not prevention.
Malicious npm packages reached Red Hat cloud services. The boundary admitted code, then classified it. That sequence defines the failure.
A license audit caught the breach
A six-week account takeover surfaced during a license audit. The detection vector defines the control failure.