Agent.btz: The USB Drive That Built US Cyber Command
A USB drive from a parking lot crossed the Pentagon's air gap in 2008 and took 14 months to remove. The cleanup created US Cyber Command. Part eight of a series on attacks that beat isolation.
Tag: Cybersecurity (Page 3)
CybersecurityCrypto AG: The Company That Sold Spying as Security for Fifty Years
More than 120 countries bought encryption machines from Crypto AG to keep secrets safe. The CIA and West German intelligence secretly owned it and read everything. Part seven of a series on attacks that beat isolation.
CybersecurityGoing Low-Tech Didn’t Save Them: The Pager Attack as a Supply Chain Lesson
Going low-tech didn't save Hezbollah, because the devices were the attack. Why supply chain trust is a vulnerability for anyone who buys anything. Part six of a series on attacks that beat isolation.
CybersecurityThe Hezbollah Pager Attack: When the Device Itself Was the Weapon
Hezbollah traded trackable phones for simple pagers to stay safe, and the pagers were the weapon. Part five of a series on attacks that beat isolation.
CybersecurityAfter Stuxnet: The Weapons It Loosed on the World
Once Stuxnet escaped, the idea was free. The decade that followed brought Shamoon, the Ukraine grid attacks, and Triton. Part four of a series on attacks that beat isolation.
CybersecurityHow Stuxnet Crossed an Air Gap Nobody Thought Could Be Crossed
Natanz was air-gapped, and Stuxnet crossed it anyway, on USB drives, stolen certificates, and four unknown flaws. Part three of a series on attacks that beat isolation.
CybersecurityStuxnet: The Weapon That Rewrote What a Cyberattack Could Be
Stuxnet was the first attack that reached out of a screen and broke real machines, destroying a thousand centrifuges at an air-gapped nuclear plant. Part two of a series on attacks that beat isolation.
CybersecurityThe Morris Worm: The Night the Internet Learned to Distrust Itself
In one night in 1988, a self-copying program jammed a tenth of the internet and ended the assumption that the network could be trusted. The first article in a series on attacks that beat isolation.
CybersecurityWordPress Security Is a Posture, Not a Plugin
Every article in this series was secretly about security. The capstone: why the green checkmark is a component and not a defense, what a working posture looks like in practice, and the five questions no product can answer.
CybersecurityThe Supply Chain Is the Attack Surface
The attack that reached my site did not come at it. It came through it, riding a trusted update channel. Why supply chain attacks scale, why they extend to hardware, and how to manage a chain you cannot eliminate.
CybersecurityThe Morning I Found a Plugin I Never Installed
A plugin folder appeared on my site that I never installed. It was caught before it did damage, and the investigation changed how I run every part of my WordPress stack.
Cloud ComputingGhostwriting a Cloud Security Book in the Zero Trust Era
Cloud security in 2026 runs on Zero Trust. A book that still teaches castle-and-moat thinking is teaching a model the field abandoned.