// change_log
Zero-Day Collective — version history
v1.17 // current release
// articles
- The Update That Stopped the World: CrowdStrike Falcon Outage
- The $611 Million Heist That Wasn't: The Poly Network Hack
// site changes
- Added glossary entries for BSOD, Channel File, Kernel-Mode Driver, Staged Rollout, Cross-Chain Bridge, Privilege Escalation, White-Hat Hacker, and Smart Contract
- Added media reference covering Poly Network incident commentary
- Added hero images and attack-chain diagrams for both new stories
v1.16 // previous release
// articles
- The Forgotten Server: Inside the JPMorgan Chase Breach
- The Leak That Could Not Be Recalled: Ashley Madison 2015
- Breach of Trust: The Vastaamo Psychotherapy Extortion Case
// site changes
- Added glossary entries for Control Consistency, Data Minimization, and Patient-Level Extortion
- Added media references covering JPMorgan, Ashley Madison, and Vastaamo incident analysis
- Added hero images and attack-chain diagrams for all three new stories
v1.15 // previous release
// articles
- 56 Million Cards: The Home Depot Breach
- Teenagers vs. the Fortune 500: The Lapsus$ Rampage
- The Naughty List: The Medibank Breach
// site changes
- Added glossary entries for Insider Threat Recruitment, Lapsus$, and Data-Only Extortion
- Added hero images and attack-chain diagrams for all three new stories
v1.14 // previous release
// articles
- One Line, Thousands of Secrets: The Codecov Bash Uploader Breach
- The Key That Opened Government Mail: Storm-0558
- Five Keys to $625 Million: The Ronin Network Hack
// site changes
- Updated homepage/site description to reflect the archive focus
- Added glossary entries for Bash Uploader, Consumer Signing Key, and Bridge Validator Quorum
- Added media references covering Codecov, Storm-0558, and Ronin analysis
- Added hero images and attack-chain diagrams for all three new stories
v1.13 // previous release
// articles
- The Quiet Ransom: Caesars Entertainment and the Scattered Spider Breach
- Trusting the Support Channel: The Okta Support System Breach
- Phishing the Identity Layer: The 0ktapus Campaign Against Twilio
// site changes
- Added glossary entries for HAR, Helpdesk Reset Abuse, and Session Token Replay
- Added new media references covering Caesars, Okta support-system compromise, and 0ktapus tradecraft
- Added hero images and attack-chain diagrams for all three new stories
v1.12 // previous release
// articles
- The Breach That Checked In for Four Years: Marriott–Starwood
- When DNA Became a Target List: The 23andMe Breach
- One Login, Many Victims: The Snowflake Customer Data Thefts
// site changes
- Added new glossary entries for DNA Relatives Graph, Infostealer, and M&A Security Due Diligence
- Added new media references for Marriott–Starwood, 23andMe, and Snowflake incident analyses
- Added hero images and attack-chain diagrams for all three new stories
v1.11 // previous release
// articles
- The Fourth of July Massacre: Kaseya VSA and the Ransomware That Hit 1,500 Businesses at Once
// site changes
- Added glossary entries for RMM, MSP, and DLL Side-Loading; updated Supply Chain Attack and RaaS references
- Added Kaseya VSA media reference to conference talks section
- Removed automated daily story request workflow
v1.10 // previous release
// articles
- Love Letter, Global Outage: The ILOVEYOU Worm
- The Cloud Misconfiguration That Exposed 106 Million: Capital One 2019
- The Vault Wasn't Stolen—It Was Copied: The LastPass Breach
// site changes
- Expanded glossary and media references for ILOVEYOU, Capital One, and LastPass entries
v1.00 // stable release
// articles
- The Drift Protocol Exploit: How a $780 Million Oracle Attack Broke Solana's Largest Perpetuals Exchange
// site changes
- Version history corrected to reflect staged releases before v1.00
v0.95 // pre-release wave ten
// articles
- Everyone's Permanent Record: The PowerSchool Breach and the Data of 70 Million Students
- The $1.5 Billion Heist: Lazarus Group and the Largest Cryptocurrency Theft in History
- The Stryker 'Device Wipe': When the Operating Room Went Dark
- The Valentine's Day Massacre: The Match Group Breach and the Intimate Data of 600 Million
v0.90 // pre-release wave nine
// articles
- Ten Minutes to Total Compromise: The MGM Grand Hack
- The $22 Million Double-Cross: Change Healthcare and the ALPHV Exit Scam
- The Patient Zero: XZ Utils Backdoor
- The Wiretap They Walked Into: Salt Typhoon and the Compromise of American Telecommunications
v0.80 // pre-release wave eight
// articles
- The Pipeline Goes Dark: Colonial Pipeline
- The Flaw in Everything: Log4Shell
- The Sleeping Dragon: Volt Typhoon and China's Pre-Positioned Cyber Army
- The Weekend the World's Files Were Stolen: MOVEit and Cl0p
v0.70 // pre-release wave seven
// articles
- 147 Million Americans: The Equifax Catastrophe
- The Day Twitter's Keys Were Stolen
- The Ultimate Supply Chain Compromise: SolarWinds
- The Dragon in the Server Room: HAFNIUM and ProxyLogon
v0.60 // pre-release wave six
// articles
- The Ride That Cost $148 Million: Uber's Cover-Up
- The Internet of Vulnerable Things: Mirai
- The Worm That Broke the World: WannaCry
- The Most Destructive Cyberattack in History: NotPetya
v0.50 // pre-release wave five
// articles
- The Dossier: Anthem's 78 Million Records
- The Billion Dollar Heist: Carbanak and the FIN7 Banking Operation
- 21.5 Million Clearances: The OPM Breach
- The $81 Million Typo: Bangladesh Bank
v0.40 // pre-release wave four
// articles
- 152 Million Secrets: The Adobe Breach
- 40 Million Cards: The Target Data Breach
- The Fall of the First Bitcoin Giant: Mt. Gox
- The Interview That Burned a Studio: Sony Pictures
v0.30 // pre-release wave three
// articles
- The Master Key Heist: RSA SecurID
- Network Down: The PlayStation Network Hack
- The Password Dump: LinkedIn 2012
- Three Billion Secrets: The Yahoo Data Breach
v0.20 // pre-release wave two
// articles
- 130 Million Cards: The Heartland Breach
- Ghost in the Network: GhostNet and the First State-Sponsored APT
- The Dragon in the Source Code: Operation Aurora
- The Digital Warhead: Stuxnet
v0.10 // pre-release wave one
// articles
- The Accident that Birthed an Industry: The Morris Worm
- The Legal Precedent: The First CFAA Conviction
- The First Great Bank Heist: Citibank 1994
- The Most Wanted Hacker in the World: Kevin Mitnick