A private network is still a network. Once anything inside it could reach anything else, the isolation was a route.
New guidance asks operators to build and test plans for running vital systems disconnected. The assumption underneath it is the story.
Two disruptions survived, ~394,000 machines. Takedowns remove infrastructure; the code, operators and customer base persist.
326 servers and 142 domains seized, and 27 million credentials recovered. The credentials outlast the infrastructure.
A cloud flaw touching Commission web properties, internal systems untouched. The second such file this year, and the boundary held both times.
Originating traffic from a home connection in any country used to need a state service. It is now a subscription, and it breaks three controls at once.
“Systemically important” is borrowed from financial regulation, where it triggers obligations. Applied to FFmpeg and the kernel it triggers nothing.
A number identifies a billing relationship. It now secures banking and government access, and the depending services cannot see a port request.
Billions of connected computers with no owner, no update path and no monitoring. In an enterprise that is a finding; at national scale it is the default.
The same unfunded dependency is the root cause of files in four sections of this database, and nobody is being asked to choose a remedy.
The redundancy people assume exists between channels frequently does not exist in the infrastructure.
Where fibre runs, which routes carry which customers, where the single points of failure sit — a dependency map for organisations that were never asked.
Content tells you what a known person said. Metadata tells you who the people are — and it is the one that scales.
A figure that can only be an undercount. Those are the most useful numbers in this database and there are very few of them.
The vulnerability was not a defect in the implementation. It was the specification — and the thirty-year exceptional-access debate now has an empirical entry.
A small municipal utility has the operational exposure of critical infrastructure and the budget of a town department — and no route into the record.
A private company placed monitoring code on machines it did not own, and published that it had.
The only file here where the recorded harm is entirely prospective. The point was to be there later.
The distribution channel an organisation trusts most is the one that reaches everything.
Not a system disabled. A system operated, into a state the plant was built to prevent.
The devices behave as specified. The specification assumed the network could be trusted.
Germany was not the target. The turbines were on the same satellite, and the wiper did not check.
Finding a ransom note starts a recovery conversation. That was the deliverable.