Real-world security incidents, legal changes, and operational lessons from the field.
US Central Command confirmed adversaries used commercial location data, purchased from ad brokers, to target deployed American troops. What it means and what to do.
GitHub lost 3,800 repositories because a developer installed a poisoned VS Code extension. The extension was legitimate. The version was not. How the supply chain became the attack.
Bryan Fleming built pcTattletale, a stalkerware platform with 138,000 paying customers and over $600,000 in PayPal revenue. He was fined $5,000. The ratio tells you exactly how seriously the US legal system treats non-consensual surveillance in domestic relationships.
A January 2026 GAO report confirmed US military OPSEC training does not address commercial data brokers. The same brokers were exposed in the Gravy Analytics breach. The soldier who locks down Instagram still has his home address on dozens of databases.
FulcrumSec leaked 3.9 million records and 118 .gov profiles from LexisNexis Legal and Professional after exploiting an unpatched React frontend. The platform every law firm uses just became the database every attacker wants.
Russia ran a phishing campaign that compromised around 300 Signal accounts belonging to ministers, military, diplomats, and journalists. The encryption was never touched. Attackers used Signal’s own Linked Devices feature.
ADT, Medtronic, and Trellix confirmed unauthorized access between April 17 and May 2, 2026. Two of the three breaches started with a phone call. No malware. A conversation.
Hankey v. United States: the Supreme Court heard arguments on April 26, 2026 on whether a warrant targeting a geographic area, not a person, is constitutional. Your phone’s location history is the evidence.
Ahmed Shihab-Eldin was arrested in Kuwait for reposting CNN footage of a US fighter jet crash. The law used to charge him was enacted twelve days after his arrest.
As of March 30, 2026, US visa applicants must set all social media profiles to public before their interview. For journalists, lawyers, and NGO workers, this means exposing source networks to government vetting.