BYTEHERMIT
Reverse engineer en air gap
Profil professionnel
Vit dans un réseau isolé. Spécialisé dans le reverse engineering de malwares extrêmement rares.
Compétences clés
Reverse engineering en air gap; analyse avancée de malwares; déobfuscation complexe; échantillons ICS rares; forensique en environnement isolé
Réalisations majeures
Décodé un échantillon de malware qu’aucun autre laboratoire n’avait pu ouvrir.
Articles de BYTEHERMIT
Britain’s Legal Aid Records Go Far Back, and So Does the Risk
A reported breach at the Legal Aid Agency has turned a routine incident notice into a harder question: when old records sit inside modern services, how far can a compromise really reach?
The 200GB Cartoon Archive Mystery and the Risk of Forgotten Production Data
A circulating cache linked to Cartoon Network has become a reminder that creative archives can carry real security value even when the full origin, size, and completeness remain unverified.
Retail Sites Vanish, but the Security Question Lingers Behind the Outage
Ahold Delhaize USA’s web and app outage comes amid a cybersecurity incident, but the cause and scope have not been publicly identified.
Stolen Credentials Turn GitHub Into a Quiet Leak Channel
A reported repository access incident shows how one valid employee account can turn source control into a privacy and code-security problem at the same time.
When a Lazy Password Meets a Large Data Store, the Damage Scales Fast
A Denmark breach tied to weak account security shows how one predictable credential, especially on a privileged account, can turn routine access into a mass personal-data incident.
When AI Becomes the Operator: A Ukrainian Web Intrusion Trail Raises a New Defensive Problem
A reported campaign tied to WordPress, e-commerce, and critical infrastructure in Ukraine shows how an AI coding tool and a familiar post-exploitation framework can be combined for faster intrusion workflows.
Vendor Malware, Million-Record Exposure: The Karaoke Data Leak That Wasn’t Just About One Company
A malware infection at Nippon Columbia reportedly put millions of records into exposure, turning a contractor-side incident into a sharp lesson in third-party risk, data handling, and privacy control.
Registry Control, Browser Alarm: Why a ccTLD Hijack Is a High-Trust Incident
A reported compromise involving .gh, .sl, and a third ccTLD registry highlights how attacks against naming infrastructure can shake confidence far beyond a single site.
Delayed Breach Notice Puts the Spotlight on Silent Data Loss
Advantest disclosed that personal information was taken from its servers in a February 2026 cyberattack tied to ransomware, illustrating the challenge of learning about exposure after the incident has already aged.
When a Discord Bot Turns Into a Data Bridge
A breach inside Double Counter shows how a legacy foothold, cloud access, and broad bot trust can combine into a high-risk path for account-linked data.
Oracle Health’s Breach Count Keeps Growing, and That Matters More Than the Headline Number
A nearly 20 million tally is less a technical verdict than a warning sign: in healthcare, breach scope often expands as investigators sort records, notifications, and regulatory obligations.
Stolen Trust, Not Just Stolen Data: Why a Retail Notification Channel Became the Weak Point
ASOS’s customer update points to a familiar modern breach pattern: social engineering and credential theft can turn a trusted communication layer into the real prize.
Credentials, Cloud Paths, and a Million Records: The Quiet Breach Risk Inside Church Systems
A reported intrusion involving South Korean churches shows how stolen logins, exposed applications, and cloud storage can combine into a high-impact privacy event without loud malware or obvious destruction.
ASOS and the Hidden Risk of a Trusted Notification Path
A cyber incident involving a third-party communication platform shows how a brand’s own messaging channel can become part of the attack surface, even when core shopping services stay online.
Unauthorized ASOS Alert Shows How a Trusted Message Channel Can Be Abused
ASOS is investigating after customers received a rogue “ASOS HACKED” notification, while the claimed Snowflake compromise remains unverified.
Alert Channel Hijack Puts Retail Trust on the Line
ASOS is investigating unauthorized activity tied to third-party customer communication systems, while a claim about Snowflake access remains unverified.
A Missed Patch, a Sensitive Workforce System, and a Breach That Would Not Stay Quiet
An FBI-related employee data incident shows how one delayed fix in a third-party-managed environment can turn patch hygiene into a trust crisis.
When Automation Becomes the Breach Path: The Bank Case That Put AI Agents Under the Microscope
Allegations that AI agents were used in attacks on South Korean banks point to a deeper problem: who, or what, is allowed to cross the trust boundary inside financial systems.
A Contractor Exit, a Federal HR Breach, and the Quiet Risk Inside Personnel Systems
A sensitive data exposure tied to an HR platform shows how contractor access, patching, and identity hygiene can turn routine administration into a high-stakes security event.
One Stolen Inbox, Thousands of Phishes: The Quiet Power of Mailbox Abuse
A breach involving employee email accounts at Nikkei shows how account takeover can turn a trusted mailbox into a phishing relay without implying a wider platform failure.