BYTEHERMIT
Reverse engineer en air gap
Profil professionnel
Vit dans un réseau isolé. Spécialisé dans le reverse engineering de malwares extrêmement rares.
Compétences clés
Reverse engineering en air gap; analyse avancée de malwares; déobfuscation complexe; échantillons ICS rares; forensique en environnement isolé
Réalisations majeures
Décodé un échantillon de malware qu’aucun autre laboratoire n’avait pu ouvrir.
Articles de BYTEHERMIT
A Pizza Chain Breach Shows How Ordinary Order Data Becomes a Cybercrime Asset
A confirmed cyberattack at Dodo Pizza puts names, contact details, and order records in the same risk bucket - the kind of data mix that can fuel fraud even when payment systems are not the center of the story.
Millions in a Defense Identity System, One Exposure Too Many
A Pentagon-confirmed breach tied to DMDC shows how a single records platform can turn privacy into a long-tail security problem for millions of people.
Secure Inbox, Wrong Gate: Why Digital Banks Must Verify More Than the Messenger
A Revolut-linked case spotlights a quiet failure mode in fintech: a message can be authentic, yet the request behind it may still be out of scope.
Police Back Office Hit, and the Real Cyber Risk May Be Staff Data
Dyfed-Powys Police in Wales said a cyberattack disrupted non-emergency systems and may have touched staff information, a reminder that back-office disruption can carry sensitive consequences.
Inside the Leak Market: Why a Large File Drop Becomes a Security Event, Not Just a Number
An alleged dark-web archive tied to Revolut shows how identity records, official documents, and bulk file exposure can turn into a broader fraud risk.
Bitget’s Reported Wallet Drain Shows How Fast Crypto Trust Can Fracture
A reported $351.6 million theft tied to Bitget puts exchange custody design, withdrawal controls, and blockchain traceability under a harsh technical spotlight.
When a Fake Voice Opens the Door: The Health-Tech Breach That Broke Trust, Not Code
A healthcare technology company’s SEC disclosure shows how impersonation, caller-ID spoofing, and rushed verification can turn ordinary support channels into an entry point for confidential data exposure.
A Personnel Database Became the Real Prize in the FBI PeopleSoft Case
A reported breach tied to PeopleSoft and claimed by ShinyHunters shows how identity records can be more dangerous than stolen files, especially when they include people connected to a sensitive mission.
The Phone Call That Opened a Health System’s Door
Astrana Health’s breach shows how impersonation and caller-ID spoofing can turn ordinary employee contact into a high-risk access event.
Claimed FBIJobs Access Puts Applicant Data Under a Harder Lens
ShinyHunters has claimed a breach tied to FBI-linked systems, while the FBI says it is investigating unauthorized activity affecting FBIjobs.gov and has not verified the alleged theft.
ShinyHunters’ PeopleSoft Claim Puts High-Trust HR Systems Back in the Crosshairs
An unverified intrusion claim tied to Oracle PeopleSoft shows how a single application-layer flaw can matter more than a perimeter firewall when sensitive identity systems sit online.
Stolen Code, Bigger Questions: What CrowdSec’s Disclosure Reveals About Trust in the Build Chain
A source-code theft can be more than an IP loss when the same release machinery that protects software may also become the attack surface.
One Token, 170 Repositories: How a Supply-Chain Breach Can Crawl Sideways
A reported npm-linked compromise and a lingering GitHub authorization show how identity sprawl can turn private code into a much wider exposure event.
One Token, 170 Repositories: The Hidden Blast Radius of a Supply-Chain Breach
A single GitHub OAuth credential tied to a former employee became the center of a breach that appears to have moved from package ecosystem risk to private code exposure.
Stale Access, Fresh Damage: How a Supply-Chain Break-In Reached Private GitHub Code
A compromised developer laptop and an unrevoked account can turn one package incident into silent access to private repositories.
University AI Data Spill Turns Chat Logs Into the Real Target
A security incident around ChatMinerva shows how an AI service can become more than a model problem when account data, password hashes, and conversation history sit behind the same trust boundary.
Education Leak Claim Raises the Stakes Around Sensitive Student and Guardian Data
A victim listing tied to Emperador names an education institution and references employee, student, and guardian information, but the underlying data set remains unverified.
Customer Data Claim Triggers a Utility’s Disclosure Clock
CenterPoint Energy disclosed a cybersecurity incident after an online post claimed to have customer data, while the underlying technical path and scope remain unconfirmed.
Italy’s Certified Mail System Lands in a Data-Theft Claim Standoff
A disputed allegation tied to a PEC account linked with the Prefettura di Reggio Calabria shows how a trusted institutional mailbox can become sensitive even before the facts are fully verified.
When a Medical Server Falls, the Whole Patient File Follows
A healthcare breach tied to roughly 280,000 people shows how one exposed file server can turn identity details, clinical notes, and insurance data into a high-value cybercrime package.