Critical-Infrastructure

What do you do when BankID is down?

Norway's national login infrastructure went down at 03:38 on Monday 24 August and stayed degraded for three days, the second denial-of-service attack on the …

Security Digest

Containment, Coldcard, and Contamination

Issue 026 covers 1 through 6 August. Meta’s Muse Spark 1.1 was the third disclosed lab containment breach in two weeks, after Anthropic and OpenAI, …

MuddyWater Follow-Up: April 2026

A lot changed in four weeks. MuddyWater rebuilt their toolkit in Rust, started using AI to write malware, compromised US banks and airports, and picked up new …

MuddyWater: Inside Iran's Cyber War Machine

A comprehensive look at MuddyWater, the Iranian APT embedded in US banks and airports before the bombs even fell. From Operation Olalampo to exposed server …