--- title: "#cyberattack articles | Hashnode" description: "Explore 123 articles tagged #cyberattack on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/cyberattack" --- Tag # #cyberattack 123 posts · 185 followers [Fonz](https://hashnode.com/@aiza-hextyx) · [Oct 30](https://hashnode.com/posts/binance-s-6-3-billion-heist-a-wake-up-call-for-ai-devops-and-runtime-security/6ae50de004978d35c7e512f8) ### [Binance’s $6.3 Billion Heist: A Wake-Up Call for AI, DevOps, and Runtime Security](https://aiza-hextyx.hashnode.dev/binance-s-6-3-billion-heist-a-wake-up-call-for-ai-devops-and-runtime-security?utm_source=hashnode&utm_medium=feed) Binance’s $6.3 Billion Heist: compromised engineering environment, trusted internal services, transaction authorization weaknesses enable crypto theft 11 min read · [aiza-hextyx.hashnode.dev](https://aiza-hextyx.hashnode.dev/binance-s-6-3-billion-heist-a-wake-up-call-for-ai-devops-and-runtime-security?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [Oct 21](https://hashnode.com/posts/they-didn-t-steal-your-data-they-stole-your-groceries/6ad8324959c70499e18121ee) ### [They Didn't Steal Your Data. They Stole Your Groceries.](https://nulltrace.hashnode.dev/they-didn-t-steal-your-data-they-stole-your-groceries?utm_source=hashnode&utm_medium=feed) Ahold Delhaize shut down its own IT systems after spotting "malicious actions of others" — and for eleven days, millions of shoppers across Europe and America couldn't order food online. The company still won't say what happened. 4 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/they-didn-t-steal-your-data-they-stole-your-groceries?utm_source=hashnode&utm_medium=feed) [Mukaddaskhon Umarova](https://hashnode.com/@hanachan) · [Oct 20](https://hashnode.com/posts/inside-the-mgm-resorts-cyberattack-social-engineering-identity-security-and-resilience/6ad7035f3df814c17e815622) ### [Inside the MGM Resorts Cyberattack: Social Engineering, Identity Security, and Resilience](https://threatatlas.hashnode.dev/inside-the-mgm-resorts-cyberattack-social-engineering-identity-security-and-resilience?utm_source=hashnode&utm_medium=feed) In September 2023, MGM Resorts suffered a major cyberattack that disrupted hotel operations, slot machines, digital room keys, and reservations for roughly ten days, costing an estimated $100 million. Attackers linked to Scattered Spider (an ALPHV/BlackCat affiliate) reportedly used LinkedIn reconnaissance and a short vishing call to the IT help desk, impersonating an employee to reset credentials and MFA. This granted access to MGM’s Okta identity platform and Azure environment, enabling escalation and ransomware deployment against ESXi hypervisors. MGM’s SEC filings confirmed the financial impact, system shutdowns for containment, and theft of personal data (names, contact details, dates of birth, driver’s licenses, and limited Social Security/passport numbers) from some pre-March 2019 customers. No payment-card or banking data was taken. The incident underscores critical lessons: harden help-desk verification beyond knowledge-based checks, enforce phishing-resistant MFA, apply least privilege and identity segmentation, monitor for anomalous identity changes, and strengthen incident response. Identity has become the primary attack surface; a single procedural gap can cascade into enterprise-wide operational failure. 9 min read · [threatatlas.hashnode.dev](https://threatatlas.hashnode.dev/inside-the-mgm-resorts-cyberattack-social-engineering-identity-security-and-resilience?utm_source=hashnode&utm_medium=feed) [rathsara](https://hashnode.com/@rathsara) · [Oct 17](https://hashnode.com/posts/idslab-what-does-another-ids-stage-actually-add/6ad34699498dde50052a8406) ### [IDSLab: What Does Another IDS Stage Actually Add?](https://rr-cyber.hashnode.dev/idslab-what-does-another-ids-stage-actually-add?utm_source=hashnode&utm_medium=feed) An open-source framework for experimenting with staged intrusion detection systems 9 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/idslab-what-does-another-ids-stage-actually-add?utm_source=hashnode&utm_medium=feed) [rathsara](https://hashnode.com/@rathsara) · [Oct 15](https://hashnode.com/posts/the-practical-firewall-audit-checklist/6ad0fbee4ad0f92e41ec56b6) ### [The Firewall Is the Target Now: A Practical Audit Checklist](https://rr-cyber.hashnode.dev/the-practical-firewall-audit-checklist?utm_source=hashnode&utm_medium=feed) Where I’d start a firewall audit; the device, the rules, the traffic and the process 18 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/the-practical-firewall-audit-checklist?utm_source=hashnode&utm_medium=feed) [rathsara](https://hashnode.com/@rathsara) · [Sep 22](https://hashnode.com/posts/hiding-network-connections-encryption-onion-routing-and-identity-spoofing/6ab2af3aeaf886d499ed8f58) ### [Hiding Network Connections: Encryption, Onion Routing, and Identity Spoofing](https://rr-cyber.hashnode.dev/hiding-network-connections-encryption-onion-routing-and-identity-spoofing?utm_source=hashnode&utm_medium=feed) The content is encrypted, the path is anonymised, the origin is spoofed: but the connection is still visible 15 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/hiding-network-connections-encryption-onion-routing-and-identity-spoofing?utm_source=hashnode&utm_medium=feed) [Alvin Yang](https://hashnode.com/@Alvin-Yang) · [Sep 22](https://hashnode.com/posts/sql-injection-attacks-risks-and-practical-defense/6ab1e444449d19d58760ac2c) ### [SQL Injection: Attacks, Risks, and Practical Defense](https://alvinyang.hashnode.dev/sql-injection-attacks-risks-and-practical-defense?utm_source=hashnode&utm_medium=feed) Explore SQL injection attacks, their risks to web applications, and practical ways to detect, prevent, and mitigate SQLi vulnerabilities. 7 min read · [alvinyang.hashnode.dev](https://alvinyang.hashnode.dev/sql-injection-attacks-risks-and-practical-defense?utm_source=hashnode&utm_medium=feed) [rathsara](https://hashnode.com/@rathsara) · [Sep 21](https://hashnode.com/posts/network-data-hiding-covert-channels-and-traffic-manipulation/6ab1388b156512979e6ce8cc) ### [Network Data Hiding: Covert Channels and Traffic Manipulation](https://rr-cyber.hashnode.dev/network-data-hiding-covert-channels-and-traffic-manipulation?utm_source=hashnode&utm_medium=feed) From IP headers to DNS queries: how covert channels work and how their traffic patterns give them away 17 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/network-data-hiding-covert-channels-and-traffic-manipulation?utm_source=hashnode&utm_medium=feed) [rathsara](https://hashnode.com/@rathsara) · [Sep 18](https://hashnode.com/posts/windows-where-data-hides-and-how-it-s-found/6aacff122422f9edf7f68ba3) ### [Windows: Where Data Hides and How It's Found](https://rr-cyber.hashnode.dev/windows-where-data-hides-and-how-it-s-found?utm_source=hashnode&utm_medium=feed) A file reports 25 bytes. A different command reveals 19MB attached to it. Where NTFS actually hides data, and the exact commands that find it. 15 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/windows-where-data-hides-and-how-it-s-found?utm_source=hashnode&utm_medium=feed) [rathsara](https://hashnode.com/@rathsara) · [Sep 3](https://hashnode.com/posts/windows-memory-forensics-finding-a-live-infection-with-volatility/6a99844241215cf6805a0d0a) ### [Windows Memory Forensics: Finding a Live Infection with Volatility](https://rr-cyber.hashnode.dev/windows-memory-forensics-finding-a-live-infection-with-volatility?utm_source=hashnode&utm_medium=feed) Tracing a live Windows infection through volatile memory, from a suspicious process to injected code, persistence, and attacker intent. 11 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/windows-memory-forensics-finding-a-live-infection-with-volatility?utm_source=hashnode&utm_medium=feed)