Security history, retold with hindsight
2026
The runway to the relaunch · 7 of 7 restored ✓Supply Chains, All the Way Down
An AI toolchain compromised, a consultancy's keys claimed, water and telecoms disrupted — and a terabyte with a bank's name on it.
Steal First, Encrypt Never
Extortion outgrows ransomware: a PeopleSoft zero-day campaign, security vendors robbed via OAuth — and India's industrial crown jewels on leak sites.
The Classroom Breach
The Canvas mega-breach touches 275 million learners, Foxconn leaks Big Tech's schematics, and hackers reach the fuel tanks.
The Watchers, Watched
The FBI's surveillance systems breached, a $293M crypto heist, two banks felled by one vendor — and a breach that began in a back office.
They Came for the Systems
Wipers erase a medtech giant's screens in real time, Brussels comes under attack, and ransomware logs its busiest month.
Four Carriers, One Ghost
UNC3886 revealed inside all four of Singapore's major telcos — and the company that guards the world's archives gets robbed.
Thirty Points of Failure
A coordinated strike on Poland's grid opens the year; Target loses 860 GB of source code; databases spill with no attacker at all.
2025
5 of 12 editions restoredThe Reckoning Month
Coupang's 33 million, ransomware in the NHS supply chain, a 29.7 Tbps encore — and the year's bill, itemised.
The Attacker Becomes an Algorithm
The first reported AI-run espionage campaign, the config file that silenced the web, and India's DPDP rulebook.
The Funeral of Windows 10
An operating system retires with half the world aboard, F5's stolen blueprints, and a 15.72 Tbps record.
The Month the Factories Stopped
Jaguar Land Rover goes dark for weeks, a Collins Aerospace attack strands travellers across Europe, and the Shai-Hulud worm loots npm.
The Keys to Everyone's Kingdom
One chatbot's stolen OAuth tokens drain 700+ Salesforce customers — the month that wrote the whole year's playbook.
ToolShell: SharePoint's Summer of Pain
A zero-day rampage through on-prem SharePoint reaches governments, and aviation meets Scattered Spider.
In restorationSixteen Billion Passwords
The mega-compilation that scared the internet, and hacktivists burn a bank in Tehran.
In restorationRetail Under Siege
Co-op and Harrods join M&S in the trenches, and Coinbase's insider problem goes public.
In restorationThe Month M&S Went Dark
Scattered Spider empties British shelves, and the CVE program survives a near-death experience.
In restorationSignalgate
A war plan in a group chat, a DDoS against X, and the month opsec became dinner-table conversation.
In restorationThe $1.5 Billion Heist
Lazarus empties Bybit in the largest financial theft in history — crypto or otherwise.
In restorationDPDP's Draft Dawn
India opens the year with its data-rules draft, and the education sector learns about PowerSchool.
In restorationPreviews from deeper in the archive
The restoration schedule
The Vault grows backward in batches: first the 2026 runway months and all of 2025, then history returns two years at a time until the archive spans twenty-one years of digital defense.
The Sentry Briefing
New Vault editions and this week's news — once a week, in your inbox.