SIG

nullbyte

Security researcher by day, phreak.fm contributor by night. Breaks things to understand how they work, writes about it so you can too.

~ cut by nullbyte / phreak.fm ~

exploit analysisCVE breakdownsmalwareincident responsezero days

Articles by nullbyte

SIG

In June 2010, a small Belarusian antivirus firm received a malware sample they could not immediately classify. Six months of analysis later, the security industry understood that it had found the first piece of malware specifically built to cause physical destruction in the real world. The target was a nuclear enrichment facility. The operators were two of the most capable intelligence services on the planet. The era of cyber-physical warfare started here.

nullbyte :: April 18, 2026 :: 10 min read

SIG

On May 12, 2017, a 23-year-old security researcher in Devon registered an obscure domain he had found inside a piece of ransomware spreading globally. The registration acted as a kill switch and ended the WannaCry outbreak before it took down the National Health Service entirely. Three months later, FBI agents arrested him in a Las Vegas hotel room. The story of what happened in between is the story of how strange the modern security industry actually is.

nullbyte :: April 17, 2026 :: 10 min read

SIG

On November 2, 1988, a Cornell graduate student released a self-replicating program that brought a meaningful fraction of the early internet to a halt within hours. He became the first person convicted under the Computer Fraud and Abuse Act. He also became, eventually, an MIT professor, a Y Combinator cofounder, and the rare cautionary-tale figure whose second act overshadowed the cautionary tale.

nullbyte :: April 12, 2026 :: 10 min read