In August 2022, an attacker compromised a software engineer's laptop and stole internal documentation from LastPass, the password manager. That documentation pointed to a senior DevOps engineer whose home computer, running an outdated copy of Plex Media Server, let the attacker plant a keylogger and capture the engineer's master password. Because LastPass allowed personal and corporate vaults to share one password, that single capture opened the keys to the encrypted vault backups of more than thirty-three million customers. LastPass has since agreed to settle US claims for about twenty-four and a half million dollars, a settlement pending final approval and not an admission of liability, and the UK's Information Commissioner's Office fined the company over 1.2 million pounds.

Just after three in the morning on February 24, 2022, tens of thousands of satellite modems across Europe stopped working. About an hour later, Russia's ground invasion of Ukraine began. The network was KA-SAT, operated by the American company Viasat. According to Viasat's incident report, the way in was a misconfigured VPN appliance; from there the attackers used the network's own management channel to push a wiper called AcidRain that erased each modem's firmware. The damage crossed borders, reaching 5,800 German wind turbines that lost their monitoring link. The UK, the US, and the EU later attributed the attack to Russia. From Zero Day Logs.

In February 2015, Anthem, then the second-largest US health insurer, disclosed that attackers had reached the permanent records of 78.8 million people. The intrusion had run 343 days, starting with one spear-phishing email at a subsidiary and ending at the enterprise data warehouse, and no automated system ever flagged it. The logins were real, the traffic was internal, and the data left through a file-sharing service the company already used. What finally caught it was a database administrator who noticed a query running under his own name that he had not run. Regulators later found that the safeguards which would have stopped it had been mandatory in healthcare for over a decade. From Zero Day Logs.