INQUISITIVE CYBERSECURITY

Breach analysis, cybersecurity research, and practical defense.

ShinyHunters Under Pressure: Who They Are, Who Has Been Arrested, and What Comes Next

An updated look at ShinyHunters, confirmed and reported arrests, the FBI’s own announcement, and the lessons for defenders. Includes APA references and an original cover illustration.

3 hours ago6 min read

When One Developer's Trust Became a National Security Event: The Axios npm Hack of 2026

An analysis of the Axios npm supply-chain attack and how trust became an entry point. What happened, why it matters, and what defenders can learn.

Apr 29 min read

How Hackers Fooled Google With a Simple Phone Call

A closer look at voice phishing, Salesforce connected-app permissions, and the security lessons from Google’s corporate CRM incident.

Aug 28, 20254 min read

Understanding and Defending Against CVE-2024-38063: A Critical IPv6 Vulnerability in Windows

Introduction CVE-2024-38063, a critical vulnerability in the Windows TCP/IP stack, has garnered significant attention in the...

Sep 25, 20244 min read

The Rise and Fall of the 911 S5 Botnet: A Case Study in Cybercrime

The recent dismantling of the 911 S5 botnet marks a significant victory in the ongoing battle against cybercrime. Operated by 36-year-old...

Jun 2, 20243 min read

The Psychology of Social Engineering: Why It Works and How to Protect Yourself

Social engineering is a term that has gained significant traction in the cybersecurity world. It refers to the psychological manipulation...

May 23, 20246 min read

About Me

I'm Chris Coulombe, a cybersecurity professional focused on penetration testing and cloud security. I hold a master's degree from the University of Maine at Augusta, where my thesis used honeypots to compare attack patterns across cloud platforms.

I hold the CompTIA PenTest+ certification and maintain a home lab for hands-on security research. On this blog, I examine breaches, offensive techniques, and the practical lessons defenders can take from them.