Timeline
Explicitly dated milestones drawn from sourced entries across the archive, oldest first. Only dates stated in an entry's own sources appear here — nothing is estimated or invented.
- 1943-02-04Born in New Orleans, Louisiana. — Ken Thompson
- 1943-03-11Born John Thomas Draper. — John Draper
- 1944-06-05Whitfield Diffie born in Washington, D.C. — Whitfield Diffie and Martin Hellman
- 1945-10-02Martin Hellman born in New York City. — Whitfield Diffie and Martin Hellman
- 1945-12-31Leonard Adleman is born in San Francisco, California. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 1947-05-06Ron Rivest is born in Schenectady, New York. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 1950-08-11Born in San Jose, California. — Steve Wozniak
- 1952-07-06Adi Shamir is born in Tel Aviv, Israel. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 1954Born in Camden, New Jersey. — Philip Zimmermann
- 1956-09-15Born in Glasgow, Scotland. — Ross Anderson
- 1959Term 'hack' documented in MIT student groups' vocabulary, including TMRC. — The Hacker Ethic: MIT's Tech Model Railroad Club
- 1959-12-16Born in Suffolk County, New York. — Eric Corley
- 1962-11-05Born in New York City. — Marcus Ranum
- 1963-01-15Born in New York City. — Bruce Schneier
- 1963-08-06Born in Los Angeles, California. — Kevin Mitnick: A Complete History
- 1964-10-23Born in Nagoya, Japan. — Tsutomu Shimomura
- 1965Diffie earns B.S. in mathematics from MIT. — Whitfield Diffie and Martin Hellman
- 1965-11-08Born in the United States, son of Bell Labs/NSA computer scientist Robert Morris. — Robert Tappan Morris
- 1965-11-30Born in Pasadena, California. — Kevin Poulsen
- 1965-12-01Born in New Haven, Connecticut. — Chris Wysopal
- 1966Earns MS in Electrical Engineering and Computer Sciences from UC Berkeley; joins Bell Labs. — Ken Thompson
- 1968Graduates from Homestead High School in Cupertino, California. — Steve Wozniak
- 1969Introduced to phone phreaking by fellow pirate-radio enthusiast Denny Teresi. — John Draper
- 1969Hellman earns Ph.D. in electrical engineering from Stanford University. — Whitfield Diffie and Martin Hellman
- 1969Begins developing the Unix operating system with Dennis Ritchie at Bell Labs, initially on a PDP-7. — Ken Thompson
- 1969-06-25Born in Glen Ridge, New Jersey. — Jennifer Granick
- 1969-10-13Born in Finland. — Mikko Hyppönen
- 1969-12-28Born in Helsinki, Finland. — Linus Torvalds
- 1970-12-01Born in Alabama. — Peiter "Mudge" Zatko
- 1971Featured in Ron Rosenbaum's Esquire article 'Secrets of the Little Blue Box'; Steve Wozniak seeks Draper out to discuss blue-box design. — John Draper
- 1971Hellman joins Stanford University's faculty. — Whitfield Diffie and Martin Hellman
- 1971Meets Steve Jobs through mutual friend Bill Fernandez while attending UC Berkeley. — Steve Wozniak
- 1971Wozniak and Jobs meet phreaker John Draper ("Captain Crunch") to compare blue-box building techniques; Wozniak and Jobs go on to build and sell an estimated 200 blue boxes at about $150 each, with Wozniak known in phreaking circles as "Berkeley Blue." — Steve Wozniak
- 1971-07-03Born in Townsville, Queensland, Australia. — Julian Assange
- 1971-10Ron Rosenbaum's Esquire article "Secrets of the Little Blue Box" is published, inspiring Wozniak to build a blue box. — Steve Wozniak
- 1971-12-06Born in Perleberg, Germany. — Frank Rieger
- 1972Born in October 1972 (per UK Companies House officer records); exact date and place not publicly confirmed. — Dafydd Stuttard
- 1972-05Arrested on seven counts of fraud by wire for illegal long-distance calls. — John Draper
- 1973Unix is rewritten in the C programming language and announced outside Bell Labs, becoming portable across hardware. — Ken Thompson
- 1975Diffie begins working as a researcher in Hellman's Stanford lab; the two, along with Ralph Merkle, publicly criticize the proposed DES 56-bit key length. — Whitfield Diffie and Martin Hellman
- 1975Joins the Homebrew Computer Club in the Palo Alto area. — Steve Wozniak
- 1975-01-01Born in California. — Jeff Moss
- 1976Born. — Dave Aitel
- 1976Serves roughly four months in federal prison at Lompoc, California, following renewed toll-fraud charges. — John Draper
- 1976Born in Sydney, New South Wales, Australia (per publicly available biographical sources). — Silvio Cesare
- 1976-03-01Completes the design of the Apple I. — Steve Wozniak
- 1976-04-01Co-founds Apple Computer with Steve Jobs and Ronald Wayne. — Steve Wozniak
- 1976-11Diffie and Hellman publish "New Directions in Cryptography" in IEEE Transactions on Information Theory, introducing public-key cryptography and the Diffie-Hellman key exchange. — Whitfield Diffie and Martin Hellman
- 1977Alexander Peslyak is born. — Solar Designer
- 1977Rivest, Shamir, and Adleman devise the RSA public-key cryptosystem at MIT. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 1977John Draper works briefly for Apple as a contractor building the "Charley Board"; the project is later canceled by Apple management. — Steve Wozniak
- 1977-04The Apple II, designed primarily by Wozniak, is introduced. — Steve Wozniak
- 1977-08The RSA scheme is publicized in Martin Gardner's 'Mathematical Games' column in Scientific American. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 1977-11-22Born in Auckland, New Zealand. — Barnaby Jack
- 1977-12Patent application for the RSA algorithm is filed. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 1978Receives B.S. in computer science from Florida Atlantic University. — Philip Zimmermann
- 1978-02'A Method for Obtaining Digital Signatures and Public-Key Cryptosystems' is published in Communications of the ACM. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 1979Born in Los Angeles County, California. — Alex Stamos
- 1979Writes EasyWriter, an early word processor for the Apple II, during a work-furlough jail sentence. — John Draper
- 1979-02-07Born in San Francisco, California. — Dan Kaminsky
- 1980-11-28Born in Aliso Viejo, California. — Marc Maiffret
- 1981EasyWriter is ported to the IBM PC and selected as one of its original word-processing applications. — John Draper
- 1981CCC founded in Berlin. — The Chaos Computer Club (CCC)
- 1981Diffie and Hellman jointly receive the IEEE Donald G. Fink Prize Paper Award. — Whitfield Diffie and Martin Hellman
- 1981-01-19Born in Poland. — Michal Zalewski
- 1981-02-07Survives a private plane crash, suffering injuries and temporary anterograde amnesia. — Steve Wozniak
- 1981-08-11Born in Germany. — Karsten Nohl
- 1981-09-12The Chaos Computer Club is founded in West Berlin (context for the magazine's later founding; see the CCC entry). — Die Datenschleuder
- 1982Rivest, Shamir, and Adleman co-found RSA Data Security. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 1982-06-02Born in Ford City, Pennsylvania. — Chris Valasek
- 1983Announces the GNU Project. — Richard Stallman, the GNU Project, and Free Software
- 1983Receives the ACM A.M. Turing Award jointly with Dennis Ritchie for the development of Unix. — Ken Thompson
- 1983-06-21Born in Elizabeth City, North Carolina. — Edward Snowden
- 1983-09-20U.S. Patent 4,405,829 for the RSA algorithm is granted. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 1984The 'BTX-Hack' publicly demonstrates a flaw in Germany's Bildschirmtext system. — The Chaos Computer Club (CCC)
- 1984cDc founded in Lubbock, Texas. — The Cult of the Dead Cow (cDc) and Hacktivism
- 1984Legion of Doom founded by Lex Luthor. — Legion of Doom (LOD): The Masters of the Digital Universe
- 1984Steven Levy publishes 'Hackers: Heroes of the Computer Revolution', codifying the Hacker Ethic. — The Hacker Ethic: MIT's Tech Model Railroad Club
- 19842600: The Hacker Quarterly founded by Eric Corley ('Emmanuel Goldstein'). — 2600: The Hacker Quarterly
- 1984Die Datenschleuder begins publication as the CCC's official print magazine, the same year the CCC carried out its widely publicized Bildschirmtext (BTX) security demonstration. — Die Datenschleuder
- 1984Delivers Turing Award lecture "Reflections on Trusting Trust," published in Communications of the ACM, describing a self-propagating compiler backdoor. — Ken Thompson
- 1984-01Co-founds 2600: The Hacker Quarterly, taking the pen name Emmanuel Goldstein. — Eric Corley
- 1985Leaves day-to-day work at Apple; receives the National Medal of Technology alongside Steve Jobs. — Steve Wozniak
- 1985-11-17First issue of Phrack released. — Phrack Magazine: The Hacker's Ezine
- 1985-12-10Samy Kamkar is born. — Samy Kamkar
- 1986Begins investigating a 75-cent accounting discrepancy at Lawrence Berkeley National Laboratory. — Clifford Stoll and 'The Cuckoo's Egg'
- 1986Published in Phrack under the handle 'The Mentor'. — The Hacker Manifesto: 'The Conscience of a Hacker'
- 1988Convicted for the DEC intrusion: 12 months prison, 3 years supervised release. — Kevin Mitnick: A Complete History
- 1988As a Cornell graduate student, releases a self-replicating program (the Morris Worm) from MIT; a bug causes it to spread uncontrollably. — Robert Tappan Morris
- 1988-10-07Hosts the first broadcast of 'Off The Hook' on WBAI 99.5 FM. — Eric Corley
- 1988-11-02Morris Worm released, infects an estimated 10% of the ~60,000 hosts then on the internet. — The Morris Worm: The Internet's First Wake-Up Call
- 1989Publishes 'The Cuckoo's Egg'. — Clifford Stoll and 'The Cuckoo's Egg'
- 1989Joined UC San Diego's physics department and became a senior fellow at the San Diego Supercomputer Center. — Tsutomu Shimomura
- 1990Helped design the DEC Secure External Access Link (SEAL), cited as the first commercial bastion-host firewall. — Marcus Ranum
- 1990Receives the IEEE Richard W. Hamming Medal. — Ken Thompson
- 1990-06-01Takes over KIIS-FM's phone lines to win a Porsche 944 S2. — Kevin Poulsen
- 1990-12Sentenced to three years probation, 400 hours community service, and a $10,050 fine as the first person convicted under the Computer Fraud and Abuse Act. — Robert Tappan Morris
- 1990sFounded Phenoelit, a Berlin-based hacking and security research group. — Felix "FX" Lindner
- 1991Joins Data Fellows (later F-Secure) as a security researcher. — Mikko Hyppönen
- 1991Philip Zimmermann releases PGP (Pretty Good Privacy) version 1.0, later closely associated with the Cypherpunk community. — Cypherpunks
- 1991Writes and releases Pretty Good Privacy (PGP) encryption software via public FTP and Usenet. — Philip Zimmermann
- 1991-04Arrested by the FBI after a period as a fugitive. — Kevin Poulsen
- 1991-05-21IDA is first released as a shareware disassembler. — IDA Pro
- 1991-08-25Posted the original Usenet announcement of the Linux project to comp.os.minix. — Linus Torvalds
- 1991-09-17Released the first public version of the Linux kernel, version 0.01. — Linus Torvalds
- 1991-10Australian Federal Police raid his home after tracing a network intrusion. — Julian Assange
- 1992Testified before the U.S. Congress on cellular telephone security and privacy vulnerabilities. — Tsutomu Shimomura
- 1992Eric Hughes, Timothy C. May, and John Gilmore found the Cypherpunks, beginning with monthly meetings at Gilmore's company Cygnus Solutions in the San Francisco Bay Area; Jude Milhon coins the name "cypherpunks." — Cypherpunks
- 1992Key MOD members arrested in a federal crackdown. — Masters of Deception: The New York Hacker Wars
- 1992Co-develops the UTF-8 character encoding with Rob Pike. — Ken Thompson
- 1993Designed the Blowfish symmetric-key block cipher as a free, unpatented alternative to DES. — Bruce Schneier
- 1993Founded DEF CON hacker convention in Las Vegas. — Jeff Moss
- 1993Graduated from Hastings College of Law in San Francisco. — Jennifer Granick
- 1993Wikipedia lists 1993 as the start of his active security research career; period associated with his membership in the w00w00 security group. — Silvio Cesare
- 1993Julian Assange reported to have joined the Cypherpunks mailing list around this time (sources vary between late 1993 and early 1994). — Cypherpunks
- 1993First DEF CON held in Las Vegas, organized by Jeff Moss ('The Dark Tangent'). — DEF CON: The World's Most Famous Hacker Con
- 1993Becomes the formal target of a US Customs Service criminal investigation for alleged munitions export violations under the Arms Export Control Act. — Philip Zimmermann
- 1993-03-09Eric Hughes publishes "A Cypherpunk's Manifesto." — Cypherpunks
- 1993-10Released the TIS Internet Firewall Toolkit (FWTK). — Marcus Ranum
- 1993-11-05Scott Chasin creates Bugtraq in response to perceived failings of existing vulnerability-handling infrastructure, particularly CERT/CC. — Bugtraq
- 1994Published Applied Cryptography, which became a standard reference text in the field. — Bruce Schneier
- 1994Adopts the handle "Solar Designer" to register on private BBSes. — Solar Designer
- 1994Mailing list subscribership reaches approximately 700; Timothy May compiles "The Cyphernomicon," a lengthy FAQ incorporating his earlier Crypto Anarchist Manifesto. — Cypherpunks
- 1994Phone Losers of America founded by Brad Carter (RBCP) and a collaborator known as Zak (el_jefe); PLA begins publishing a phreaking/hacking zine. — Phone Losers of America
- 1994Adleman demonstrates DNA computing, solving a computational problem using DNA molecules. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 1994-03-14Released Linux kernel version 1.0. — Linus Torvalds
- 1994-06Pleads guilty to seven counts of conspiracy, fraud, and wiretapping. — Kevin Poulsen
- 1994-08-13Organizes the first HOPE conference in Manhattan. — Eric Corley
- 1994-12-25An intruder (later identified as Kevin Mitnick) launched an IP-spoofing attack against Shimomura's home computer systems. — Tsutomu Shimomura
- 1994-1997PLA publishes 46 issues of its zine; Carter also runs the Whombat Communications BBS to distribute issues. — Phone Losers of America
- 1995Krebs joins The Washington Post. — Brian Krebs
- 1995Publishes "How to Write Buffer Overflows," an early technical paper on buffer-overflow exploitation. — Peiter "Mudge" Zatko
- 1995Co-founds Viaweb with Paul Graham. — Robert Tappan Morris
- 1995Awarded PhD at Cambridge; becomes University Lecturer at the Cambridge Computer Laboratory. — Ross Anderson
- 1995Adam Back writes a three-line Perl implementation of RSA encryption and distributes it as a protest against U.S. cryptography export controls. — Cypherpunks
- 1995Zak and a member known as Apok0lyps start a business in Granite City, Illinois, later associated with the founding of the ISP spiff.net (per a 1997 OECD document cited by PLA's own history page). — Phone Losers of America
- 1995List moves to Brown University's NetSpace Project. — Bugtraq
- 1995MIT Press publishes 'PGP Source Code and Internals' as a printed book to route around export restrictions; Zimmermann receives the EFF Pioneer Award and Chrysler Design Award. — Philip Zimmermann
- 1995-01-23CERT/CC issued Advisory CA-1995-01 on IP spoofing, around the same time as New York Times coverage of the break-in. — Tsutomu Shimomura
- 1995-02-15Arrested by the FBI in Raleigh, North Carolina. — Kevin Mitnick: A Complete History
- 1995-02-15FBI agents arrested Kevin Mitnick in Raleigh, North Carolina, with Shimomura having assisted in tracking him. — Tsutomu Shimomura
- 1996Becomes moderator of the Bugtraq mailing list. — Elias Levy
- 1996Began private practice specializing in the defense of computer-crime cases. — Jennifer Granick
- 1996Releases John the Ripper, a password-cracking tool for Unix systems. — Solar Designer
- 1996cDc coins the term 'hacktivism'. — The Cult of the Dead Cow (cDc) and Hacktivism
- 1996President Bill Clinton signs Executive Order 13026, moving commercial encryption from the U.S. Munitions List to the Commerce Control List, easing export restrictions; the NSA's Clipper chip key-escrow initiative is effectively abandoned. — Cypherpunks
- 1996Belgian company DataRescue takes over development and commercializes the tool as IDA Pro. — IDA Pro
- 1996First released by Solar Designer (Alexander Peslyak). — John the Ripper: The Timeless Password Cracker
- 1996Hellman retires from Stanford as professor emeritus after 25 years. — Whitfield Diffie and Martin Hellman
- 1996US government drops the criminal investigation without filing charges; Zimmermann founds PGP Inc. and receives the Norbert Wiener Award and Thomas S. Szasz Award. — Philip Zimmermann
- 1996-01Shimomura and John Markoff published 'Takedown.' — Tsutomu Shimomura
- 1996-06-14Elias Levy (Aleph One) becomes moderator of Bugtraq. — Bugtraq
- 1996-07Security Dynamics acquires RSA Data Security, later renaming the combined company RSA Security. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 1996-11-08Under the handle 'Aleph One,' Levy publishes 'Smashing The Stack For Fun And Profit' in Phrack, issue 49. — Elias Levy
- 1996-12Pleads guilty to 24 hacking-related charges in Australia; fined and given a good-behaviour bond. — Julian Assange
- 1996-1999John Gilmore documents mailing-list traffic averaging around 30 messages per day (December 1996 through March 1999). — Cypherpunks
- 1997Described in his 2004 DEF CON speaker bio as a senior DEF CON staff member since this year. — Adam Laurie
- 1997Publishes early return-into-libc buffer overflow exploits and a Linux kernel non-executable-memory hardening patch. — Solar Designer
- 1997Mailing list subscribership peaks at roughly 2,000; Jim Choate and Igor Chudov establish the Cypherpunks Distributed Remailer to decentralize list infrastructure. — Cypherpunks
- 1997Nmap source code first published in Phrack Magazine, issue 51. — Nmap: The Network Mapper
- 1997Network Associates acquires PGP Inc. for approximately $10 million. — Philip Zimmermann
- 1997-07Founded the Black Hat Briefings security conference. — Jeff Moss
- 1997-09-01Publishes 'The Art of Port Scanning' in Phrack Magazine, releasing Nmap's source code under the GPL. — Gordon Lyon
- 1998Co-designed the Twofish block cipher, selected as one of five finalists in NIST's AES competition. — Bruce Schneier
- 1998Began publishing the Crypto-Gram newsletter. — Bruce Schneier
- 1998Co-founds eEye Digital Security with Firas Bushnaq as a teenager. — Marc Maiffret
- 1998While a lycée (secondary school) student in France, creates Nessus as a hobby open-source vulnerability scanner; reports that he was 17 at the time are widely repeated but not independently verified. — Renaud Deraison
- 1998Yahoo! acquires Viaweb for about $49 million; relaunched as Yahoo! Store. — Robert Tappan Morris
- 1998Founds the Foundation for Information Policy Research (FIPR). — Ross Anderson
- 1998Back Orifice released at DEF CON 6. — The Cult of the Dead Cow (cDc) and Hacktivism
- 1998Renaud Deraison launches "The Nessus Project," a free, open-source (GPL) remote network vulnerability scanner. — Nessus
- 1998Martin Roesch creates Snort as an open-source packet sniffer and lightweight intrusion detection system. — Snort
- 1998First release, under the name Ethereal. — Wireshark: Sniffing the Wires
- 1998Site launched by Ken Williams as an information security archive of exploits, tools, and advisories. — Packet Storm Security
- 1998Receives the U.S. National Medal of Technology, jointly with Dennis Ritchie. — Ken Thompson
- 1998-05-19Testified before the U.S. Senate as one of seven L0pht members. — Chris Wysopal
- 1998-05-19Testifies with six other L0pht members before the U.S. Senate Committee on Governmental Affairs. — Peiter "Mudge" Zatko
- 1998-05-19Seven L0pht members testify before the U.S. Senate Committee on Governmental Affairs. — L0pht Heavy Industries: Advising the Senate
- 1998-12-25Phrack issue 54, article 8, "NT Web Technology Vulnerabilities," published under the byline rain.forest.puppy; contains one of the earliest detailed public descriptions of SQL injection. — Rain Forest Puppy
- 1999Co-founded Counterpane Internet Security. — Bruce Schneier
- 1999Co-founds SecurityFocus and becomes its CTO; Bugtraq moves to SecurityFocus. — Elias Levy
- 1999Becomes a founding member of the Honeynet Project. — Gordon Lyon
- 1999Released from federal prison. — Kevin Poulsen
- 1999Formulated 'Ranum's Law.' — Marcus Ranum
- 1999Earns a PhD from Harvard University. — Robert Tappan Morris
- 1999Founds and leads the Openwall Project. — Solar Designer
- 1999Source code comments suggest Ghidra's origins date to this period, as an internal NSA reverse engineering tool. — Ghidra
- 1999IDA Pro 4.0 ships with the software's first graphical user interface. — IDA Pro
- 1999Hosted at Harvard University; shut down there in summer 1999 after a complaint from Antionline's John "JP" Vranesevich. — Packet Storm Security
- 1999Site hosted by security company Securify, an arrangement that did not become profitable and was later discontinued (per The Register). — Packet Storm Security
- 1999-07Bugtraq becomes the property of SecurityFocus. — Bugtraq
- 1999-08-17The New York Times publishes "Security Firm To Revive Computer-Defense Site" by Peter Wayner, describing a security firm's involvement in reviving the site; Wikipedia describes this period as Ken Williams selling the site to Kroll O'Gara. — Packet Storm Security
- 1999-09-09Phrack issue 55, article 7, "Perl CGI problems," published, addressing null-termination vulnerabilities in Perl CGI scripts. — Rain Forest Puppy
- 1999-12Joins Yahoo! as Information Security Officer. — Jeremiah Grossman
- 2000Cerberus Information Security, the consultancy Litchfield had founded, was acquired by @stake. — David Litchfield
- 2000Began presenting research on Cisco IOS and embedded-device security at hacker and security conferences. — Felix "FX" Lindner
- 2000Released; re-enters the security industry as a consultant. — Kevin Mitnick: A Complete History
- 2000Began career as a Systems Administrator. — Peter Van Eeckhoutte
- 2000Whisker version 1.4, rfp's web-vulnerability scanner, co-released with the Cult of the Dead Cow (cDc) at DEF CON 8. — Rain Forest Puppy
- 2000The Ezkracho (EKO) hacker team forms in Argentina, reportedly organized by figures using the aliases "ca0s" and "Powertech"; the group produces the Eko Magazine e-zine and organizes informal meetups (per Ekoparty's own current 'About' page; not independently verified). — Ekoparty
- 2000Site reportedly "given back to the security community" (per Wikipedia), unverified in independent detail. — Packet Storm Security
- 2000Diffie and Hellman jointly receive the Marconi Prize. — Whitfield Diffie and Martin Hellman
- 2000Leaves Bell Labs after over three decades there. — Ken Thompson
- 2000-01L0pht merged into the security consultancy @stake. — Chris Wysopal
- 2000-01-05Publishes "Shared Library Call Redirection via ELF PLT Infection" in Phrack issue 56, under the byline "Silvio". — Silvio Cesare
- 2000-06-10Releases p0f, a passive OS/network fingerprinting tool, announced on Bugtraq. — Michal Zalewski
- 2000-06-12RFPolicy, an early formal vulnerability-disclosure framework, announced by rfp on the Bugtraq mailing list. — Rain Forest Puppy
- 2000-09-06RSA Security releases the RSA algorithm into the public domain ahead of patent expiration. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 2001Co-founded Next Generation Security Software (NGSSoftware) with brother Mark Litchfield and reportedly other family members (year approximate, per Wikipedia). — David Litchfield
- 2001Directs the documentary 'Freedom Downtime.' — Eric Corley
- 2001Became Executive Director of Stanford Law School's Center for Internet and Society and founded its Cyberlaw Clinic. — Jennifer Granick
- 2001Leaves Yahoo! and founds WhiteHat Security. — Jeremiah Grossman
- 2001Publishes the first edition of 'Security Engineering' and the paper 'Why Information Security is Hard'. — Ross Anderson
- 2001Roesch founds Sourcefire in Columbia, Maryland, to commercialize Snort. — Snort
- 2001Official Ekoparty materials and the English Wikipedia article state the conference was founded this year by Juan Pablo Daniel Borgna, Leonardo Pigner, Federico Kirschbaum, Jerónimo Basaldúa, and Francisco Müller Amato (disputed — see 2005 entry). — Ekoparty
- 2001-07Discovers and analyzes the Code Red worm with eEye colleague Ryan Permeh. — Marc Maiffret
- 2001-07-16The Register reports Packet Storm has relaunched at a new domain (packetstormsecurity.org) on a not-for-profit, independently run basis. — Packet Storm Security
- 2001-10-15Steps down as Bugtraq moderator after roughly five years. — Elias Levy
- 2001-10-15Elias Levy steps down as Bugtraq moderator. — Bugtraq
- 2001-11-28The Second Circuit Court of Appeals decides Universal City Studios, Inc. v. Corley, upholding the DMCA anti-circumvention provisions. — Eric Corley
- 2002Hacks The New York Times intranet. — Adrian Lamo: The 'Homeless Hacker'
- 2002Founds Immunity, Inc., serving as its CTO. — Dave Aitel
- 2002Presented Cisco IOS exploitation research at Black Hat and DEF CON, alongside Phenoelit's continued CCC talks. — Felix "FX" Lindner
- 2002Joined penetration-testing firm @stake as a security researcher. — Katie Moussouris
- 2002Publishes research on SSL/TLS certificate-chain verification flaws and releases the sslsniff tool. — Moxie Marlinspike
- 2002Co-founds the Workshop on the Economics of Information Security (WEIS). — Ross Anderson
- 2002Recruited from @stake to Microsoft as a senior security strategist. — Window Snyder
- 2002PLA launches an internet-based radio station, PLA Radio. — Phone Losers of America
- 2002ShadowCrew founded as an online carding and identity-fraud forum, evolving from Brett Johnson's earlier CounterfeitLibrary site. — ShadowCrew
- 2002A rival Full-Disclosure mailing list is created, partly by people who felt Bugtraq had changed for the worse after the Symantec sale. — Bugtraq
- 2002Back issues of the magazine become available online at ds.ccc.de. — Die Datenschleuder
- 2002PGP Corporation acquires the PGP product line from Network Associates. — Philip Zimmermann
- 2002Rivest, Shamir, and Adleman receive the ACM A.M. Turing Award. — Ron Rivest, Adi Shamir, and Leonard Adleman
- 2002-02Co-authored the IETF Internet-Draft 'Responsible Vulnerability Disclosure Process.' — Chris Wysopal
- 2002-02-14The zone-h.org domain was registered. — Roberto Preatoni
- 2002-02-19Publicly disclosed a buffer overflow in Microsoft SQL Server 7.0/2000's openrowset and opendatasource functions. — Cesar Cerrudo
- 2002-03-02Zone-H, the website-defacement archive founded by Preatoni, launched. — Roberto Preatoni
- 2002-07Presented proof-of-concept exploit code for a Microsoft SQL Server 2000 buffer-overflow vulnerability at Black Hat Briefings. — David Litchfield
- 2002-07-09Full Disclosure mailing list founded by Len Rose and John Cartwright, hosted on netsys.com, as an alternative to Bugtraq. — Full Disclosure (mailing list)
- 2002-07-28Publishes 'Defeating Forensic Analysis on Unix' in Phrack magazine, an early foundational text on anti-forensics. — the Grugq
- 2002-08rfp among the security-industry figures who launched the Open Source Vulnerability Database (OSVDB) project at Black Hat/DEF CON. — Rain Forest Puppy
- 2002-08-06Symantec acquires SecurityFocus. — Elias Levy
- 2002-08-06Symantec completes its acquisition of SecurityFocus, and with it Bugtraq. — Bugtraq
- 2002-08-06Symantec completes its acquisition of SecurityFocus, the company operating Bugtraq -- the change in Bugtraq ownership and moderation that motivated Full Disclosure's creation. — Full Disclosure (mailing list)
- 2002-08-13Sydney Morning Herald profile describes rfp's Whisker tool and states he "prefers not to have his real name published," documenting deliberate anonymity. — Rain Forest Puppy
- 2002-09-16Co-founds Tenable Network Security with Ron Gula and Jack Huffard, folding the Nessus project into the new company, and relocates to the United States. — Renaud Deraison
- 2002-09-16Tenable Network Security, Inc. is founded by Ron Gula, Jack Huffard, and Renaud Deraison; Nessus is folded into the new company. — Nessus
- 2003Begins building Burp as personal tooling; an early version of Burp Intruder is released in June, followed by Burp Proxy. — Dafydd Stuttard
- 2003Began organizing pH-Neutral, a recurring hacker gathering in Berlin, running through 2011. — Felix "FX" Lindner
- 2003Begins co-hosting the annual 'Fnord' year-in-review talk at the Chaos Communication Congress with Felix von Leitner (continues through 2016). — Frank Rieger
- 2003Founded the Metasploit Project in the summer of 2003 as a public resource for exploit code and vulnerability research. — H. D. Moore
- 2003Becomes Professor of Security Engineering at the University of Cambridge. — Ross Anderson
- 2003Founds Openwall, Inc. and becomes its CTO. — Solar Designer
- 2003Presents 'The Art of Defiling' at Black Hat Asia. — the Grugq
- 2003High-level ShadowCrew member Albert Gonzalez ("cumbajohnny") is arrested in New Jersey and becomes a cooperating U.S. Secret Service informant. — ShadowCrew
- 2003PortSwigger founded by Dafydd Stuttard, who begins developing Burp. — Burp Suite
- 2003H. D. Moore starts the Metasploit Project. — The Metasploit Framework: Democratizing Penetration Testing
- 2003First edition published by No Starch Press. — Hacking: The Art of Exploitation
- 2003Domain uninformed.org is associated with material from the nologin.org research community (per Wayback Machine captures), prior to becoming the journal. — Uninformed
- 2003-01-25SQL Slammer worm spreads globally, based on the buffer-overflow flaw (CVE-2002-0649) Litchfield had disclosed and demonstrated. — David Litchfield
- 2003-06First version of Burp (an early Intruder tool) released. — Burp Suite
- 2003-11Discovers serious flaws in Bluetooth authentication/data-transfer mechanisms on Nokia, Sony Ericsson and Motorola phones via A.L. Digital Ltd., later publicized as "Bluesnarfing". — Adam Laurie
- 2003-12Named, with brother Mark Litchfield, among 'World's Best Bug Hunters' by Information Security magazine. — David Litchfield
- 2004Presents "Bluesnarfing — The Risk From Digital Pickpockets" with Martin Herfurt at DEF CON 12. — Adam Laurie
- 2004Co-founded the security consultancy iSEC Partners. — Alex Stamos
- 2004Launched the blog Schneier on Security. — Bruce Schneier
- 2004Credited as an author on the first edition of Gray Hat Hacking: The Ethical Hacker's Handbook. — Chris Eagle
- 2004Releases Burp Spider, an application-aware web crawler. — Dafydd Stuttard
- 2004Co-authored The Shellcoder's Handbook: Discovering and Exploiting Security Holes (Wiley). — David Litchfield
- 2004Co-published, with Shane Macaulay, early details of the KARMA Wi-Fi client attack. — Dino Dai Zovi
- 2004Co-founds and becomes managing director of GSMK mbH, maker of the CryptoPhone secure communication device. — Frank Rieger
- 2004Founded SABRE Security (later zynamics) and published "Structural Comparison of Executable Objects" at DIMVA, introducing the graph-based approach behind BinDiff. — Halvar Flake
- 2004Co-founds the Web Application Security Consortium (WASC). — Jeremiah Grossman
- 2004Became chief security officer of Tenable, Inc. — Marcus Ranum
- 2004Founds 'News from the Lab,' an early antivirus-industry research blog. — Mikko Hyppönen
- 2004Co-authored the book 'Threat Modeling' with Frank Swiderski; contributed to security work behind Windows XP Service Pack 2. — Window Snyder
- 2004Christophe Devine develops the original Aircrack tool for recovering 802.11 WEP keys (early version numbers/dates from this period are less firmly documented). — Aircrack-ng
- 2004Metasploit Framework 2.0 released, rewritten in Ruby. — The Metasploit Framework: Democratizing Penetration Testing
- 2004-02Joins Immunity, Inc. as an offensive-security researcher. — Nicolas Waisman
- 2004-03Burp Spider v1.0 released, an application-aware crawler. — Burp Suite
- 2004-06VirusTotal, the multi-antivirus scanning service later associated with YARA, is launched by Spanish security company Hispasec Sistemas. — YARA
- 2004-10Moved to Symantec after its acquisition of @stake and founded Symantec's Vulnerability Research program. — Katie Moussouris
- 2004-10U.S. Secret Service-led Operation Firewall, with international law-enforcement partners, culminates in coordinated arrests; 19 individuals are indicted and the ShadowCrew website is shut down. — ShadowCrew
- 2004-11-26Publishes a Windows remote-code-execution advisory via Immunity's Vulnerability Sharing Club, posted to Bugtraq and Full-Disclosure. — Nicolas Waisman
- 2005Presents "Old Skewl Hacking — InfraRed" (Major Malfunction / MMIrDA) at DEF CON 13. — Adam Laurie
- 2005Krebs launches the 'Security Fix' blog on washingtonpost.com. — Brian Krebs
- 2005Presented database security research at Black Hat USA; founded the security firm Argeniss in Argentina. — Cesar Cerrudo
- 2005Used DNS cache snooping to estimate the number of computers infected by the Sony BMG rootkit at several hundred thousand. — Dan Kaminsky
- 2005Co-authored The Database Hacker's Handbook: Defending Database Servers (Wiley). — David Litchfield
- 2005Hired as Director of Security Research at BreakingPoint Systems in Austin, Texas. — H. D. Moore
- 2005Sold Black Hat Briefings to CMP Media for a reported $13.9 million. — Jeff Moss
- 2005Presented on passive RFID security at Black Hat, an early public security research credit predating Lookout. — Kevin Mahaffey
- 2005Co-started the BlueHat security conference at Microsoft with Window Snyder while founding Microsoft's first security researcher outreach program in the Trustworthy Computing group; served as principal investigator in the Zotob worm criminal investigation and analyzed APTs for Microsoft. — Kymberlee Price
- 2005Publishes 'Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks'. — Michal Zalewski
- 2005Co-founds the startup accelerator Y Combinator. — Robert Tappan Morris
- 2005Created Microsoft's BlueHat security conference. — Window Snyder
- 2005HITCON founded; inaugural event "Hacks In Taiwan 2005" (台灣駭客年會) held, establishing an annual, vendor-neutral security research conference in Taiwan. — HITCON (Hacks In Taiwan Conference)
- 2005Ilfak Guilfanov founds Hex-Rays to develop the Hex-Rays Decompiler for IDA. — IDA Pro
- 2005The Spanish Wikipedia article, citing the same organizer source, instead dates Ekoparty's founding to this year; this is also consistent with the conference's 2026 edition being publicly numbered 'Ekoparty 22.' — Ekoparty
- 2005-03uninformed.org is Richard Johnson's personal research page, listing papers and linking to nologin.org and the Metasploit Project. — Uninformed
- 2005-04-03Began writing Git after BitKeeper's free license was withdrawn. — Linus Torvalds
- 2005-05First archived snapshot of the multi-author journal appears, presented as "Volume 1" with 7 articles. — Uninformed
- 2005-06Joins Wired News as senior editor. — Kevin Poulsen
- 2005-08Unifies his tools into a single interface, launching Burp Suite v1.0. — Dafydd Stuttard
- 2005-08Burp Suite v1.0 unifies Proxy, Repeater, Spider, and Intruder into a single interface. — Burp Suite
- 2005-10-04Kamkar releases the 'Samy' cross-site-scripting worm on MySpace; it infects over one million profiles within about 24 hours. — Samy Kamkar
- 2005-10-05Nessus 3 is released, marking the transition from GPL open-source licensing to a proprietary license; Nessus 2.2.11 remains the last GPL version, later forming the basis of the OpenVAS fork. — Nessus
- 2005-12-30Presents "Bluetooth Hacking — The State of the Art" with Marcel Holtmann and Martin Herfurt, and an updated infrared-hacking talk, at 22C3 (Chaos Communication Congress). — Adam Laurie
- 2006RFIDIOt, his open-source Python RFID/NFC library and tools, copyright period begins (per project README/license). — Adam Laurie
- 2006Counterpane Internet Security was acquired by BT (British Telecom). — Bruce Schneier
- 2006Speaks at DEF CON 14 ("Ripples in the Gene Pool"). — Chris Eagle
- 2006Joins the CIA in a technical role. — Edward Snowden
- 2006Founded Recurity Labs GmbH, a Berlin-based security research and consulting company. — Felix "FX" Lindner
- 2006zynamics' graph-based malware classification technology won Germany's Horst Görtz Prize. — Halvar Flake
- 2006Helped craft a DMCA exemption allowing consumers to legally unlock carrier-locked cell phones. — Jennifer Granick
- 2006Starts the annual 'Top 10 Web Hacking Techniques' list. — Jeremiah Grossman
- 2006Presented "Unlocking FileVault" at 23C3 with Jacob Appelbaum, an analysis of Apple's encrypted disk storage, producing the VileFault decryption tool. — Ralf-Philipp Weinmann
- 2006Receives tenure as a professor in MIT's Department of Electrical Engineering and Computer Science. — Robert Tappan Morris
- 2006Joined Mozilla Corporation in a security leadership role. — Window Snyder
- 2006PLA Radio relaunches as a podcast. — Phone Losers of America
- 2006WikiLeaks founded by Julian Assange. — WikiLeaks & Julian Assange: Radical Transparency
- 2006Sergi Alvarez ('pancake') begins the original radare project as a free command-line hexadecimal editor. — radare2
- 2006Petroni, Walters, Fraser, and Arbaugh publish academic research on techniques for digital forensic data extraction from volatile memory, laying groundwork for Volatility. — Volatility Framework
- 2006Renamed Wireshark after a trademark dispute. — Wireshark: Sniffing the Wires
- 2006Joins Google. — Ken Thompson
- 2006Publishes 'Sécurité logicielle et fonctionnalités matérielles: quelle cohérence?' in MISC magazine, issue 26, with Etiemble and Grumelard. — Loïc Duflot
- 2006-02Thomas d'Otreppe de Bouvette forks Aircrack, releasing it as Aircrack Next Generation (Aircrack-ng). — Aircrack-ng
- 2006-02-23David Mirza Ahmad steps down as Bugtraq moderator; Symantec staff moderate afterward. — Bugtraq
- 2006-03Co-founded Veracode with Christien Rioux ('Dildog'). — Chris Wysopal
- 2006-03Presents 'Security Issues Related to Pentium System Management Mode' at CanSecWest (Core06), with Daniel Etiemble and Olivier Grumelard, demonstrating SMM-based privilege escalation on OpenBSD and NetBSD. — Loïc Duflot
- 2006-05-26BackTrack Linux, formed by merging the WHAX and Auditor Security Collection distributions, ships its first stable release on a Slackware base. — Kali Linux
- 2006-06-01Presents the French-language version of the SMM research at SSTIC 2006, co-authored with Daniel Etiemble and Olivier Grumelard. — Loïc Duflot
- 2006-07Ran the "Month of Browser Bugs," publishing a new browser vulnerability every day for the month of July. — H. D. Moore
- 2006-07Began co-authoring the 'Face Off' debate column with Bruce Schneier. — Marcus Ranum
- 2006-07-25Daniele Bellucci registers the sqlmap project on SourceForge and implements its initial skeleton with limited MySQL support. — sqlmap
- 2006-08Version 0.1 released; initial PostgreSQL support added. — sqlmap
- 2006-08-03Presented the "Blue Pill" hardware-virtualization rootkit concept and a Windows Vista kernel-protection bypass at Black Hat Briefings in Las Vegas. — Joanna Rutkowska
- 2006-09Daniele Bellucci leaves the project; Bernardo Damele A. G. takes over as lead developer. — sqlmap
- 2006-09Volume 5 published, including skape's "Preventing the Exploitation of SEH Overwrites." — Uninformed
- 2006-10-04Co-founds and becomes public face of WikiLeaks. — Julian Assange
- 2006-12-13Version 0.2 released with enhanced DBMS fingerprinting and a new bisection inference algorithm. — sqlmap
- 2007Starts development of w3af (Web Application Attack and Audit Framework), an open-source web application security scanner. — Andres Riancho
- 2007Co-authors the first edition of The Web Application Hacker's Handbook with Marcus Pinto (Wiley). — Dafydd Stuttard
- 2007Authored The Oracle Hacker's Handbook: Hacking and Defending Oracle (Wiley); NGSSoftware received the Queen's Award for Enterprise. — David Litchfield
- 2007Co-founded the Pwnie Awards with Alexander Sotirov. — Dino Dai Zovi
- 2007First to carrier-unlock the original iPhone. — George 'geohot' Hotz: The iPhone Jailbreaker
- 2007Became Civil Liberties Director at the Electronic Frontier Foundation, serving through 2010. — Jennifer Granick
- 2007Co-authors 'Cross Site Scripting Attacks: XSS Exploits and Defense.' — Jeremiah Grossman
- 2007Joined Microsoft as a security strategist, later founding the Microsoft Vulnerability Research (MSVR) program. — Katie Moussouris
- 2007Joins Google, eventually leading its product/information security engineering team. — Michal Zalewski
- 2007Started the corelan.be website, initially covering networking/sysadmin topics. — Peter Van Eeckhoutte
- 2007Dafydd Stuttard co-authors The Web Application Hacker's Handbook. — Burp Suite
- 2007sqlmap is accepted into the OWASP Spring of Code 2007 program. — sqlmap
- 2007Aaron Walters and Nick Petroni present "Volatools: Integrating Volatile Memory into the Digital Investigation Process" at Black Hat DC; the Volatility Framework is first released publicly, per the Volatility Foundation. — Volatility Framework
- 2007Reported third edition of the conference moves to Hotel Bauen in Buenos Aires, adopting a more professional multi-track conference format (per organizer's current website; unverified independently). — Ekoparty
- 2007Co-designs the Go programming language with Rob Pike and Robert Griesemer at Google. — Ken Thompson
- 2007Presents 'Programmed I/O accesses: a threat to Virtual Machine Monitors?' at PacSec, with Laurent Absil, on bypassing Intel VT-x isolation via AGP and USB chipset features. — Loïc Duflot
- 2007-01-20Version 0.3 released, adding Microsoft SQL Server support, UNION query exploitation, and POST-parameter injection testing. — sqlmap
- 2007-01-31Kamkar pleads guilty to a felony computer-crime charge over the Samy worm. — Samy Kamkar
- 2007-03Sourcefire completes its initial public offering, raising $86.3 million. — Snort
- 2007-04Found and exploited a zero-day QuickTime-in-Safari vulnerability at the first CanSecWest Pwn2Own contest. — Dino Dai Zovi
- 2007-04Founded Invisible Things Lab (ITL) in Warsaw, Poland, focused on OS and VMM security research. — Joanna Rutkowska
- 2007-05Volume 7 published, including skape's "Reducing the Effective Entropy of GS Cookies." — Uninformed
- 2007-06-15Version 0.4 released as the first OWASP Spring of Code 2007 milestone. — sqlmap
- 2007-07Preatoni co-founded WabiSabiLabi (WSLabi), an online auction marketplace for security vulnerabilities. — Roberto Preatoni
- 2007-08Sourcefire acquires the ClamAV open-source antivirus project. — Snort
- 2007-08-02Presented the first publicly disclosed remote exploit of the iPhone at Black Hat USA, using a flaw in Mobile Safari. — Charlie Miller
- 2007-09Skywing's "PatchGuard Reloaded: A Brief Analysis of PatchGuard Version 3" is published (per citation in Wikipedia's Kernel Patch Protection article). — Uninformed
- 2007-10-18Publicly defends his PhD thesis, 'Contribution à la sécurité des systèmes d'exploitation et des microprocesseurs,' at Université Paris-Sud (Paris XI). — Loïc Duflot
- 2007-11-04Version 0.5 released (adds Oracle support), marking the end of OWASP Spring of Code 2007 participation. — sqlmap
- 2007-11-05Preatoni was arrested in Milan on charges of unauthorized computer access and wiretapping in connection with the Telecom Italia "Tiger Team" scandal. — Roberto Preatoni
- 2007-12Presented cracking of the MIFARE Classic RFID cipher at the Chaos Communication Congress. — Karsten Nohl
- 2008Won the Pwn2Own competition for the first time by finding a critical bug in the MacBook Air. — Charlie Miller
- 2008Speaks at DEF CON 16 with Tim Vidas on "Next Generation Collaborative Reversing with Ida Pro and CollabREate"; bio lists him as Associate Chairman of the Computer Science Department at the Naval Postgraduate School. — Chris Eagle
- 2008NGSSoftware received an International Trade Award for Innovation and an SC Award for Best Security Company in Europe. — David Litchfield
- 2008Publishes Nmap Network Scanning, the official Nmap reference book. — Gordon Lyon
- 2008Krissler and CCC colleagues published German Interior Minister Wolfgang Schäuble's fingerprint, lifted from a glass. — Jan Krissler
- 2008With Robert Hansen, publicizes and names the 'clickjacking' attack technique. — Jeremiah Grossman
- 2008Co-presented cryptanalysis of the DECT cordless-phone standard cipher at 25C3. — Ralf-Philipp Weinmann
- 2008Along with Jeremiah Grossman, coined the term 'clickjacking.' — Robert Hansen
- 2008Founds the Security and Human Behavior (SHB) workshop. — Ross Anderson
- 2008Kamkar's probation is lifted. — Samy Kamkar
- 2008Co-founds the oss-security mailing list. — Solar Designer
- 2008Project Chanology launched against the Church of Scientology. — Anonymous: From 4chan Pranksters to Global Hacktivists
- 2008Publishes 'CPU Bugs, CPU Backdoors and Consequences on Security' at ESORICS 2008. — Loïc Duflot
- 2008-01Hex-Rays formally takes over development and support of IDA from DataRescue. — IDA Pro
- 2008-02Second, expanded edition published, reorganized into eight chapters and bundled with a Linux LiveCD. — Hacking: The Art of Exploitation
- 2008-03Issue #92 is published, including a reproducible fingerprint foil of German Interior Minister Wolfgang Schäuble as a protest against biometric surveillance policy. — Die Datenschleuder
- 2008-06-15The IDA Pro Book, 1st edition, published by No Starch Press. — Chris Eagle
- 2008-07-08Coordinated, multi-vendor patches for the DNS cache-poisoning flaw he discovered (CVE-2008-1447 / CERT VU#800113) were released simultaneously across the industry. — Dan Kaminsky
- 2008-08Publicly detailed the DNS vulnerability in the "Black Ops 2008" talk at Black Hat USA, and later at DEF CON 16 and Black Hat Japan. — Dan Kaminsky
- 2008-10WabiSabiLabi was reported to be considering shutting down its exploit marketplace due to insufficient paying customers. — Roberto Preatoni
- 2008-10Final Volume 10 published (47 articles across 10 volumes total); no further volumes appear afterward. — Uninformed
- 2008-10-09PortSwigger Ltd is incorporated in England; Stuttard becomes a director and company secretary. — Dafydd Stuttard
- 2008-11Krebs's investigation into hosting provider McColo leads to its takedown, cutting global spam volume sharply. — Brian Krebs
- 2008-12Burp Suite v1.2 introduces the automated Burp Scanner. — Burp Suite
- 2009Founds Bonsai, an application-security consulting firm. — Andres Riancho
- 2009Won Pwn2Own again by cracking Apple's Safari browser; separately disclosed an SMS-processing vulnerability affecting iPhones. — Charlie Miller
- 2009Co-authored (with John McDonald, at IBM ISS X-Force) the Black Hat USA paper 'Practical Windows XP/2003 Heap Exploitation.' — Chris Valasek
- 2009Helped identify a network-detectable signature for Conficker-infected hosts, later integrated into Nmap and Nessus. — Dan Kaminsky
- 2009Co-authored 'The Mac Hacker's Handbook' with Charlie Miller. — Dino Dai Zovi
- 2009Leaves the CIA and becomes an NSA contractor via Dell. — Edward Snowden
- 2009Presented Blitzableiter, a hardening tool for Adobe Flash file parsing, at Black Hat. — Felix "FX" Lindner
- 2009Delivers a keynote at the 26th Chaos Communication Congress (26C3). — Frank Rieger
- 2009Sworn into the U.S. Department of Homeland Security Advisory Council. — Jeff Moss
- 2009Coined the term "evil maid attack" in a blog post describing firmware/USB-based compromise of encrypted, unattended machines. — Joanna Rutkowska
- 2009Lookout is established in San Francisco as a smartphone security and data-backup company; Mahaffey serves as co-founder and CTO alongside CEO/co-founder John Hering. — Kevin Mahaffey
- 2009Presents null-prefix SSL certificate attacks and releases SSLstrip at Black Hat. — Moxie Marlinspike
- 2009Completed Ph.D. thesis, "Algebraic methods in block cipher cryptanalysis," at TU Darmstadt. — Ralf-Philipp Weinmann
- 2009Co-authored "Practical Cryptanalysis of ISO/IEC 9796-2 and EMV Signatures" at CRYPTO 2009. — Ralf-Philipp Weinmann
- 2009Slowloris was used as a denial-of-service tool during protests following the Iranian presidential election. — Robert Hansen
- 2009Began contributing to the Tor Project. — Runa Sandvik
- 2009Receives the Pwnie Award Lifetime Achievement Award at Black Hat. — Solar Designer
- 2009Began researching mobile and embedded device security, per his own conference biography, after prior work as a general network/web/app penetration tester. — Zach Lanier
- 2009Acquired by Rapid7. — The Metasploit Framework: Democratizing Penetration Testing
- 2009The codebase is rewritten from scratch as radare2, a pluggable, library-based reverse-engineering framework. — radare2
- 2009Snort is inducted into InfoWorld's Open Source Hall of Fame. — Snort
- 2009Publishes 'ACPI: Design Principles and Concerns' at TRUST 2009 (also presented at SSTIC 2009), with Olivier Levillain and Benjamin Morin. — Loïc Duflot
- 2009-01Hal Finney receives the first Bitcoin transaction from Satoshi Nakamoto, connecting a founding-era cypherpunk directly to Bitcoin's launch. — Cypherpunks
- 2009-03The CCC reintroduces an eight-issue mini-subscription option for the magazine. — Die Datenschleuder
- 2009-03Presents 'Getting into the SMRAM: SMM Reloaded' at CanSecWest, with Olivier Levillain, Benjamin Morin and Olivier Grumelard, defeating the SMRAM lock-bit protection via cache poisoning. — Loïc Duflot
- 2009-06-17Released Slowloris, a low-bandwidth HTTP denial-of-service tool. — Robert Hansen
- 2009-07-07DCSSI, Duflot's employer, is reorganized into the new Agence nationale de la sécurité des systèmes d'information (ANSSI). — Loïc Duflot
- 2009-07-19Published "Exploit writing tutorial part 1: Stack Based Overflows", the start of the Corelan Exploit Writing Tutorials series. — Peter Van Eeckhoutte
- 2009-09Founded the Corelan Security Team. — Peter Van Eeckhoutte
- 2009-10Rapid7 acquired the Metasploit Project; Moore joined Rapid7 and remained chief architect of the Metasploit Framework. — H. D. Moore
- 2009-11-10Go programming language is publicly announced. — Ken Thompson
- 2009-12Krebs leaves The Washington Post and founds KrebsOnSecurity.com. — Brian Krebs
- 2009-12Presented the A5/1 GSM cipher cracking project at 26C3 in Berlin. — Karsten Nohl
- 2009-12-18Miroslav Stampar joins the project as co-developer alongside Bernardo Damele, starting with version 0.8 RC2. — sqlmap
- 2010Reports Chelsea Manning's disclosures to the FBI. — Adrian Lamo: The 'Homeless Hacker'
- 2010Publicly speculates that Iran's Natanz nuclear facility was the target of the Stuxnet worm. — Frank Rieger
- 2010Bypasses PlayStation 3 security; sued by Sony. — George 'geohot' Hotz: The iPhone Jailbreaker
- 2010Began developing Qubes OS with Rafal Wojtczuk, a Xen-based desktop OS using compartmentalized virtual machines for security. — Joanna Rutkowska
- 2010Became Managing Director and Chief Scientist of Security Research Labs (SRLabs) in Berlin. — Karsten Nohl
- 2010Co-founds Whisper Systems, releasing the encrypted apps TextSecure and RedPhone. — Moxie Marlinspike
- 2010Joins DARPA as a cybersecurity program manager. — Peiter "Mudge" Zatko
- 2010Published "Cryptanalysis of the DECT Standard Cipher" at FSE 2010. — Ralf-Philipp Weinmann
- 2010Co-authored "A Framework for Automated Architecture-Independent Gadget Search" at USENIX WOOT 2010. — Ralf-Philipp Weinmann
- 2010Presented "The Baseband Apocalypse" and "The Hidden Nemesis" at 27C3, on cellular baseband and embedded-controller security. — Ralf-Philipp Weinmann
- 2010Publishes 'Chip and PIN is Broken', demonstrating the Chip-and-PIN no-PIN attack. — Ross Anderson
- 2010Publishes "A Fast Flowgraph Based Classification System for Packed and Polymorphic Malware on the Endhost" (AINA 2010) and the whitepaper "Fast Automated Unpacking and Classification of Malware," with Yang Xiang. — Silvio Cesare
- 2010Joined Apple as senior product manager for privacy and security. — Window Snyder
- 2010Publishes the Afghan War Diary and Iraq War Logs, leaked by Chelsea Manning. — WikiLeaks & Julian Assange: Radical Transparency
- 2010Stuxnet discovered publicly; attributed to a joint U.S.-Israeli operation targeting Iran's Natanz facility. — Stuxnet: The World's First Digital Weapon
- 2010Diffie, Hellman, and Merkle jointly receive the IEEE Richard W. Hamming Medal. — Whitfield Diffie and Martin Hellman
- 2010Publishes 'ACPI and SMI handlers: some limits to trusted computing' in the Journal of Computer Virology, and 'On the Limits of Hypervisor- and Virtual Machine Monitor-Based Isolation' as a book chapter in Towards Hardware-Intrinsic Security. — Loïc Duflot
- 2010Symantec acquires PGP Corporation. — Philip Zimmermann
- 2010-01-09BackTrack 4 final release switches the distribution's base from Slackware to Ubuntu. — Kali Linux
- 2010-03-25Albert Gonzalez, who later masterminded breaches of TJX Companies, Dave & Buster's, and Heartland Payment Systems, is sentenced to 20 years in federal prison. — ShadowCrew
- 2010-06-06Publishes the story identifying Chelsea Manning as the WikiLeaks source. — Kevin Poulsen
- 2010-06-10Publishes full exploit details on the Full Disclosure mailing list five days after notifying Microsoft, sparking a public dispute over disclosure timelines. — Tavis Ormandy
- 2010-06-16Published tutorial part 10 on chaining DEP bypass with ROP. — Peter Van Eeckhoutte
- 2010-07w3af receives sponsorship and development partnership from Rapid7. — Andres Riancho
- 2010-07Returns to eEye Digital Security after serving as Chief Security Architect at FireEye. — Marc Maiffret
- 2010-07At the 6th HITCON, NTU professor Cheng Chen-mou publicly demonstrates a vulnerability allowing manipulation of stored balances on Taiwan's EasyCard transit cards. — HITCON (Hacks In Taiwan Conference)
- 2010-07-13Microsoft ships out-of-band security bulletin MS10-042 (CVE-2010-1885). — Tavis Ormandy
- 2010-07-28Demonstrated 'ATM jackpotting' live on stage at Black Hat USA, making two ATMs dispense cash. — Barnaby Jack
- 2010-07-28Presents "Aleatory Persistent Threat" (Internet Explorer 8 use-after-free / heap-crafting research) at Black Hat USA 2010. — Nicolas Waisman
- 2010-08Sexual assault allegations are made against Assange in Sweden. — Julian Assange
- 2010-09-13Kamkar releases Evercookie, a JavaScript tool demonstrating persistent 'zombie cookie' browser tracking. — Samy Kamkar
- 2010-11-27Repeats "Aleatory Persistent Threat" at Kiwicon 4 in New Zealand. — Nicolas Waisman
- 2011Alex Rice, then leading Facebook's product security efforts, connects with Dutch researchers Jobert Abma and Michiel Prins after their 'Hack 100' initiative surfaced vulnerabilities in Facebook and other major companies. — Alex Rice
- 2011Speaks at OWASP AppSec USA on 'Web Application Security Payloads'. — Andres Riancho
- 2011Published proof-of-concept iOS app "Instastock" demonstrating a bypass of Apple's App Store review process. — Charlie Miller
- 2011The IDA Pro Book, 2nd edition, published by No Starch Press. — Chris Eagle
- 2011Second edition of The Web Application Hacker's Handbook is published. — Dafydd Stuttard
- 2011The 'Alternativlos' podcast, co-hosted with Felix von Leitner, wins Deutschlandradio's Political Podcast of the Year award. — Frank Rieger
- 2011Publishes the book 'Kingpin.' — Kevin Poulsen
- 2011Began working as a malware analyst at Ikarus Security Software in Austria, starting a career in reverse engineering. — Marion Marschalek
- 2011Publishes 'The Tangled Web: A Guide to Securing Modern Web Applications'. — Michal Zalewski
- 2011Travels to Lahore, Pakistan, to track down and interview the authors of the Brain virus. — Mikko Hyppönen
- 2011Delivers TED talk 'Fighting Viruses, Defending the Net' at TEDGlobal. — Mikko Hyppönen
- 2011Launches DARPA's Cyber Fast Track program. — Peiter "Mudge" Zatko
- 2011Publishes 'Sophail,' a critical analysis of vulnerabilities in Sophos antivirus software. — Tavis Ormandy
- 2011Bulgarian ShadowCrew member Aleksi Kolarov ("APK") is arrested. — ShadowCrew
- 2011Diffie inducted into the National Inventors Hall of Fame. — Whitfield Diffie and Martin Hellman
- 2011Receives the Japan Prize, jointly with Dennis Ritchie. — Ken Thompson
- 2011Publishes 'What If You Can't Trust Your Network Card?' at RAID 2011 with Yves-Alexis Perez and Benjamin Morin, and presents related 'Run-time firmware integrity verification' work at CanSecWest, by this point credited to ANSSI/SGDSN. — Loïc Duflot
- 2011-01Sourcefire acquires cloud-based antivirus vendor Immunet. — Snort
- 2011-02Precursor group (Internet Feds, including future LulzSec members) breaches HBGary Federal, in an episode closely associated with Anonymous. — LulzSec
- 2011-03-01Google acquired zynamics, maker of BinDiff, BinNavi, and VxClass. — Halvar Flake
- 2011-04-01Delivers "How to FAIL at [Fuzzing]" at Immunity's Infiltrate 2011 conference in South Beach, Florida. — Nicolas Waisman
- 2011-04-28Appointed Vice President and Chief Security Officer of ICANN. — Jeff Moss
- 2011-05Argeniss was acquired by IOActive; Cerrudo was named Chief Technology Officer of IOActive Labs. — Cesar Cerrudo
- 2011-05LulzSec forms and begins publicly claiming attacks, including breaches of Fox.com and PBS. — LulzSec
- 2011-05Mimikatz is first publicly released by Benjamin Delpy as closed-source software. — Mimikatz
- 2011-05-10BackTrack 5 is released. — Kali Linux
- 2011-06-02LulzSec claims a large-scale SQL-injection breach of Sony Pictures, exposing personal data on a large number of users. — LulzSec
- 2011-06-07Hector Monsegur ("Sabu") is arrested by the FBI; he becomes a cooperating informant the following day. — LulzSec
- 2011-06-14"Titanic Takedown Tuesday": LulzSec disrupts Minecraft, League of Legends, and other gaming services. — LulzSec
- 2011-06-15LulzSec conducts a DDoS attack against CIA.gov, taking the site offline for several hours. — LulzSec
- 2011-06-20LulzSec and Anonymous jointly launch "Operation AntiSec," targeting government and corporate networks. — LulzSec
- 2011-06-23LulzSec releases data from the Arizona Department of Public Safety under the "Chinga la Migra" campaign. — LulzSec
- 2011-06-25LulzSec releases its "50 Days of Lulz" final data dump. — LulzSec
- 2011-06-26LulzSec publicly announces its disbandment via Twitter. — LulzSec
- 2011-07-18News International/The Sun website is defaced with a fake story, in an action linked to former LulzSec/AntiSec participants. — LulzSec
- 2011-07-20Mustafa Al-Bassam ("Tflow"), 16 at the time of the offenses, is arrested in London. — LulzSec
- 2011-07-27Jake Davis ("Topiary") is arrested in Shetland, Scotland. — LulzSec
- 2011-08-03Led the launch of the Microsoft BlueHat Prize, offering a $200,000 grand prize for defensive security research. — Katie Moussouris
- 2011-09The Mimikatz technique is used in the breach of Dutch certificate authority DigiNotar. — Mimikatz
- 2011-09-01Ryan Ackroyd ("Kayla") is arrested in Mexborough, South Yorkshire. — LulzSec
- 2011-09-21Lookout raises a $40 million round led by Andreessen Horowitz, reaching roughly 12 million users. — Kevin Mahaffey
- 2011-10Demonstrated wireless hacking of an insulin pump at McAfee's FOCUS 11 conference. — Barnaby Jack
- 2011-11-22Clonewise, his open-source package-clone/vulnerability detection tool, is covered by SC Magazine/itnews.com.au ("Tool kills hidden Linux bugs, vulnerabilities"). — Silvio Cesare
- 2011-11-28Twitter acquires Whisper Systems; TextSecure is later open-sourced under the GPLv3. — Moxie Marlinspike
- 2011-12Publicly criticizes CNET's Download.com for bundling adware toolbars with Nmap and other open-source software installers. — Gordon Lyon
- 2011-12-31Published tutorial part 11, "Heap Spraying Demystified". — Peter Van Eeckhoutte
- 2011-12-31Robin Seggelmann's heartbeat-extension code, containing the missing bounds check that causes Heartbleed, is committed to the OpenSSL source repository. — Heartbleed (CVE-2014-0160)
- 2012Rice co-founds HackerOne with Michiel Prins, Jobert Abma, and Merijn Terheggen. — Alex Rice
- 2012Presented research on hacking wireless pacemakers at the BreakPoint security conference in Melbourne. — Barnaby Jack
- 2012Founds Bugcrowd in Sydney, Australia, with co-founders Chris Raethke and Sergei Belokamen. — Casey Ellis
- 2012Co-founded the security research firm Trail of Bits. — Dino Dai Zovi
- 2012Receives the Werner-Holtfort Prize jointly with Constanze Kurz for civil and human rights advocacy. — Frank Rieger
- 2012Returned to Stanford's Center for Internet and Society as Civil Liberties Director. — Jennifer Granick
- 2012Awarded the Millennium Technology Prize. — Linus Torvalds
- 2012Credited with his first published CVE, CVE-2012-4775 (MS12-071), a use-after-free vulnerability in Internet Explorer found through fuzzing. — Orange Tsai
- 2012Co-authored the "iOS Hacker's Handbook" (Wiley), covering iOS and baseband exploitation. — Ralf-Philipp Weinmann
- 2012Published "Baseband Attacks: Remote Exploitation of Memory Corruptions in Cellular Protocol Stacks" at USENIX WOOT 2012. — Ralf-Philipp Weinmann
- 2012Co-authored "TorScan: Tracing Long-Lived Connections and Differential Scanning Attacks" at ESORICS 2012. — Ralf-Philipp Weinmann
- 2012Co-authors the SpringerBriefs book "Software Similarity and Classification" (Springer) with Yang Xiang. — Silvio Cesare
- 2012Debuts the OPSEC talk 'OPSEC: Because Jail is for wuftpd,' marking a public pivot toward operational-security commentary. — the Grugq
- 2012Julian Assange co-authors the book "Cypherpunks: Freedom and the Future of the Internet." — Cypherpunks
- 2012DEVCORE founded in Taipei, Taiwan, by six co-founders, described as the first Taiwanese company to offer red-team exercise services. — DEVCORE
- 2012After 29 episodes of PLA Radio, Carter launches a new prank-call podcast, The Snow Plow Show, which remains active. — Phone Losers of America
- 2012Raphael Mudge releases Cobalt Strike, a commercially licensed offensive-security platform built on his open-source Armitage GUI for the Metasploit Framework, distributed through his company Strategic Cyber LLC. — Cobalt Strike
- 2012Delpy presents Mimikatz at the Positive Hack Days conference in Moscow and releases its source code publicly. — Mimikatz
- 2012Co-founds Trail of Bits in New York City with Alexander Sotirov and Dino Dai Zovi. — Dan Guido
- 2012Presents "The Mobile Exploit Intelligence Project," statistical research on mobile exploitation trends. — Dan Guido
- 2012Go reaches its 1.0 release. — Ken Thompson
- 2012Co-founds Silent Circle; inducted into the Internet Hall of Fame. — Philip Zimmermann
- 2012-01Became CISO / Corporate IST Security Officer at his employer. — Peter Van Eeckhoutte
- 2012-02Repeated the wireless insulin pump hack from roughly 90 meters at the RSA Conference. — Barnaby Jack
- 2012-03Forbes publishes reporting describing him as a broker for zero-day exploit sales to government buyers. — the Grugq
- 2012-03-06US indictments unsealed against Davis, Ackroyd, Darren Martyn ("pwnsauce"), Donncha O'Cearbhaill ("palladium"), and Jeremy Hammond. — LulzSec
- 2012-03-14OpenSSL 1.0.1 is released as the first stable version containing the vulnerable heartbeat code. — Heartbleed (CVE-2014-0160)
- 2012-05BeyondTrust acquires eEye Digital Security. — Marc Maiffret
- 2012-06-19Breaches UK bail and enters the Ecuadorian embassy in London. — Julian Assange
- 2012-06-26Development relocates from SourceForge/Subversion to GitHub; new homepage at sqlmap.org and public issue tracker launched. — sqlmap
- 2012-07-26Presented 'Mapping and Evolution of Android Permissions' with Andrew Reiter at Black Hat USA 2012, while a Senior Research Consultant at Accuvant LABS. — Zach Lanier
- 2012-08-13BackTrack 5 R3, the final BackTrack release, is published. — Kali Linux
- 2012-08-16Ecuador grants Assange diplomatic asylum. — Julian Assange
- 2012-09Tenable raises a $50 million Series A funding round led by Accel Partners. — Nessus
- 2012-09Google acquires VirusTotal. — YARA
- 2012-09-03Qubes OS reached its 1.0 release. — Joanna Rutkowska
- 2012-10Became Director of Embedded Device Security at IOActive. — Barnaby Jack
- 2013Launches RFIDler Kickstarter campaign with Zac Franken at DEF CON 21. — Adam Laurie
- 2013Began working with journalists to analyze leaked NSA documents provided by Edward Snowden. — Bruce Schneier
- 2013Rapid7's Project Sonar, an internet-wide scanning research effort led by Moore, launched as a successor to the earlier Critical.IO scanning project. — H. D. Moore
- 2013Created and launched Microsoft's first bug bounty program. — Katie Moussouris
- 2013Founds Open Whisper Systems to continue independent development of TextSecure and RedPhone. — Moxie Marlinspike
- 2013Co-authored "Trawling for Tor Hidden Services: Detection, Measurement, Deanonymization" at IEEE Symposium on Security and Privacy. — Ralf-Philipp Weinmann
- 2013Became a privacy and security researcher for the Freedom of the Press Foundation. — Runa Sandvik
- 2013Speaks at Black Hat USA 2013; co-publishes "Malwise" (IEEE Transactions on Computers) and "Clonewise – Detecting Package-Level Clones Using Machine Learning" (SecureComm 2013). — Silvio Cesare
- 2013Kolarov is extradited to the United States. — ShadowCrew
- 2013The Volatility Foundation begins running its annual Volatility Plugin Contest with cash prizes (disputed/unverified exact founding date of the Foundation itself). — Volatility Framework
- 2013YARA, designed by VirusTotal engineer Victor Manuel Alvarez, is published on GitHub under the VirusTotal organization as an open-source project. — YARA
- 2013Presents "The Exploit Intelligence Project Revisited." — Dan Guido
- 2013Co-creates the Dark Mail Alliance with Lavabit founder Ladar Levison. — Philip Zimmermann
- 2013-01Client Aaron Swartz died by suicide while Granick was representing him in his JSTOR/CFAA prosecution. — Jennifer Granick
- 2013-01Launches a bug bounty program offering up to $7,000 to purchase working exploits for community testing, per The Register and V3.co.uk. — Packet Storm Security
- 2013-03Wins $20,000 at Pwn2Own for independently exploiting Oracle Java on Windows 8. — James Forshaw
- 2013-03-13Offensive Security releases Kali Linux 1.0.0 ("moto"), a complete rebuild of BackTrack on a Debian base, led by Mati Aharoni and Devon Kearns. — Kali Linux
- 2013-04-10The frida-core and frida-gum repositories, the C core of the project, are created on GitHub. — Frida
- 2013-04-19Cody Kretsinger is sentenced to one year in federal prison for his role in the Sony Pictures breach. — LulzSec
- 2013-05-01Published early research on practical HTTP Host header attacks and password reset poisoning. — James Kettle
- 2013-05-14Davis, Ackroyd, Al-Bassam, and Ryan Cleary are sentenced at a UK court following guilty pleas. — LulzSec
- 2013-05-15SecureDrop, co-created by Poulsen, launches at The New Yorker. — Kevin Poulsen
- 2013-05-20Flies to Hong Kong carrying copies of classified documents. — Edward Snowden
- 2013-06Involved in testing and disclosure around Facebook's shadow-profile data leak, reportedly finding Facebook's stated impact figures inaccurate, per multiple outlets cited by Wikipedia. — Packet Storm Security
- 2013-06-05The Guardian publishes the first story based on Snowden's leaked documents. — Edward Snowden
- 2013-06-06The Guardian and Washington Post reveal the PRISM program. — Edward Snowden
- 2013-06-09Snowden publicly identifies himself as the source. — Edward Snowden
- 2013-06-10Announces the fourth annual "Hack Cup" tournament tied to Black Hat week in Las Vegas. — Nicolas Waisman
- 2013-06-21U.S. DOJ charges Snowden under the Espionage Act. — Edward Snowden
- 2013-07-23Cisco Systems announces its acquisition of Sourcefire for approximately $2.7 billion. — Snort
- 2013-07-25Found dead at his home in San Francisco, days before a scheduled Black Hat talk on implantable medical device hacking. — Barnaby Jack
- 2013-07-31Disclosed a DES-key extraction attack on SIM cards via SMS at Black Hat USA. — Karsten Nohl
- 2013-08-01Russia grants Snowden temporary asylum. — Edward Snowden
- 2013-08-02Presented 'Adventures in Automotive Networks and Control Units' with Charlie Miller at DEF CON 21. — Chris Valasek
- 2013-08-03Presented 'GoPro or GTFO: A Tale of Reversing an Embedded System' with Todd Manning at DEF CON 21. — Zach Lanier
- 2013-08-08Raynaldo Rivera is sentenced for his role in the Sony Pictures breach. — LulzSec
- 2013-09-22As CCC spokesperson, announces the club's demonstration defeating Apple's Touch ID fingerprint sensor with a fabricated fake fingerprint. — Frank Rieger
- 2013-09-22Defeated Apple's Touch ID fingerprint sensor, days after the iPhone 5S launch. — Jan Krissler
- 2013-10Announced his departure from ICANN. — Jeff Moss
- 2013-10Microsoft ships Windows 8.1, disabling the WDigest protocol by default in response to credential-theft risk. — Mimikatz
- 2013-10-04Publishes the retrospective blog post "Burp Through the Ages" on PortSwigger's site. — Dafydd Stuttard
- 2013-10-07Cisco completes the acquisition of Sourcefire. — Snort
- 2013-10-10Awarded $100,000 by Microsoft's Mitigation Bypass Bounty program, at the time the largest single payout in the program's history. — James Forshaw
- 2013-11Releases American Fuzzy Lop (afl), a coverage-guided fuzzer widely adopted in security research. — Michal Zalewski
- 2013-11-15Jeremy Hammond is sentenced to 10 years in federal prison for the AntiSec-linked Stratfor breach. — LulzSec
- 2013-11-19Lookout launches an enterprise security suite and a partnership with Samsung, backed by a $55 million round led by Deutsche Telekom. — Kevin Mahaffey
- 2013-12-02Kamkar releases SkyJack, open-source hardware/software for hijacking Parrot drones over Wi-Fi. — Samy Kamkar
- 2013-12-18Krebs breaks the story of the Target data breach, later confirmed to have compromised about 40 million payment cards. — Brian Krebs
- 2014Returns to DEF CON 22 with a matured RFIDler tool, featured in a "DEF CONversation" interview with Dark Tangent. — Adam Laurie
- 2014Named Chief Information Security Officer of Yahoo. — Alex Stamos
- 2014Speaks at Black Hat USA on 'Pivoting in Amazon Clouds', reflecting his AWS/cloud security research (e.g., the nimbostratus toolset). — Andres Riancho
- 2014Krebs publishes the book 'Spam Nation.' — Brian Krebs
- 2014Testifies as an expert witness before the German Bundestag's NSA investigation committee. — Frank Rieger
- 2014Joins Google's newly formed Project Zero team. — James Forshaw
- 2014Director of Ecosystem Strategy at Synack, leading Synack Red Team community management, security response, and vulnerability metrics analysis. — Kymberlee Price
- 2014Period during which G DATA SecurityLabs published widely cited research on the Uroburos/Snake nation-state espionage rootkit, which Marschalek is widely, though not independently, reported to have contributed to. — Marion Marschalek
- 2014Co-publishes "Control Flow-Based Malware Variant Detection" in IEEE Transactions on Dependable and Secure Computing. — Silvio Cesare
- 2014Android Hacker's Handbook (Wiley), co-authored with Joshua J. Drake, Pau Oliva Fora, Collin Mulliner, Stephen A. Ridley, and Georg Wicherski, published. — Zach Lanier
- 2014Sourcefire's Vulnerability Research Team merges with Cisco's TRAC and SecApps groups to form Cisco Talos. — Snort
- 2014-01-03San Francisco Medical Examiner's Office released findings ruling the death an accidental overdose. — Barnaby Jack
- 2014-02The Signal Protocol, co-developed with Trevor Perrin, is first integrated into TextSecure. — Moxie Marlinspike
- 2014-02-23Presented 'The Internet of Things: We've Got to Chat' with Mark Stanislav at BSidesSF 2014, as Senior Security Researcher at Duo Security. — Zach Lanier
- 2014-03-19John Cartwright posts "Administrivia: The End," announcing he is suspending the Full Disclosure list indefinitely, citing legal pressure and a deletion request from an unnamed researcher. — Full Disclosure (mailing list)
- 2014-03-25Fyodor (Gordon Lyon) posts "Administrivia: A Fresh Start," relaunching Full Disclosure as a community-moderated successor list hosted via nmap.org/seclists.org. — Full Disclosure (mailing list)
- 2014-04-01Google engineer Neel Mehta privately reports the Heartbleed OpenSSL vulnerability, an event that helped motivate Project Zero's creation. — Project Zero
- 2014-04-01Neel Mehta of Google's security team discovers the bug and reports it to the OpenSSL team. — Heartbleed (CVE-2014-0160)
- 2014-04-03Researchers at Codenomicon (Riku, Antti, and Matti) independently discover the same vulnerability. — Heartbleed (CVE-2014-0160)
- 2014-04-07Heartbleed is publicly disclosed, OpenSSL 1.0.1g is released fixing the flaw, and heartbleed.com is launched by Codenomicon. — Heartbleed (CVE-2014-0160)
- 2014-05HackerOne raises a $9 million Series A funding round led by Benchmark. — Alex Rice
- 2014-05Left Microsoft to become Chief Policy Officer at HackerOne. — Katie Moussouris
- 2014-05-13The first public frida-python binding release is published. — Frida
- 2014-05-27Hector Monsegur ("Sabu") is sentenced to time served in recognition of his cooperation with the FBI. — LulzSec
- 2014-06-21A follow-up internet scan finds 309,197 public servers still vulnerable to Heartbleed. — Heartbleed (CVE-2014-0160)
- 2014-07-15Google publicly announces Project Zero; Ormandy is among its founding researchers. — Tavis Ormandy
- 2014-07-15Google publicly announces the formation of Project Zero, led by Chris Evans. — Project Zero
- 2014-08Presented 'A Survey of Remote Automotive Attack Surfaces' with Charlie Miller at DEF CON 22, as Director of Vehicle Security Research at IOActive. — Chris Valasek
- 2014-08Presented BadUSB, the USB firmware reprogramming attack, with Jakob Lell at Black Hat USA. — Karsten Nohl
- 2014-08-06Co-presented an 'Embedded Devices Roundtable' with Don Bailey at Black Hat USA 2014. — Zach Lanier
- 2014-08-07Presented 'Stay Out of the Kitchen: A DLP Security Bake-Off' with Kelly Lum at Black Hat USA 2014. — Zach Lanier
- 2014-08-08Presented 'Hacking US Traffic Control Systems' at DEF CON 22, revealing roughly 200,000 vulnerable wireless traffic-sensor devices worldwide. — Cesar Cerrudo
- 2014-08-09Presented 'The Internet of Fails: Where IoT Has Gone Wrong and How We're Making It Right' with Mark Stanislav at DEF CON 22, discussing the BuildItSecure.ly disclosure initiative. — Zach Lanier
- 2014-09Became Director of IST Infrastructure Services and Security. — Peter Van Eeckhoutte
- 2014-09-12Stéphane Chazelas discovers the Bash function-export parsing flaw and reports it to Bash maintainer Chet Ramey (per Wikipedia). — Shellshock (CVE-2014-6271)
- 2014-09-24CVE-2014-6271 publicly disclosed and published by NVD with a CVSS v2 base score of 10.0. — Shellshock (CVE-2014-6271)
- 2014-09-25CVE-2014-7169 published, documenting that the initial patch for CVE-2014-6271 was incomplete. — Shellshock (CVE-2014-6271)
- 2014-09-26Widespread exploitation observed; per Wikipedia, roughly 17,400 attacks against 1,800+ domains from ~400 IP addresses were tracked. — Shellshock (CVE-2014-6271)
- 2014-09-27CVE-2014-6277 published, covering further Bash function-definition parsing flaws (memory access / DoS). — Shellshock (CVE-2014-6271)
- 2014-09-28CVE-2014-7186 and CVE-2014-7187 published, addressing separate Bash parser memory-safety bugs (redirection handling and an off-by-one in read_token_word). — Shellshock (CVE-2014-6271)
- 2014-09-30Project Zero discloses a Windows 8.1 privilege-escalation vulnerability after the 90-day deadline passed without a Microsoft patch, drawing criticism of the policy. — Project Zero
- 2014-09-30CVE-2014-6278 published; per Wikipedia, daily attack/probe volume was estimated at roughly 1.5 million by this date. — Shellshock (CVE-2014-6271)
- 2014-12-26HITCON, working with Trend Micro, notifies Garena of a PlugX malware compromise affecting League of Legends and Path of Exile game files, later attributed to the Winnti Group. — HITCON (Hacks In Taiwan Conference)
- 2014-12-28At 31C3, demonstrated reconstructing German Defense Minister Ursula von der Leyen's fingerprint from photographs. — Jan Krissler
- 2015Became Chief Security Officer of Facebook. — Alex Stamos
- 2015Co-founded the Securing Smart Cities non-profit initiative. — Cesar Cerrudo
- 2015Credited as an author on the fourth edition of Gray Hat Hacking: The Ethical Hacker's Handbook. — Chris Eagle
- 2015Received the Pwnie Award for Lifetime Achievement at Black Hat USA 2015. — Halvar Flake
- 2015Joined Bugcrowd as Senior Director of Researcher Operations, directing penetration-testing efforts across web, mobile, IoT, and infrastructure for a crowd that grew past 50,000 researchers; co-chaired the NTIA Working Group on Multi-Party Vulnerability Disclosure. — Kymberlee Price
- 2015Listed in DEF CON 23's official speaker index, cross-referenced with researcher Morgan Marquis-Boire. — Marion Marschalek
- 2015Presents 'Attacking ECMAScript Engines with Redefinition' at Black Hat USA as a Google Project Zero researcher. — Natalie Silvanovich
- 2015Became Chief Security Officer at Fastly. — Window Snyder
- 2015Hashcat's previously proprietary codebase is released as open-source software under the MIT License. — Hashcat
- 2015Tenable raises a $250 million Series B round from Insight Partners, reported as the largest private-cybersecurity-company capital raise at the time. — Nessus
- 2015Disputed/unverified beyond Wikipedia mention: sqlmap reportedly used by attackers in the TalkTalk data breach. — sqlmap
- 2015Diffie and Hellman jointly awarded the ACM A.M. Turing Award for the invention of public-key cryptography. — Whitfield Diffie and Martin Hellman
- 2015-01Kamkar releases KeySweeper, a USB-charger-disguised sniffer for Microsoft wireless keyboards. — Samy Kamkar
- 2015-03-09Co-authored, with Mark Seaborn, the Google Project Zero blog post "Exploiting the DRAM rowhammer bug to gain kernel privileges." — Halvar Flake
- 2015-03-09Project Zero publishes research on the Rowhammer DRAM hardware vulnerability. — Project Zero
- 2015-04-01Joshua Drake of Zimperium reports the Stagefright vulnerabilities and proposed patches to Google (approximate date; Google is reported to have merged fixes internally within 48 hours). — Stagefright
- 2015-05Empire Hacking meetup, organized by Trail of Bits, is founded in New York City. — Dan Guido
- 2015-06Resigned as Yahoo's CISO amid disagreement over a government email-scanning program. — Alex Stamos
- 2015-06Congress passes the USA FREEDOM Act, ending bulk telephone metadata collection. — Edward Snowden
- 2015-07-17Presented 'Back to the Kitchen: DLP Security Bakeoff, THE SEQUEL' with Kelly Lum at Summercon 2015. — Zach Lanier
- 2015-07-21Wired published "Hackers Remotely Kill a Jeep on the Highway—With Me in It," detailing Miller and Chris Valasek's remote hack of a 2014 Jeep Cherokee. — Charlie Miller
- 2015-07-21Wired published Andy Greenberg's account of Valasek and Miller remotely hacking his Jeep Cherokee while he drove on a highway. — Chris Valasek
- 2015-07-24Fiat Chrysler Automobiles announced a voluntary recall of about 1.4 million vehicles in response to the Uconnect vulnerability. — Charlie Miller
- 2015-07-24Fiat Chrysler Automobiles recalled approximately 1.4 million vehicles in the U.S. to patch the Uconnect vulnerability. — Chris Valasek
- 2015-07-27Zimperium publicly discloses the research in the blog post "Experts Found a Unicorn in the Heart of Android." — Stagefright
- 2015-07-29Research with husband Michael Auger revealing hackable vulnerabilities in TrackingPoint's networked smart rifles was reported by Wired. — Runa Sandvik
- 2015-08Valasek and Miller presented 'Remote Exploitation of an Unaltered Passenger Vehicle' at Black Hat USA and DEF CON 23. — Chris Valasek
- 2015-08Kamkar presents RollJam, an attack on rolling-code garage door and vehicle keyless-entry systems, at DEF CON 23. — Samy Kamkar
- 2015-08The Columbia Daily Tribune covers PLA prank calls made to people who had signed a petition about a College Avenue project in Columbia, Missouri; an FBI representative is quoted saying such calls would likely only be prosecuted locally. — Phone Losers of America
- 2015-08-05Joshua Drake presents "Stagefright: Scary Code in the Heart of Android" at Black Hat USA 2015. — Stagefright
- 2015-08-06Mahaffey and Marc Rogers disclose six Tesla Model S vulnerabilities at Black Hat; Tesla issues a same-day over-the-air fix. — Kevin Mahaffey
- 2015-08-07Related presentation given at DEF CON 23. — Stagefright
- 2015-08-13Armitage, Mudge's original open-source tool, receives its final stable release; Cobalt Strike continues as the actively developed, commercially sold successor. — Cobalt Strike
- 2015-08-13Google publishes the Nexus Security Bulletin for August 2015, addressing the Stagefright CVEs and inaugurating its monthly Android Security Bulletin process. — Stagefright
- 2015-09-12Mahaffey publishes a TechCrunch guest column on addressing automotive cybersecurity threats. — Kevin Mahaffey
- 2015-10Published the paper "Intel x86 considered harmful," analyzing systemic security weaknesses in the x86 platform. — Joanna Rutkowska
- 2015-11TextSecure and RedPhone are merged into a single app called Signal. — Moxie Marlinspike
- 2015-12Gives evidence to the UK Parliament on the draft Investigatory Powers Bill. — Ross Anderson
- 2015-12-01Mahaffey publishes a TechCrunch guest column arguing legacy IT security systems will be replaced amid the shift to cloud and mobile. — Kevin Mahaffey
- 2016Speaks at CODE BLUE on 'Esoteric Web Application Vulnerabilities'. — Andres Riancho
- 2016IBM completed its acquisition of Resilient Systems, where Schneier served as CTO. — Bruce Schneier
- 2016Serves on DARPA's Cyber Grand Challenge Competition Framework Team (DEF CON 24); also speaks at DEF CON 24 on the sk3wldbg IDA Pro emulation plugin. — Chris Eagle
- 2016Co-founded Linux/cloud security startup Capsule8. — Dino Dai Zovi
- 2016Co-initiates the Charter of Digital Fundamental Rights of the European Union. — Frank Rieger
- 2016Co-authored "A Systematic Analysis of the Juniper Dual EC Incident" at ACM CCS 2016. — Ralf-Philipp Weinmann
- 2016Stepped down as CEO and CTO of Neofocal Systems. — Tsutomu Shimomura
- 2016Presented 'The Kitchen's Finally Burned Down: DLP Security Bakeoff' with Kelly Lum at Black Hat Asia 2016, by which point his bio listed him as Director of Research at Cylance. — Zach Lanier
- 2016Disclosed a weakness in the Accellion File Transfer Appliance (per DEVCORE's Chinese Wikipedia entry). — DEVCORE
- 2016Ron Gula transitions to chairman of Tenable. — Nessus
- 2016The first r2con community conference dedicated to radare2 is held in Barcelona. — radare2
- 2016Project closes its 2,000th GitHub issue; disputed/unverified beyond Wikipedia mention: sqlmap reportedly used alongside Acunetix and DirBuster in the Illinois State Board of Elections breach. — sqlmap
- 2016Co-presents "Modern iOS Application Security" with Sophia D'Antoine. — Dan Guido
- 2016Becomes associate professor at Delft University of Technology (until 2021); receives honorary doctorate from Université libre de Bruxelles. — Philip Zimmermann
- 2016-01-29Departed Rapid7 after six years to join a venture capital firm focused on early-stage security startups. — H. D. Moore
- 2016-02-27Stable version 1.0 released. — sqlmap
- 2016-03The U.S. Department of Defense launches 'Hack the Pentagon' on the HackerOne platform, the federal government's first bug bounty program. — Alex Rice
- 2016-03Announces his departure from WhiteHat Security after nearly fifteen years. — Jeremiah Grossman
- 2016-03-21Joined The New York Times as director of information security for the newsroom. — Runa Sandvik
- 2016-04SS7 vulnerability exploitation demonstrated on CBS's '60 Minutes.' — Karsten Nohl
- 2016-04Founded Luta Security, a vulnerability disclosure and bug bounty consultancy. — Katie Moussouris
- 2016-04-05WhatsApp completes rollout of full end-to-end encryption using the Signal Protocol. — Moxie Marlinspike
- 2016-04-15Aircrack-ng 1.2 stable release. — Aircrack-ng
- 2016-04-18'Hack the Pentagon' pilot program launched, running through May 12, 2016; 138 of 250 submitted reports confirmed as legitimate vulnerabilities. — Katie Moussouris
- 2016-06-29Hashcat v3.00 merges the GPU-based oclHashcat/cudaHashcat line with the original CPU tool into one unified application. — Hashcat
- 2016-07-11Aircrack-ng 1.3 released. — Aircrack-ng
- 2016-08Andy Robbins, Rohan Vazarkar, and Will Schroeder publicly release BloodHound and present it at DEF CON 24 in the talk 'Six Degrees of Domain Admin.' — BloodHound
- 2016-08-12Co-authored (with Andrew Crocker) the EFF Deeplinks post 'We Shouldn't Wait Another Fifteen Years for a Conversation About Government Hacking,' calling for oversight of government hacking and the Vulnerabilities Equities Process. — Nate Cardozo
- 2016-09-08Krebs publishes an investigation exposing the Israeli DDoS-for-hire service vDOS. — Brian Krebs
- 2016-09-19Keen Security Lab publishes research demonstrating remote control of a Tesla Model S (parked and while driving) via a CAN bus compromise; Tesla confirms and patches the vulnerabilities. — Keen Security Lab
- 2016-09-20KrebsOnSecurity is hit by a record-breaking ~620 Gbps DDoS attack from a Mirai IoT botnet. — Brian Krebs
- 2016-09-30The source code for the Mirai botnet malware is publicly released by 'Anna-Senpai.' — Brian Krebs
- 2016-10-21A Mirai-powered botnet attacks DNS provider Dyn, disrupting major internet services. — Brian Krebs
- 2016-11The FBI raids Brad Carter's recording studio, seizing equipment related to unauthorized access of Safeway customer account data. — Phone Losers of America
- 2016-11-04Presented 'Backslash Powered Scanning: Hunting Unknown Vulnerability Classes' at Black Hat Europe 2016. — James Kettle
- 2017Speaks at ShmooCon on designing and executing the DARPA Cyber Grand Challenge; appears on a DEF CON 25 panel of DEF CON CTF organizers representing "DDTEK"; releases IDA tooling (ida_clemency) for that year's CTF finals. — Chris Eagle
- 2017Received the Pwnie Award for Lifetime Achievement. — Felix "FX" Lindner
- 2017Published American Spies: Modern Surveillance, and joined the ACLU as Surveillance and Cybersecurity Counsel. — Jennifer Granick
- 2017Returned to Microsoft to focus on application security and third-party/open-source library security. — Kymberlee Price
- 2017Co-founds InfoSect, a Canberra-based security research, training and consulting firm, where he serves as Managing Director and Chief Researcher. — Silvio Cesare
- 2017Disclosed a GitHub Enterprise remote code execution flaw and Exim mail-server vulnerabilities (per DEVCORE's Chinese Wikipedia entry). — DEVCORE
- 2017Diffie elected a Foreign Member of the Royal Society. — Whitfield Diffie and Martin Hellman
- 2017-01Krebs publishes an investigation identifying Paras Jha as the likely author behind the 'Anna-Senpai' Mirai alias. — Brian Krebs
- 2017-01Research into BMW connected vehicle systems begins. — Keen Security Lab
- 2017-01Amit Yoran becomes CEO of Tenable. — Nessus
- 2017-02-17Discovers and reports 'Cloudbleed,' a Cloudflare memory-disclosure bug. — Tavis Ormandy
- 2017-02-19Tavis Ormandy discovers the Cloudflare 'Cloudbleed' memory-disclosure bug. — Project Zero
- 2017-03-07WikiLeaks begins publishing 'Vault 7', a leak of CIA files that references Ghidra years before its public release. — Ghidra
- 2017-03-07Apache Struts discloses CVE-2017-5638 and releases a patch; attackers begin scanning for unpatched servers within days. — Equifax Data Breach
- 2017-03-14Microsoft releases security bulletin MS17-010, patching CVE-2017-0144 and related SMBv1 vulnerabilities for supported Windows versions. — EternalBlue (CVE-2017-0144)
- 2017-04-03CA Technologies completed its acquisition of Veracode for approximately $614 million. — Chris Wysopal
- 2017-04-14The Shadow Brokers publicly release EternalBlue and other exploit tools reportedly linked to the NSA-associated Equation Group toolset. — EternalBlue (CVE-2017-0144)
- 2017-04-14The Shadow Brokers leak a set of NSA-linked exploits, including EternalBlue, which NotPetya would later use for lateral movement. — NotPetya
- 2017-05Discovers the WannaCry kill switch domain. — Marcus Hutchins: The Accidental Hero of WannaCry
- 2017-05Attackers reportedly begin accessing Equifax's network through the unpatched Apache Struts vulnerability in a consumer dispute portal (reported as mid-May 2017; exact day disputed across sources). — Equifax Data Breach
- 2017-05-08Hired by Stripe as head of security. — Peiter "Mudge" Zatko
- 2017-05-12WannaCry ransomware begins spreading globally, using EternalBlue to self-propagate across unpatched Windows systems. — EternalBlue (CVE-2017-0144)
- 2017-05-13Researcher Marcus Hutchins registers a kill-switch domain that slows WannaCry's spread; Microsoft issues emergency out-of-band patches for unsupported Windows versions (XP, Server 2003, Windows 8). — EternalBlue (CVE-2017-0144)
- 2017-05-23Demonstrated bypassing the Samsung Galaxy S8's iris scanner using a photographed iris and a contact lens. — Jan Krissler
- 2017-06The NotPetya wiper malware uses a modified Mimikatz-based credential-dumping module combined with EternalBlue to spread worldwide. — Mimikatz
- 2017-06-01Google Project Zero (Jann Horn) reports the vulnerability to Intel, AMD, and ARM. — Spectre and Meltdown
- 2017-06-16A plea agreement is filed in United States v. Bradley Carter. — Phone Losers of America
- 2017-06-27NotPetya wiper malware, using EternalBlue for lateral movement, spreads globally after originating via compromised Ukrainian accounting software. — EternalBlue (CVE-2017-0144)
- 2017-06-27NotPetya begins spreading, distributed through a compromised update of the Ukrainian accounting software M.E.Doc; Ukrainian government agencies, banks, and the Chernobyl radiation-monitoring system are disrupted, and the malware quickly spreads to multinational companies worldwide. — NotPetya
- 2017-07Miller and Chris Valasek joined GM's Cruise Automation as joint heads of the self-driving subsidiary's security team. — Charlie Miller
- 2017-07Valasek and Miller joined General Motors' Cruise Automation as joint heads of its vehicle security team. — Chris Valasek
- 2017-07-04Ukraine's cyber-police seize servers belonging to M.E.Doc's developer after detecting further suspicious network activity. — NotPetya
- 2017-07-12KOIN 6 News reports that Carter is scheduled to appear in federal court on the Safeway-related charges. — Phone Losers of America
- 2017-07-14Mathy Vanhoef begins notifying affected vendors ahead of coordinated disclosure. — KRACK (Key Reinstallation Attack)
- 2017-07-27Presented 'A New Era of SSRF' at Black Hat USA 2017 (repeated at DEF CON 25). — Orange Tsai
- 2017-07-28Jann Horn and other independent researchers privately disclose the Meltdown and Spectre CPU vulnerabilities to affected vendors. — Project Zero
- 2017-07-29Equifax discovers the intrusion after suspicious traffic is noticed during renewal of an expired SSL certificate. — Equifax Data Breach
- 2017-08-28CERT/CC reportedly sends a broader round of vendor notifications about the vulnerability. — KRACK (Key Reinstallation Attack)
- 2017-08-30OpenBSD quietly ships a patch, ahead of the public coordinated-disclosure date. — KRACK (Key Reinstallation Attack)
- 2017-09Facebook disclosed Russia-linked ad spending during the 2016 election, based on the investigation Stamos led. — Alex Stamos
- 2017-09-07Equifax publicly discloses the breach, stating approximately 143 million U.S. consumers were affected. — Equifax Data Breach
- 2017-09-15Equifax's Chief Information Officer and Chief Security Officer depart the company. — Equifax Data Breach
- 2017-09-26CEO Richard Smith retires amid the fallout. — Equifax Data Breach
- 2017-09-29Aircrack-ng 1.4 released. — Aircrack-ng
- 2017-10The BadRabbit ransomware outbreak incorporates Mimikatz-derived credential harvesting for network propagation. — Mimikatz
- 2017-10-16Judge Marco A. Hernandez sentences Carter to eight months of home detention and five years of probation, and orders $19,600 in restitution to Safeway. — Phone Losers of America
- 2017-10-16Public disclosure of KRACK via krackattacks.com and CERT/CC advisory VU#228519; CVE-2017-13077 through CVE-2017-13088 (excluding 13083 and 13085) are published. — KRACK (Key Reinstallation Attack)
- 2017-10-27Led the launch of The New York Times as a Tor onion service. — Runa Sandvik
- 2017-11-01Vanhoef and Piessens present the paper "Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2" at the ACM Conference on Computer and Communications Security (CCS). — KRACK (Key Reinstallation Attack)
- 2017-11-16CERT/CC's VU#228519 advisory is last revised, reflecting updated vendor patch status. — KRACK (Key Reinstallation Attack)
- 2017-12-06Wassenaar Arrangement delegates agreed on revised 'intrusion software' export-control language after years of advocacy involving Moussouris. — Katie Moussouris
- 2017-12-08Publishes the book Attacking Network Protocols through No Starch Press. — James Forshaw
- 2017-12-18Co-authors the Project Zero post 'aPAColypse now,' detailing a Windows 10 exploit chain via WPAD/PAC and JScript. — James Forshaw
- 2017-12-18The U.S. government formally attributes the WannaCry attack to North Korea; the UK, Canada, Japan, and New Zealand support the assessment. — EternalBlue (CVE-2017-0144)
- 2018Dies at age 37. — Adrian Lamo: The 'Homeless Hacker'
- 2018Bugcrowd relocates its headquarters to San Francisco; co-launches disclose.io, an open-source vulnerability disclosure and legal safe-harbor framework. — Casey Ellis
- 2018Received Ekoparty's Premio a la Trayectoria (Lifetime Achievement Award). — Cesar Cerrudo
- 2018Founded Rumble, Inc., an IT asset-discovery and network-visibility company. — H. D. Moore
- 2018Launched DEF CON China in Beijing. — Jeff Moss
- 2018Founds Bit Discovery as founder and CEO. — Jeremiah Grossman
- 2018Co-authored "Where Did I Leave My Keys? Lessons from the Juniper Dual EC Incident" in Communications of the ACM. — Ralf-Philipp Weinmann
- 2018Joined Intel in a senior security leadership role. — Window Snyder
- 2018-01-03Meltdown and Spectre are publicly disclosed, ahead of the originally coordinated release date, after details began leaking. — Project Zero
- 2018-01-03Spectre and Meltdown are publicly disclosed, earlier than the originally planned coordinated disclosure date of January 9, 2018, after details began leaking. — Spectre and Meltdown
- 2018-01-03Google Project Zero publishes Jann Horn's technical writeup, 'Reading privileged memory with a side-channel.' — Spectre and Meltdown
- 2018-01-04Major vendors including Microsoft, Amazon, and Google release initial patches and advisories in response to disclosure. — Spectre and Meltdown
- 2018-01-08Cyxtera Technologies acquires Immunity Inc.; Aitel becomes Cyxtera's Chief Security Technical Officer. — Dave Aitel
- 2018-02-15The U.S., UK, and Australian governments publicly attribute the NotPetya attack to Russia. — EternalBlue (CVE-2017-0144)
- 2018-02-15The United States, United Kingdom, and Australia issue coordinated statements attributing the NotPetya attack to the Russian military; the White House calls it 'the most destructive and costly cyber-attack in history.' — NotPetya
- 2018-02-21Co-founds the nonprofit Signal Foundation with Brian Acton and becomes the first CEO of Signal Messenger LLC. — Moxie Marlinspike
- 2018-02-25BMW vulnerability findings reported to BMW. — Keen Security Lab
- 2018-03Announces his departure from Google after almost 11 years. — Michal Zalewski
- 2018-03-09Openwall releases yescrypt 1.0.0, the password-hashing scheme he designed. — Solar Designer
- 2018-03-09BMW confirms all reported findings. — Keen Security Lab
- 2018-04Joins Snap Inc. as VP of Security & Privacy Engineering. — Michal Zalewski
- 2018-04Keen Security Lab publishes VMware guest-to-host escape research. — Keen Security Lab
- 2018-04-05CVE numbers reserved for BMW vulnerabilities. — Keen Security Lab
- 2018-05-22"Experimental Security Assessment of BMW Cars" publicly released, detailing 14 vulnerabilities (7 with CVEs) across BMW head units, TCUs, and gateway modules. — Keen Security Lab
- 2018-07Tenable completes its initial public offering on Nasdaq (ticker TENB) while Deraison serves as chief technology officer. — Renaud Deraison
- 2018-07Publication of iOS Multipath TCP exploitation research. — Keen Security Lab
- 2018-07Tenable completes its initial public offering on Nasdaq under the ticker TENB. — Nessus
- 2018-08Departed Facebook amid internal disputes over disinformation disclosure. — Alex Stamos
- 2018-08Discloses critical interaction-less vulnerabilities in WebRTC, PJSIP (WhatsApp), and FaceTime. — Natalie Silvanovich
- 2018-08Burp Suite Enterprise Edition released for continuous, pipeline-integrated DAST scanning. — Burp Suite
- 2018-08-04The hashcat team publicly discloses a new PMKID-based attack against WPA/WPA2-PSK Wi-Fi networks, discovered while researching WPA3. — Hashcat
- 2018-08-08Co-presents "The Unbearable Lightness of BMC's" with Matías Soler at Black Hat USA 2018, identified as Immunity's Vice President of Latin America. — Nicolas Waisman
- 2018-08-08Presented 'Breaking Parser Logic' at Black Hat USA 2018 (repeated at DEF CON 26). — Orange Tsai
- 2018-08-09Presented 'Practical Web Cache Poisoning' at Black Hat USA 2018, releasing the Param Miner Burp extension. — James Kettle
- 2018-08-23Co-authored the EFF post 'Don't Shoot the Messenger,' opposing reported government efforts to force Facebook to break Messenger encryption. — Nate Cardozo
- 2018-09Took a temporary break from Linux kernel maintenance and apologized for his conduct, as the project adopted a formal code of conduct. — Linus Torvalds
- 2018-09-27Repeats the BMC research talk at ekoparty 14 in Buenos Aires. — Nicolas Waisman
- 2018-10Left corporate employment. — Peter Van Eeckhoutte
- 2018-10-01Cisco completed its acquisition of Duo Security (~$2.35 billion), a firm where Lanier had previously worked as a researcher; no evidence found that Lanier himself joined Cisco. — Zach Lanier
- 2018-10-01Intel ships Coffee Lake-R processors with hardware-level mitigations for some Spectre/Meltdown variants. — Spectre and Meltdown
- 2018-10-25Announced she was stepping down as lead of Qubes OS and joining the Golem Project as Chief Strategy Officer and Chief Security Officer. — Joanna Rutkowska
- 2018-10-26Files, with five co-inventors, the U.S. patent application for an asset criticality-scoring system, later granted as US 11,258,817 (Feb. 2022), assigned to Tenable. — Renaud Deraison
- 2018-12-09Aircrack-ng 1.5.2 released (1.5 and 1.5.1 flagged by the project as skip-worthy, superseded by 1.5.2). — Aircrack-ng
- 2018-12-13Timothy C. May dies. — Cypherpunks
- 2018-12-19Volatility 2.6.1 is released, among the last major releases of the original (2.x) Python 2 codebase. — Volatility Framework
- 2018-12-28Files, with four co-inventors, the U.S. patent application for a threat-score prediction model, later granted as US 11,487,879 (Nov. 2022), assigned to Tenable. — Renaud Deraison
- 2019Founded and became director of the Stanford Internet Observatory. — Alex Stamos
- 2019Left IBM after roughly three years following the Resilient Systems acquisition. — Bruce Schneier
- 2019WhiteHat Security is acquired by NTT Security. — Jeremiah Grossman
- 2019As Principal Security PM Manager, revamped Microsoft's bug bounty programs for Windows, Azure, and Microsoft 365 alongside Senior Program Manager Jarek Stanley. — Kymberlee Price
- 2019Elected to the National Academy of Engineering. — Robert Tappan Morris
- 2019Disclosed vulnerabilities in Palo Alto Networks GlobalProtect, Fortinet FortiGate SSL VPN, Jenkins, and Pulse Secure SSL VPN (per DEVCORE's Chinese Wikipedia entry). — DEVCORE
- 2019HITCON CMT 2019 hosts the "Wall of Sheep" security-awareness exhibit, also used at DEF CON and Black Hat. — HITCON (Hacks In Taiwan Conference)
- 2019HelpSystems acquires Core Security, expanding its offensive-security portfolio; Cobalt Strike's ownership subsequently moves into the HelpSystems corporate family (the precise date Cobalt Strike itself changed hands is inconsistently reported across sources). — Cobalt Strike
- 2019Broadcom acquires Symantec's enterprise security business, including SecurityFocus. — Bugtraq
- 2019Delivers blockchain-security talks: "Evidence-driven Security Engineering," "Traditional Infosec for Blockchain Firms," and "What blockchain got right." — Dan Guido
- 2019-01Left Google to co-found the continuous-profiling startup Optimyze. — Halvar Flake
- 2019-01-07Published the EFF analysis 'Give Up the Ghost: A Backdoor by Another Name,' rebutting GCHQ's 'Ghost Protocol' proposal for accessing encrypted messaging. — Nate Cardozo
- 2019-02Founded Corelan Consulting bvba, becoming fully self-employed and focusing on Corelan Training. — Peter Van Eeckhoutte
- 2019-02-01Project Zero publishes a detailed analysis of a chain of iOS exploits found being used in watering-hole attacks. — Project Zero
- 2019-02-19Left EFF after roughly six and a half years as staff attorney to become Privacy Policy Manager at WhatsApp (Facebook). — Nate Cardozo
- 2019-03Tesla Model S Wi-Fi module vulnerabilities reported to Tesla. — Keen Security Lab
- 2019-03-05NSA publicly unveils Ghidra at the RSA Conference in San Francisco, releasing an initial binary build under Apache License 2.0. — Ghidra
- 2019-03-05The NSA publicly unveils Ghidra, a free alternative to IDA Pro, at the RSA Conference. — IDA Pro
- 2019-03-18Tencent Xuanwu Lab researchers disclose an XXE-to-remote-code-execution vulnerability chain in Ghidra. — Ghidra
- 2019-03-29"Experimental Security Research of Tesla Autopilot" published, covering adversarial lane-recognition and auto-wiper attacks and gamepad-based steering takeover. — Keen Security Lab
- 2019-04-04NSA publishes Ghidra's full source code on GitHub under the Apache 2.0 license. — Ghidra
- 2019-04-11Ecuador withdraws his asylum; UK police arrest him inside the embassy. — Julian Assange
- 2019-07-22Apple ships iOS 12.4, patching five of six interactionless iMessage vulnerabilities found by Silvanovich and Samuel Groß. — Natalie Silvanovich
- 2019-07-22Equifax reaches a settlement of up to $575-700 million with the FTC, CFPB, and U.S. states. — Equifax Data Breach
- 2019-08Presents 'Look, No Hands! The Remote, Interaction-less Attack Surface of the iPhone' at Black Hat USA. — Natalie Silvanovich
- 2019-08-07Presented 'HTTP Desync Attacks' at Black Hat USA 2019, popularizing HTTP request smuggling. — James Kettle
- 2019-08-07Publishes Project Zero blog post 'The Fully Remote Attack Surface of the iPhone.' — Natalie Silvanovich
- 2019-08-07Presented pre-auth RCE research on leading SSL VPNs at Black Hat USA 2019; the research won a 2019 Pwnie Award for Best Server-Side Bug. — Orange Tsai
- 2019-08-11Repeated the HTTP Desync Attacks talk at DEF CON 27. — James Kettle
- 2019-09-17Publishes his memoir, Permanent Record. — Edward Snowden
- 2019-10Attackers reportedly conduct an initial proof-of-concept modification of SolarWinds' build environment, an early step later identified during post-incident investigation. — SolarWinds / Sunburst Supply-Chain Attack
- 2019-10-17First public release of Volatility 3 (version 0.0.1) appears on PyPI, described as a complete rewrite of the framework. — Volatility Framework
- 2019-11CVE-2019-13581 and CVE-2019-13582 assigned for Tesla Wi-Fi module vulnerabilities. — Keen Security Lab
- 2019-11Kali Linux 2019.4 switches the default desktop environment from GNOME to Xfce. — Kali Linux
- 2019-11-19Swedish prosecutors definitively drop the investigation. — Julian Assange
- 2020The Ghidra Book: The Definitive Guide, co-authored with Kara Nance, published by No Starch Press. — Chris Eagle
- 2020Joined Amazon Web Services, working on the GuardDuty cloud threat detection team. — Marion Marschalek
- 2020Named CISO MAG Cybersecurity Person of the Year. — Mikko Hyppönen
- 2020Presents "DeFi Hacks and Future Threats." — Dan Guido
- 2020-01-02"Exploiting Wi-Fi Stack on Tesla Model S" published, detailing remote code execution via the Parrot Wi-Fi module. — Keen Security Lab
- 2020-01-25Aircrack-ng 1.6 released. — Aircrack-ng
- 2020-02-10U.S. Department of Justice indicts four members of China's People's Liberation Army on nine counts related to the breach. — Equifax Data Breach
- 2020-02-24Symantec reportedly stops approving new posts to Bugtraq. — Bugtraq
- 2020-03Attackers begin inserting the SUNBURST backdoor into SolarWinds Orion platform updates distributed to customers. — SolarWinds / Sunburst Supply-Chain Attack
- 2020-03-18Authors a GitHub Security Lab blog post on a CERT partnership for automated vulnerability remediation, identifying him as part of the GitHub Security Lab team. — Nicolas Waisman
- 2020-03-30"Experimental Security Assessment on Lexus Cars" published. — Keen Security Lab
- 2020-04-30Accenture Security completes acquisition of Symantec's Cybersecurity Services, including SecurityFocus/Bugtraq. — Bugtraq
- 2020-05-15YARA v4.0.1 is released. — YARA
- 2020-05-28Credited as a contributor to GitHub Security Lab's "Octopus Scanner" malware research. — Nicolas Waisman
- 2020-06Founded Granitt, a security consultancy for journalists and other at-risk individuals. — Runa Sandvik
- 2020-07-09Appears in a PortSwigger "Ask Me Anything" YouTube livestream billed as Burp Suite's creator. — Dafydd Stuttard
- 2020-08Kali Linux 2020.3 changes the default shell from Bash to ZSH. — Kali Linux
- 2020-08-05Presented 'Web Cache Entanglement: Novel Pathways to Poisoning' at Black Hat USA 2020. — James Kettle
- 2020-10-19The US Department of Justice indicts six officers of the GRU's Unit 74455 (Sandworm) on charges including conspiracy and computer fraud in connection with NotPetya and other destructive cyber operations. — NotPetya
- 2020-11-17Hired by Twitter as head of security, reporting to CEO Jack Dorsey. — Peiter "Mudge" Zatko
- 2020-12-08A group of former core contributors forks radare2 into Rizin, citing an unsustainable project environment. — radare2
- 2020-12-08FireEye discloses that it was breached and that attacker-stolen assets included its own red-team assessment tools; the company notifies U.S. authorities including the NSA. — SolarWinds / Sunburst Supply-Chain Attack
- 2020-12-13FireEye publishes technical research identifying trojanized SolarWinds Orion updates (SUNBURST) as the supply-chain attack vector; reports emerge that the U.S. Treasury and Commerce Departments were breached; CISA issues Emergency Directive 21-01 ordering federal civilian agencies to disconnect or power down affected Orion instances. — SolarWinds / Sunburst Supply-Chain Attack
- 2020-12-31Steps down as CTO of Immunity. — Dave Aitel
- 2021Co-founded the Krebs Stamos Group cybersecurity consultancy. — Alex Stamos
- 2021Posthumously inducted into the Internet Hall of Fame; Human Security established the Dan Kaminsky Fellowship in his honor. — Dan Kaminsky
- 2021-01Owner reportedly announces discontinuation of the Bugtraq mailing list, citing deprioritized resources; exact date and a possible reversal are inconsistently sourced. — Bugtraq
- 2021-01-05DEVCORE reported an Exchange Server vulnerability to Microsoft; the flaw chain was later exploited at scale and became known as ProxyLogon. — Orange Tsai
- 2021-01-05DEVCORE reported a Microsoft Exchange Server vulnerability to Microsoft, later part of the ProxyLogon exploit chain; Microsoft confirmed receipt on January 8, 2021. — DEVCORE
- 2021-01-05A joint statement from CISA, the FBI, the NSA, and the Office of the Director of National Intelligence assesses the campaign was 'likely Russian in origin.' — SolarWinds / Sunburst Supply-Chain Attack
- 2021-02-01Volatility 3 reaches version 1.0.0. — Volatility Framework
- 2021-04Demonstrated the 'ProxyShell' Exchange Server pre-authentication RCE chain at Pwn2Own Vancouver. — Orange Tsai
- 2021-04Founded Thistle Technologies, an IoT device security startup. — Window Snyder
- 2021-04-06Pwn2Own Vancouver 2021: DEVCORE Research Team exploited Microsoft Exchange Server and shared the Master of Pwn title in a three-way tie. — DEVCORE
- 2021-04-23Died in San Francisco at age 42; cause reported as diabetic ketoacidosis. — Dan Kaminsky
- 2021-04-26YARA v4.1.0 is released. — YARA
- 2021-05-12"Experimental Security Assessment of Mercedes-Benz Cars" published, covering the MBUX infotainment system. — Keen Security Lab
- 2021-05-25Testified before the U.S. House Committee on Science, Space, and Technology on vulnerability disclosure policy. — Katie Moussouris
- 2021-06-10FBI Director Christopher Wray publicly attributes the intrusion to Russia's SVR foreign intelligence service in congressional testimony. — SolarWinds / Sunburst Supply-Chain Attack
- 2021-07Capsule8 was acquired by Sophos. — Dino Dai Zovi
- 2021-07-27SpecterOps launches BloodHound Enterprise, a commercial SaaS attack-path-management platform, while continuing to support the open-source edition. — BloodHound
- 2021-08Presents 'Can You Hear Me Now?' at Black Hat USA, on remote eavesdropping vulnerabilities in Signal, Google Duo, and other apps. — Natalie Silvanovich
- 2021-08ProxyShell attack chain against Microsoft Exchange Server publicly detailed following responsible disclosure, building on the Pwn2Own 2021 research; DEVCORE's broader 2021 Exchange research is described as encompassing eight vulnerabilities across the ProxyLogon, ProxyOracle, and ProxyShell chains. — DEVCORE
- 2021-08-05Presented 'HTTP/2: The Sequel is Always Worse' at Black Hat USA 2021. — James Kettle
- 2021-08-05Presented 'ProxyLogon is Just the Tip of the Iceberg' at Black Hat USA 2021; the research won a 2021 Pwnie Award for Best Server-Side Bug. — Orange Tsai
- 2021-08-25Identified as "Lookout founder Kevin Mahaffey" while angel-investing in incident-response startup BreachQuest's $4.4 million seed round. — Kevin Mahaffey
- 2021-11-02Elastic completed its acquisition of Optimyze; Dullien joined Elastic. — Halvar Flake
- 2021-11-24Chen Zhaojun of Alibaba Cloud Security Team privately reports the JNDI lookup RCE vulnerability to the Apache Software Foundation. — Log4Shell (CVE-2021-44228)
- 2021-12Appointed to CISA's Cybersecurity Advisory Committee. — Jeff Moss
- 2021-12Serving as Senior Director, Product Security at New Relic; published customer guidance on the Apache Log4j vulnerabilities. — Kymberlee Price
- 2021-12Project Zero publishes a technical breakdown of the FORCEDENTRY iMessage exploit chain used by NSO Group's Pegasus spyware. — Project Zero
- 2021-12-06Snort 2.9.19.0 is released, the final release in the legacy Snort 2.x branch. — Snort
- 2021-12-09Vulnerability details and exploit code become public; Apache releases Log4j 2.15.0 with an initial fix; mass internet-wide exploitation begins within hours. — Log4Shell (CVE-2021-44228)
- 2021-12-10CVE-2021-44228 is published with a maximum CVSS v3.1 score of 10.0 (critical). — Log4Shell (CVE-2021-44228)
- 2021-12-14CVE-2021-45046 is disclosed after the 2.15.0 fix is found incomplete in certain non-default configurations; fixed in Log4j 2.16.0. — Log4Shell (CVE-2021-44228)
- 2021-12-18CVE-2021-45105, a denial-of-service flaw via uncontrolled recursion in self-referential lookups, is disclosed; fixed in Log4j 2.17.0. — Log4Shell (CVE-2021-44228)
- 2022Publishes infrastructure/challenge code for the DEF CON 30 CTF finals' "LiveCTF" event. — Chris Eagle
- 2022Rumble, Inc. renamed runZero, Inc., with Moore continuing as founder and CEO. — H. D. Moore
- 2022F-Secure splits into F-Secure and WithSecure; Hyppönen continues as Chief Research Officer at WithSecure. — Mikko Hyppönen
- 2022Named Pwn2Own 'Master of Pwn' at Pwn2Own Toronto. — Orange Tsai
- 2022Hex-Rays is acquired by an investor consortium led by Smartfin for a reported 81 million euros. — IDA Pro
- 2022-01Publishes 'Practical Doomsday: A User's Guide to the End of the World'. — Michal Zalewski
- 2022-01Fired from Twitter; the company cites poor performance. — Peiter "Mudge" Zatko
- 2022-01-04CVE-2021-44832, a JDBC Appender RCE requiring configuration-write access, is published to the GitHub Security Advisory database; fixed in Log4j 2.17.1. — Log4Shell (CVE-2021-44228)
- 2022-01-10Steps down as CEO of Signal, remaining on its board. — Moxie Marlinspike
- 2022-01-12Volatility 3 reaches version 2.0.0. — Volatility Framework
- 2022-03TA Associates acquired Veracode at a $2.5 billion valuation. — Chris Wysopal
- 2022-03Leaked internal chat logs from the Conti ransomware gang, reported by journalist Brian Krebs, reveal the group paid roughly $60,000 to covertly obtain a licensed copy of Cobalt Strike through a front company, since it is sold only to vetted customers. — Cobalt Strike
- 2022-05-04Ben Hawkes departs as manager of Project Zero. — Project Zero
- 2022-05-10Aircrack-ng 1.7 released after more than two years of development, with 400+ commits of changes. — Aircrack-ng
- 2022-06Bit Discovery is acquired by Tenable. — Jeremiah Grossman
- 2022-07Files a whistleblower disclosure with the SEC, DOJ, FTC and congressional committees regarding Twitter. — Peiter "Mudge" Zatko
- 2022-07Departed WhatsApp/Facebook to join Google as Senior Staff Privacy Engineer, working on end-to-end encryption for Android. — Nate Cardozo
- 2022-08-23Whistleblower complaint becomes public after being reported by The Washington Post and CNN. — Peiter "Mudge" Zatko
- 2022-09-13Testifies before the U.S. Senate Judiciary Committee about Twitter's security practices. — Peiter "Mudge" Zatko
- 2022-09-26Russian President Vladimir Putin grants Snowden Russian citizenship. — Edward Snowden
- 2022-11HelpSystems rebrands as Fortra. — Cobalt Strike
- 2022-12HackerOne reports that researchers on its platform have been paid over $230 million in bounties cumulatively. — Alex Rice
- 2022-12-06Pwn2Own Toronto 2022: DEVCORE compromised a MikroTik RouterBoard device (SOHO Smash-up, $100K award), an HP Color LaserJet Pro M479fdw printer, and a Sonos One smart speaker. — DEVCORE
- 2022-12-06Project moves community support from its legacy forum to GitHub Discussions. — Aircrack-ng
- 2023Published a Spanish-language cybersecurity book and helped launch Ekoparty's 'Programa Futuro Hacker' school outreach program. — Cesar Cerrudo
- 2023Presents 'How to Hack Shannon Baseband (from a Phone)' at REcon. — Natalie Silvanovich
- 2023Joins CIQ's Rocky Linux Security effort. — Solar Designer
- 2023Disclosed a MikroTik RouterOS remote code execution vulnerability (per DEVCORE's Chinese Wikipedia entry). — DEVCORE
- 2023Offensive Security releases Kali Purple, a defensive-security-oriented variant structured around the NIST Cybersecurity Framework. — Kali Linux
- 2023-01-18Nessus 8.15.8 is released (documented stable release). — Nessus
- 2023-03-31The U.S. District Court for the Eastern District of New York issues a court order, sought jointly by Microsoft, Fortra, and Health-ISAC, authorizing takedown action against infrastructure built on cracked, legacy copies of Cobalt Strike. — Cobalt Strike
- 2023-04-06Microsoft publicly details the joint action, naming Conti and LockBit among groups that abused cracked Cobalt Strike copies and linking such abuse to the 2021 ransomware attack on Ireland's Health Service Executive. — Cobalt Strike
- 2023-04-26Lookout sells its consumer cybersecurity business to F-Secure for about $223 million, becoming an enterprise-only company under CEO Jim Dolce. — Kevin Mahaffey
- 2023-05-15Reports 'Zenbleed' (CVE-2023-20593), a data-leak vulnerability in AMD Zen 2 processors. — Tavis Ormandy
- 2023-07-12Appeared as a guest on the Security Conversations (Three Buddy Problem) podcast discussing her career at the Microsoft Security Response Center. — Kymberlee Price
- 2023-07-16Dies at 59 from pancreatic cancer. — Kevin Mitnick: A Complete History
- 2023-08-12Presented 'Smashing the State Machine: The True Potential of Web Race Conditions' at DEF CON 31. — James Kettle
- 2023-09-15YARA v4.4.0 is released. — YARA
- 2023-11SentinelOne acquired Krebs Stamos Group; Stamos became SentinelOne's Chief Trust Officer. — Alex Stamos
- 2024Completed a four-year tenure on the AWS GuardDuty team. — Marion Marschalek
- 2024Researcher Angelboy named to Microsoft's MSRC 2024 Most Valuable Security Researchers list (#33 overall, #9 in the Windows category), per DEVCORE's own site. — DEVCORE
- 2024HITCON marks its 20th anniversary; CMT held at Academia Sinica, Taipei, under the theme "Mind Meld: Hacker Spirit from Human to AI," with a keynote by Saumil Shah. — HITCON (Hacks In Taiwan Conference)
- 2024VirusTotal introduces YARA-X, a Rust-based reimplementation of YARA focused on performance, safety, and rule compatibility. — YARA
- 2024-01-18Appointed senior advisor and chairman of SecurityScorecard's Corporate Advisory Board, and joins its Cybersecurity Advisory Board. — Renaud Deraison
- 2024-02-12Bugcrowd raises $102 million in funding, reporting a community of more than 500,000 security researchers. — Casey Ellis
- 2024-03Pwn2Own Vancouver 2024: DEVCORE reported compromising Windows 11 via CVE-2024-35250 and CVE-2024-30084 (per DEVCORE's own site). — DEVCORE
- 2024-03Cisco launches SnortML, an open-source machine-learning detection engine for Snort 3. — Snort
- 2024-03-28Dies unexpectedly at home in Cambridge at age 67. — Ross Anderson
- 2024-04-30Publishes the book Windows Security Internals through No Starch Press. — James Forshaw
- 2024-06PortSwigger raises $112 million in its first outside funding round after years of bootstrapped growth; Stuttard remains a listed director. — Dafydd Stuttard
- 2024-06PortSwigger raises $112 million in its first external funding round. — Burp Suite
- 2024-06-26Pleads guilty in US federal court to one Espionage Act conspiracy count; sentenced to time served and returns to Australia. — Julian Assange
- 2024-07Fortra and Europol conduct 'Operation Morpheus,' disrupting roughly 600 IP addresses across 27 countries tied to criminal Cobalt Strike infrastructure. — Cobalt Strike
- 2024-08-08Appointed Chief Information Officer of DARPA. — Peiter "Mudge" Zatko
- 2025Steps down as a spokesperson for the Chaos Computer Club. — Frank Rieger
- 2025HITCON CMT held under the theme "Perimeter Security is Dead, Long Live Resilience," focused on cyber resilience and critical-infrastructure security. — HITCON (Hacks In Taiwan Conference)
- 2025-01Stephen Vintz and Mark Thurmond are appointed interim co-CEOs of Tenable, with Art Coviello named chairman. — Nessus
- 2025-02Founded Hack & Cheese, an independent reverse-engineering consulting and training practice in Portland, Oregon. — Marion Marschalek
- 2025-05-16The original volatility (2.x) GitHub repository is archived; development consolidates fully into Volatility 3. — Volatility Framework
- 2025-06-03Announces departure after 34 years to join Sensofusion as Chief Research Officer. — Mikko Hyppönen
- 2025-06-04YARA-X reaches a stable 1.0.0 release; VirusTotal announces the original YARA project enters maintenance mode, limited to critical bug fixes and security patches. — YARA
- 2025-09-09Joins the strategic council of French cybersecurity vendor Sekoia.io as an independent board member. — Renaud Deraison
- 2025-09-12Date of last update on the current Packet Storm Security, LLC Terms of Service document (packetstorm.news / packetstormsecurity.com). — Packet Storm Security
- 2025-10-10Leaves Google. — Tavis Ormandy
- 2026Delivered a MIPS reverse-engineering workshop at the Recon security conference. — Marion Marschalek
- 2026DEVCORE continues public activity, including a 2026 '/dev/meet' Red Team AMA and an ongoing internship program noted on its own blog. — DEVCORE
- 2026-03-01Died; his death was announced publicly by Recurity Labs. — Felix "FX" Lindner
- 2026-03-31Publishes "How we made Trail of Bits AI-Native (so far)" on the company blog. — Dan Guido
- 2026-07-28YARA v4.5.8 maintenance release addresses build issues and memory-safety fixes in PE, ELF, and .NET parsing modules. — YARA
- 2026-08-06Jonathan Brossard reportedly announces acquisition of the SecurityFocus and Bugtraq name (per Wikipedia edit history and wire syndication; not yet confirmed by primary security trade press). — Bugtraq
- 2026-08-07Bugtraq is reported to relaunch as an independently operated, community-driven mailing list at DEF CON 34 in Las Vegas. — Bugtraq
- 2026-10-07Ekoparty's 22nd Buenos Aires edition is scheduled to begin, running through October 9, 2026, under the theme 'Embrace the Chaos,' alongside a parallel Ekoparty Miami edition. — Ekoparty