Act two · fragile on its own
No agent required: it falls over on its own.
20 October 2025
AWS US-East-1
0+ hours
A DNS race condition in DynamoDB's control plane, and thousands of services with it.
18 November 2025
Cloudflare
2× file size
A configuration file that doubled after a permissions change, and for a few hours much of the web.
July 2025
ToolShell, SharePoint
0+ orgs
Unauthenticated code execution; compromised before a patch existed. A zero-day dissolves every control in its path.
Facing the internetProbed constantly, so it hardens. It has antibodies.
Behind the firewallNever met an adversary. An agent inside, even a benign one, is the first adversarial-shaped thing it meets.
ThousandEyes, AWS outage analysis · Cloudflare post-mortem, 18 November 2025 · Palo Alto Unit 42, ToolShell threat brief