by cyvocate.com

Our Work / Case Studies

Case Study: Preventing Large-Scale Financial Fraud in a Payment Platform

Case Study: Web3 Payment Spoofing Vulnerability

Session Hijack via Chained Vulnerabilities (XSS + WAF Bypass + SSTI)

Improper Authorization via Response Manipulation

Client-Side Trust of Sensitive API Response

Major Case Studies

Star Health Insurance – Data Breach (May 2025)

Bank Sepah – State-Sponsored Cyberattack (March 2025)

Coinbase – Insider Threat Breach (May 2025)

Marks & Spencer – Retail Cyberattack (April 2025)

United Natural Foods Inc. (UNFI) – Supply Chain Attack (June 2025)

TeleMessage – Government Communication Breach (May 2025)

PowerSchool – Educational Data Breach (January 2025)

Change Healthcare – Ransomware Attack (February 2024)

AT&T – Data Breach (April 2024)

T-Mobile – Multiple Data Breaches (2024)