Salesforce, Klue, and the OAuth Token Nobody Was Watching
Summary: A vendor called Klue lost control of a GitHub token. That single lapse ended up exposing Salesforce data of its customers. Here is what...
read more
Resources
When a Data Breach Becomes a National-Scale Risk
Large data breaches are often framed as corporate failures—an unfortunate but contained problem for a single company to...
Why DNS TXT Records Deserve Governance in Security Programs
DNS TXT records play a critical role in modern cloud environments. They underpin email authentication, domain ownership...
5 Misconfigurations Hackers Hope Retailers Never Fix
If hackers had a holiday wish list, these five misconfigurations would be right at the top. And as the recent Petco...
A Recap of 2025 Breaches and an Outlook for 2026 Security Priorities
2025 didn’t give us a single “big breach story.” It gave us repeated variations of the same theme. From misconfigured cloud...
The Lesson Behind the GitLab Leak and Why Credentials Keep Slipping Through
When a security researcher scanned every public GitLab Cloud repository—more than 5.6 million projects—he uncovered over...
The Breach That Did Not Need a Hacker: How Ordinary Identity Gaps Create Extraordinary Damage
Security teams spend enormous time preparing for attackers who exploit zero-days, break through firewalls, or launch...