7 replies

1. Eric Portis Bluesky 11 min later

   On the “””plus””” side, we are unearthing some random SaaS dependencies that nobody at the company still has admin credentials for. We’re turning unknown unknowns into known unknowns and ya know—that’s progress 🙃

   1. Zach Leatherman Bluesky 20 min later

      yay! …wait

2. Zach Leatherman Mastodon 19 min later

   anyway, it’s particularly juicy that the original compromise came from trying to cheat at roblox? https://www.infostealers.com/article/breaking-vercel-breach-linked-to-infostealer-infection-at-context-ai/

   1. cthos 🐱 Mastodon 1 hr later

      @zachleat Infinite attack surface as a service strikes again!

      1. Zach Leatherman Mastodon 2 hr later

         @cthos can I interest you in my root password

         1. cthos 🐱 Mastodon 2 hr later

            @zachleat Already got it, but I appreciate the willingness to hand it over.

3. Zach Leatherman Bluesky 20 min later

   anyway, www.infostealers.com/article/brea...