credential harvesting
2 posts
Article
The LinkedIn leak is not a privacy incident
A LinkedIn data leak is not a privacy event. It is pre-staged targeting data for credential harvesting. Operator briefing on what must now be true.
Article
A single compromised email led to 7.7TB of LAPD data exfiltration - here's what telemetry actually showed
A compromised admin email led to 7.7TB of LAPD data exfiltration. No exploit, no payload - just valid API access and unmonitored behavior. What telemetry actually showed.