phishing
4 posts
Article
One PIN unlocks the vault
Vaultjacking turns one captured PIN into full retrieval of a Google Password Manager vault. Operator breakdown of the control collapse.
Article
Microsoft issued a login code no one requested
A single-use Microsoft code arriving unrequested is evidence an identity boundary acted without its owner - a control that must be verified, not trusted.
Article
Microsoft sent you a code you didn't request
An unrequested Microsoft single-use code email is evidence of external interaction with your identity surface. What it proves and what it does not.
Article
European Commission AWS Compromise: Identity Boundary Failure Confirmed
Analysis of the European Commission AWS compromise reveals a confirmed failure in identity boundary enforcement. Credential harvesting via phishing led to direct access using valid elevated credentials, exposing systemic gaps in cloud authentication controls.