2 verified briefings on Security Breach. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
Attackers breached Dashlane's systems and downloaded fewer than 20 encrypted user password vaults. While the data remains encrypted, the incident highlights a vulnerability in the company's API that allowed for a coordinated brute-force campaign.
A CISA contractor exposed highly sensitive credentials on a public GitHub repository. The leak included access keys to AWS GovCloud accounts and internal CISA systems, along with details on the agency's internal software development and deployment processes, marking a significant government data breach.