They Did Not Steal Passwords. They Stole the Map of Who to Attack Next.
Alleged Entra directory theft exposed organisational maps rather than passwords. Treat bulk directory reads as a high-impact identity event.
Data Security
The Private Keys Were Safe. The Address of the Person Holding Them Was Not.
SafePal says private keys and funds were not exposed, but order records linked wallet ownership to names, contact details and home addresses.
France Thought It Had a Staff-Data Breach. The Same Incident May Have Reached Millions of Students.
France’s Education Ministry is testing whether a breach first described as staff-only reached student records across a fragmented national data estate.
The Attack Needed No Exploit. ‘Anonymous’ Already Had Read Access.
ExfilSquad’s leaked data points to exposed Dataverse records, not a confirmed Dynamics exploit. Anonymous low-code permissions can be the entire breach path.
MyDr May Have Exposed Data on Half of Poland. The Concentration Risk Is the Bigger Story.
MyDr cannot yet confirm the breach scope, while officials cite nearly 19 million people. The platform concentration risk is already clear.
The Core Platform Wasn’t Breached. 1.6 Million People Were Still Exposed.
RingCentral’s core platform was not breached, yet 1.6 million people were exposed. The incident shows why organisational security extends beyond production infrastructure.
Your BI Dashboard May Be Holding the Keys to Your Databases
Business intelligence platforms are rarely treated like privileged infrastructure. They sit behind dashboards, charts and reports. They are used by analysts, managers and finance teams. They do not look like identity systems, hypervisors or database servers, so they are often…