breach analysis
The Canvas Breach Shows What Happens When SaaS Platforms Become Identity Infrastructure
6 min readThe breach involving Instructure, the company behind the Canvas learning management system used by thousands of schools and universities worldwide, arrived at a particularly bad moment for educational institutions. Final ...
How a Long-Lived API Credential Let an AI Agent Delete Production Data
4 min readWhat began as a routine staging task for a SaaS startup ended in a disaster that would have been unthinkable just months ago: an AI agent operating as a super ...
The Trivy Compromise: The Fallacy of Secrets Management and the Case for Workload Identity
6 min readThe Trivy incident exposed a credential architecture failure, not just a supply chain one. Here’s the case for workload identity and access. The post The Trivy Compromise: The Fallacy of ...
How a Single Overprivileged Service Turned the LexisNexis Breach Into a Keys-to-the-Kingdom Moment
3 min readLegal AI solutions provider LexisNexis has confirmed a massive breach of its AWS environment According to reports, initial access was gained by exploiting the “React2Shell” vulnerability in an unpatched React ...
Agents Aren’t People: What the ServiceNow Vulnerability Reveals About Agentic AI Access Control
3 min readEnterprise security teams are beginning to encounter a category of access failure that feels unfamiliar only because its consequences arrive faster than expected. Systems that once required multiple steps, approvals, ...
CrewAI GitHub Token Exposure Highlights the Growing Risk of Static Credentials in AI Systems
3 min readAs AI platforms grow more complex and interdependent, small failures can cast long shadows. That’s what happened inside the open-source CrewAI platform, where a vulnerability in its error-handling logic surfaced ...
Anthropic’s AI-Run Attack and What It Means for Agentic Identity
6 min readAnthropic's disclosure of an AI-driven espionage campaign it halted is best understood as a faster, more persistent version of patterns the industry has seen before. What distinguishes this incident is ...
Red Hat’s GitLab Breach and the Cost of Embedded Credentials
3 min readOpen-source software giant Red Hat has confirmed that one of its GitLab instances, dedicated to consulting engagements, was breached. The attackers, a group calling itself “Crimson Collective,” claim to have ...
When Salesforce Becomes a De Facto Credential Repository: Lessons from the Drift OAuth Breach
3 min readThis malicious campaign demonstrates how long-lived token theft can become the first step in a much broader breach. The post When Salesforce Becomes a De Facto Credential Repository: Lessons from ...
Vault Fault: Secrets Managers and the Limits of Centralized Trust
3 min readRecent flaws in Conjur and Vault highlight the risks of concentrating trust in a single repository – and why workload IAM may offer a more resilient path forward. The post ...
