Breach Autopsy: 23andMe Turns Credential Stuffing Into Genetic Data Governance
The 23andMe settlement turns credential stuffing into a governance test for genetic-data platforms.
incident-response
Breach Autopsy: EY Shows Support Tickets Are a Data Store
EY's support-system breach shows why ticketing platforms are data stores, not operational exhaust.
Breach Autopsy: Abbott Shows Legacy Healthcare Systems Carry Their Own Blast Radius
Abbott's two-incident investigation shows why healthcare breach scope depends on legacy systems, portals, and inherited data boundaries.
The Docket: Treasury Just Named the Ransomware Supply Chain
Treasury's First VPN sanctions show ransomware enforcement is moving upstream to infrastructure, evasion tools, and evidence trails.
The Docket: SonicWall SMA1000 Shows the Edge Appliance Is an Administrative Control Plane
CISA's SonicWall deadline shows edge appliance response is an evidence problem, not just a patch ticket.
The Docket: RabbitMQ Shows Message Brokers Are Identity Boundaries Now
RabbitMQ's patched OAuth and authorization flaws show why message brokers now belong in the identity risk boundary.
The Docket: CISA's GitHub Leak Shows Incident Response Needs Its Own Playbook
CISA's cloud-key leak shows why incident response must cover public repositories, contractor access, logs, and key rotation.