Sisense:
Attackers breached Sisense via a leaked credential, exfiltrating terabytes of customer data, including access tokens and passwords, prompting a CISA-issued security alert.
Microsoft:
Microsoft’s AI team accidentally exposed 38TB of private data, including secrets and internal messages, due to misconfigured Azure SAS tokens.
Cloudflare:
Attackers breached Cloudflare’s Atlassian suite using two unrotated credentials stolen from Okta’s support system, despite Cloudflare rotating 5,000 exposed credentials.