HOW A FORGOTTEN INTERNAL TOOL LED TO A PRODUCTION BREACH—AND HOW TO PREVENT IT

Summary from the TLDR InfoSec newsletter

A leaked password gave an attacker access to an internal tool—with permissions that reached all the way to production. The root cause? No fine-grained access control. Explore what went wrong—and how to prevent it—with Oso's Nightmares of Authorization series [11].