09/28/2026
Quick question: if somebody on your team accidentally posted a password online and then deleted it, would you be worried?
You should be. š¬
That's exactly how an attacker wiped out a company's Azure cloud this month. The "deleted" secret was still sitting in the edit history.
I wrote up this week's big security stories and the one lesson tying them all together, plus a short to-do list for small businesses. No jargon soup, I promise.
Somebody pasted a client secret into a public GitHub issue.
