#saas

3 articles

One machine in Germany has been quietly reading company support portals since March 2025

2026-08-19Security

Reco has tracked a single IP walking Salesforce and ServiceNow customer portals across telecoms, banks, software vendors and government. No exploit was involved: the guest user on those public sites could already read more than the site needed to show. One target logged over 560,000 events from that one address.

His contract ended on 10 December. The extortion emails started on the 11th.

2026-08-18Security

Cameron Curry emailed dozens of Brightly Software employees demanding $2.5 million in crypto, with a $100,000 monthly escalation. The company paid $7,540 before reporting it. He got two years.

Backup codes will not save you: two of the three ways 'Sign in with Google' fails are not yours to fix

2026-08-17Security

The viral advice is recovery codes and a backup email. That covers losing your own account. It does nothing about someone buying your dead employer's domain and inheriting your Slack, or about accounts an admin cannot deprovision at all.