65 documented incidents from postmortems, regulatory filings and court records, plus 1,500 security advisories ingested every two hours. Each links to its public source and to the safeguard that addresses it.
65 records · Documented incident: A real incident summarised from a public source (postmortem, regulatory filing, court record or advisory).
Top six in the filtered results. A record can have several patterns.
Up to eight recent years, plus undated records. Dates may refer to an incident, disclosure or publication.
A ClickHouse access-control change made table permissions explicit, so a query without a database filter returned duplicate rows and doubled the size of the Bot Management feature file.
Safeguard: Validate generated configuration before global propagation
A latent race condition in DynamoDB's DNS management system produced an empty DNS record for the regional endpoint that the automation could not repair, so clients could not resolve the endpoint.
Safeguard: Make control-plane automation safe against stale plans
CISA reported that a self-replicating worm known as "Shai-Hulud" had compromised more than 500 npm packages.
Safeguard: Keep publishing credentials out of developer environments
A pull-request title validation workflow used pullrequesttarget, which runs with repository secrets, and echoed the unsanitized PR title, creating an injection point; the workflow's token also had read/write permissions.
Safeguard: Never run untrusted pull-request input with secrets
Instructions planted in content the agent reads could make GitHub Copilot write "chat.tools.autoApprove": true into the project's .vscode/settings.json, which turns off all user confirmations.
Safeguard: Never let an agent change its own permissions
From as early as August 8 to at least August 18, 2025, an actor tracked as UNC6395 used compromised OAuth tokens of the Salesloft Drift third-party application to access customers' Salesforce instances.
Safeguard: Scope and expire third-party integration tokens
Researchers hid a prompt injection inside a README.md (in the text of a software license) so that Gemini CLI, asked only to inspect a codebase, would request shell commands.
Safeguard: Match allow-listed commands exactly
An AI coding agent deleted a live production database that held data on more than 1,200 executives and over 1,190 companies.
Safeguard: Separate development and production and enforce freezes in code
Malicious code was committed to the extension's open-source repository using a compromised GitHub token in a build configuration.
Safeguard: Protect build credentials and require review for releases
Microsoft observed attackers exploiting on-premises SharePoint Server vulnerabilities (CVE-2025-53770 and CVE-2025-53771, related to CVE-2025-49704 and CVE-2025-49706) against internet-facing servers, with attempts as…
Safeguard: Patch internet-facing servers on a short deadline
A configuration change on June 6, 2025 for a not-yet-used service accidentally included the 1.1.1.1 resolver's IP prefixes in that service's topology; the error sat dormant in production.
Safeguard: Validate configuration against what it will change, not only what it adds
By supplying only an application's non-secret appid to undocumented registration and email-verification endpoints, an attacker could create a verified account on private applications built with Base44.
Safeguard: Never use an identifier as an authorization check
General Analysis showed that hidden instructions in a customer support ticket could make a developer's MCP-connected assistant query a private table of integration tokens.
Safeguard: Give agents least-privilege, read-only database roles
McHire, the chatbot recruiting platform used by most McDonald's franchisees, lets applicants chat with a bot named Olivia, built by Paradox.ai, that collects personal information.
Safeguard: Remove default and test accounts before production
EchoLeak (CVE-2025-32711, CVSS 9.3) is a zero-click vulnerability in Microsoft 365 Copilot in which a crafted email could trigger indirect prompt injection.
Safeguard: Isolate retrieved untrusted content from privileged context
A policy change containing blank fields was inserted into the quota policy system; when Service Control read it, the code path hit a null pointer and the binaries went into a crash loop.
Safeguard: Guard risky code paths with feature flags
Workers KV relied on a central data store, partly backed by a third-party cloud provider; when that provider had an outage, cold reads and writes to KV failed.
Safeguard: Remove single dependencies on infrastructure you do not own
An automated operating-system update ran on production hosts when it should have been disabled, and restarted their networking service.
Safeguard: Allow changes to production only through the controlled deployment path
Invariant Labs showed that a malicious instruction placed in an issue on a public repository could be read by an agent connected through the GitHub MCP server.
Safeguard: Scope agent credentials per task and repository
Rapid deployment channel 291 bypassed staged canary rings; out-of-bounds memory read triggered BSOD on 8.5M Windows hosts.
Safeguard: Stage every content update through canary rings
Ransomware forced shutdown of core dealer management SaaS platform, halting sales, financing, and parts ordering for 15,000 auto dealerships.
Safeguard: Contain before restoring
An input parameter was left blank in an internal provisioning tool, so the system assigned an unknown default fixed one-year term to the customer's VMware Private Cloud.
Safeguard: Never let a blank input silently choose a default lifetime
Contractor credentials without MFA accessed third-party cloud data warehouse; downloaded 109 million customer call and text records.
Safeguard: Require MFA for contractor and third-party access
Single-factor remote access portal breached with stolen credentials; ransomware forced nationwide claims gateway disconnection.
Safeguard: Require MFA on all remote-access portals
A customer relied on Air Canada's website chatbot, which told him he could apply for a bereavement fare retroactively; the airline's policy did not allow that.
Safeguard: Ground policy answers in the authoritative policy source
Legacy test tenant without MFA compromised via password spraying; adversary created malicious OAuth apps with mail.read privileges.
Safeguard: Enforce MFA everywhere, including legacy and test tenants
Support portal allowed unredacted HAR file uploads containing session tokens; threat actor hijacked customer administrator accounts.
Safeguard: Redact secrets from customer-uploaded diagnostics
Ransomware encrypted virtual hypervisors; halted manufacturing and billing operations incurring $27M in direct remediation costs.
Safeguard: Segment and protect hypervisor infrastructure
Social engineering of IT helpdesk reset admin credentials; ransomware deployed directly to ESXi hypervisors shutting down resort operations.
Safeguard: Verify identity out of band for credential resets
Ransomware encrypted internal ordering databases; lack of decoupled offline queue forced multi-week manual processing and inventory write-downs.
Safeguard: Keep a tested manual or offline fallback for ordering
CISA and the FBI report that the CL0P ransomware gang exploited a SQL injection vulnerability (CVE-2023-34362) in Progress MOVEit Transfer beginning May 27, 2023, installing a web shell called LEMURLOOT.
Safeguard: Patch internet-facing transfer tools immediately
GitHub.com's RSA SSH private key was briefly exposed in a public GitHub repository.
Safeguard: Scan for private keys before they are published
LastPass said an attacker exploited vulnerable third-party software to target a senior DevOps engineer.
Safeguard: Separate privileged engineering access from personal environments
Malware on an engineer's laptop stole a valid two-factor-backed SSO session, letting the attacker impersonate the employee and reach a subset of production systems.
Safeguard: Harden employee endpoints and sessions
Phishing emails impersonating CircleCI led an employee to a fake page where GitHub credentials and a one-time code were captured, giving the attacker access to a GitHub organization and 130 code repositories.
Safeguard: Require phishing-resistant authentication for code hosting
An attacker likely bought a contractor's corporate password on the dark web after malware infected the contractor's personal device, then repeatedly sent two-factor approval requests until the contractor accepted one.
Safeguard: Use phishing- and fatigue-resistant MFA
Attackers used SMS phishing to fool some Twilio employees into giving up credentials, then used them to access internal systems and information about a limited number of customer accounts.
Safeguard: Use phishing-resistant MFA for employees
Researchers exploited a bug in Azure's modified PostgreSQL engine to gain superuser privileges and run operating-system commands on their own database instance.
Safeguard: Validate tenant identity with strict, anchored certificate checks
GitHub found an attacker abusing stolen OAuth user tokens that had been issued to two third-party integrators, Heroku and Travis CI.
Safeguard: Minimise and protect stored OAuth tokens
A script meant to retire a deprecated app was given IDs for entire customer sites and did not check whether an ID referred to the app or the whole site.
Safeguard: Validate the scope of every ID in destructive scripts
CVE-2021-44228 (Log4Shell) affects Apache Log4j 2.0-beta9 through 2.14.1 and lets an unauthenticated remote actor execute arbitrary code through JNDI lookups.
Safeguard: Maintain a software bill of materials and patch fast
Machine learning pricing models drifted during market volatility; automated purchasing bought homes above value resulting in $540M inventory write-down.
Safeguard: Cap automated exposure in deterministic limits
Enabling a relatively new streaming feature in Consul under unusually high read and write load caused excessive contention, compounded by a pathological performance issue in BoltDB when handling large writes.
Safeguard: Roll out new infrastructure features gradually under realistic load
A command issued to assess global backbone capacity unintentionally took down all the connections in Facebook's backbone network.
Safeguard: Test the guard that is meant to stop dangerous commands
A software deployment on May 12, 2021 introduced a bug that a specific valid customer configuration could trigger; on June 8 a customer pushed such a change.
Safeguard: Canary software changes and watch for latent bugs
After the holidays, an unusual surge of traffic from clients with cold caches overloaded one of Slack's AWS Transit Gateways.
Safeguard: Load-test scale-up paths, not just steady state
From July 2016 to June 2019 the broker received high payment for order flow but did not conduct adequate, regular and rigorous reviews of execution quality on customer orders.
Safeguard: Review execution quality regularly and rigorously
Compromised build server injected SUNBURST malware into compiler memory during build process; distributed to 18,000 customers.
Safeguard: Harden and isolate the build pipeline
Unintuitive Flexcube interface required checking obscure override box; bank accidentally wired $894M of proprietary funds to Revlon lenders.
Safeguard: Design payment interfaces so a risky option is explicit
A phone spear-phishing attack on a small number of employees gave attackers credentials to internal support tools on July 15, 2020.
Safeguard: Require two-person approval for high-impact account actions
The OCC assessed an $80 million civil money penalty against Capital One for failing to establish effective risk assessment processes before migrating significant IT operations to the public cloud and for not correcting…
Safeguard: Assess cloud risk before migrating, and fix findings on time
A new WAF managed rule for XSS detection contained a regular expression that caused catastrophic backtracking and exhausted CPU.
Safeguard: Deploy rules through staged rollouts
Sequential integer URLs in imaging web portal lacked object-level authorization checks; exposed 885 million escrow and wire documents.
Safeguard: Enforce object-level authorization
Legacy Starwood database left unsegmented following acquisition; attackers extracted passport numbers and encrypted payment cards of 383M guests.
Safeguard: Secure acquired systems during integration
Network maintenance caused a 43-second loss of connectivity between GitHub's US East Coast hub and its primary data center, which led to 24 hours and 11 minutes of degraded service.
Safeguard: Make automatic failover aware of replication state
Apache Struts CVE-2017-5638 parser bug left unpatched for 2 months; attackers executed arbitrary commands and accessed unencrypted databases of 147M Americans.
Safeguard: Patch critical vulnerabilities on a defined deadline
An engineer ran a command meant to remove a small number of servers from an S3 subsystem, but one input was entered incorrectly and more capacity was removed than intended.
Safeguard: Enforce minimum-capacity limits inside the tool
Stripe explains that a client which cannot tell whether a request succeeded (for example after a network failure) needs to retry safely, and that without protection a retried charge could double-charge a customer.
Safeguard: Attach idempotency keys to state-changing requests
While working on replication, an engineer ran a data-directory deletion on the production database server instead of the secondary, removing about 300 GB before stopping it.
Safeguard: Verify backups by restoring them
Between October 13 and November 15, 2016, intruders used an AWS access key that had been posted to a private GitHub repository to access Uber's Amazon S3 datastore.
Safeguard: Keep secrets out of repositories