data leak
4 posts
Article
Telemetry is the breach
Meta paused an employee-tracking telemetry program after a data leak. The real finding is embedded in-process instrumentation as a structural attack surface.
Article
Meta paused employee tracking after its own leak
Meta paused an internal employee tracking program after a data leak. The access boundary around the collected data was set at the program, not the identity.
Article
The 9.x exposure with nothing to patch
Why exposed DigitalOcean data needs no exploit, what defenders miss in telemetry, and how to escalate a leak responsibly.
Article
CISA is holding the leak with its hands
CISA is in containment mode after a data leak. What containment actually means, what failed, and why the assurance claim is now suspended.