@ericgeater First of all, thank you for sharing this update.
It’s a stark reminder of why we must constantly deepen our security knowledge. It is becoming increasingly common to see major companies, applications, and services we rely on daily being compromised.
This is a clear example of how Supply Chain attacks can leave us vulnerable; when the tools we trust are turned against us, the ripple effect can even compromise lives in critical sectors. It reinforces the fact that security isn't just a layer, but the foundation of everything we build.
This incident proves that security doesn't end with the code. It is a failure in Security Operations and Identity and Access Management . The attackers didn't break the encryption; they simply used the keys that the provider forgot to rotate after the initial compromise. It is the perfect example of why Zero Trust is necessary: never assume an update is safe just because it comes from the correct domain.
