All desks2 posts filed
Filed under Security
Breaches, vulnerabilities, and the decisions that protect software and its users.
Two weeks, three control-plane breaches
TiDB Cloud, Railway, and Zeabur were all hit in the same fortnight. The databases mostly held. The control planes handed out the keys.The PingCAP breach: the control plane took the keys
Someone walked into PingCAP with stolen accounts for a month. The databases held. The keys, the query history, and the org records did not.