TRY AEMBIT
Blog
Blog
Blog
X

Blog

Category: Breach Analysis

Vault with a warning sign superimposed.

Vault Fault: Secrets Managers and the Limits of Centralized Trust

Recent flaws in Conjur and Vault highlight the risks of concentrating trust in a single repository – and why workload IAM may offer a more resilient path forward.
3 min read
A person vibe codes

When Identifiers Aren’t Identities: Security Lessons from the Base44 AI Vibe Coding Flaw

The vulnerability shows how modern application development is accelerating without bringing access controls along for the ride.
3 min read
Man typing code.

What the xAI Key Leak Teaches Us About Secrets – And How to Fix Them

One careless push unlocked 52 AI models, but the real story is how to keep this from happening again.
3 min read
Workload to workload breach prevention.

5 Non-Human Identity Breaches That Workload IAM Could Have Prevented

Each breach exploited a gap in how workloads authenticate and access resources.
5 min read
Image of back of developer working at three computers.

GitHub Action tjactions/changed-files Supply Chain Breach Exposes NHI Risks in CI/CD

Long-lived credentials and secrets fueled the attack.
4 min read
Image of lock on top of computer hardware

BeyondTrust Breach Exposes API Key Abuse Risks

When a single API key compromise spiraled into a broader attack, it exposed how overlooked non-human identities can become gateways for escalating threats.
3 min read
Schneider Electric Breach Analysis

Preventing Stale Non-Human Identity Security: Lessons from the Schneider Electric Breach

A ransom demand in baguettes exposed poor practices related to a hijacking of the company’s internal systems.
3 min read