Some of the recent attack vectors I can remember: * An employee account was compromised - usually because they re-use their password and that password was expo

Some of the recent attack vectors I can remember: * An employee account was compromised - usually because they re-use their password and that password was exposed in an unrelated breach. And then failure to require 2 factor authentication for 'internal' accounts - (github organisations, aws, internal administration tools, etc.) - Timehop, Gentoo * Failure to patch known vulnerabilities - Experian * Running untrusted code client side (Webchat) - Ticketmaster (although unclear what the vulnerability was that allowed the compromised scripts to be uploaded to Inbenta) * Unsecured database backups - Typeform (although it's unclear yet what the original compromise entailed) * Data left 'accidentally' exposed publicly (no credentials required to access it) - Exactis