Big fails from small things are common. A few recent examples off the top of my head - 1. Bing.com had an issue whereby attackers could inject XSS code to al

Big fails from small things are common. A few recent examples off the top of my head - 1. Bing.com had an issue whereby attackers could inject XSS code to all visitors, due to a simple misconfiguration in Azure. 2. Visual Studio Code had a Remote Code Execution vulnerability triggered by a simple link. 3. LastPass had all of its secrets and backups taken via a compromised developer's machine. 4. CircleCI was breached and leaked everyone's OAuth tokens and secrets by malware. 5. Heroku and Okta were breached due to a compromised token, had their source code taken, and potentially leaked customer secrets. [1] https://www.wiz.io/blog/azure-active-directory-bing-misconfiguration https://www.wiz.io/blog/azure-active-directory-bing-misconfi... [2] https://github.com/google/security-research/security/advisories/GHSA-pw56-c55x-cm9m https://github.com/google/security-research/security/advisor... [3] https://blog.lastpass.com/2023/03/security-incident-update-recommended-actions/ https://blog.lastpass.com/2023/03/security-incident-update-r... [4] https://circleci.com/blog/january-4-2023-security-alert/ https://circleci.com/blog/january-4-2023-security-alert/ [5] https://status.heroku.com/incidents/2413 https://status.heroku.com/incidents/2413 https://www.bleepingcomputer.com/news/security/oktas-source-code-stolen-after-github-repositories-hacked/ https://www.bleepingcomputer.com/news/security/oktas-source-...