John Z Black

Syria's Government Got Hacked. The Method Was Probably 'No Password Policy.'

John Z Black Apr 10, 2026

Incidents & Breaches #syria #account-takeover #credentials #mfa #social-media-security #government-security #digital-hygiene

Multiple Syrian government X accounts fell at the same time in March 2026. The likely method wasn't a sophisticated attack. It was shared credentials and no MFA. Your organization has a version of this story too.

Read More

Hackers Claim an AstraZeneca Breach. Here's What We Know (Which Isn't Much Yet).

John Z Black Mar 25, 2026

Incidents & Breaches #astrazeneca #lapsus #breach #credentials #unverified

Lapsus$ is claiming they stole 3GB of AstraZeneca data including source code and credentials. AstraZeneca hasn't responded. Nothing's been independently verified. Here's why it's still worth watching.

Read More