The Incident Room

Monthly lessons from fresh disasters, with the names filed off.

Drop 001 — Three ways your app gets exposed

July 2026: open storage, naked databases, and launch posts that invite attackers.

August 2026: leaks that came from inside the codebase.