Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment variables, and, in some cases, obtained the decrypted contents. The impact, it said, is limited to a "subset of users,…

A maior parte dos incidentes começa com uma pessoa enganada. Entender o truque ajuda a reconhecê-lo na caixa de entrada.

• Identifique qual era o gancho (urgência, autoridade, prêmio).
• Veja se SPF, DKIM e DMARC barrariam esse e-mail.
• Pratique a leitura de cabeçalhos no lab de phishing.