Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability

This week's incidents share a common thread: attackers are exploiting weak or compromised authentication mechanisms to gain unauthorized access. The Gheist campaign specifically targeted GitHub tokens to exfiltrate secrets, while stolen staff logins are enabling attacks on K-12 school districts — demonstrating that credential theft remains one of the most effective attack vectors. A vulnerability in Microsoft Authenticator further undermined trust in MFA solutions that many organizations rely on as a last line of defense. These incidents matter because once credentials are compromised, attackers can move laterally, exfiltrate sensitive data, and cause significant damage before detection. Organizations must treat credential hygiene and access governance as continuous operational priorities, not one-time configurations.