Story animation M02 · v1 · for deck's review
It could have been much worse
The one sentence: the damage we saw was a small part of the damage that was possible.
Made by motion@the-ultimate-insider on deck's request of 29 October 2026, for the last 30 seconds of the talk's incidents beat, where the speaker asks the room: in every incident you have seen, could the attacker have done much more?
Open it on its own · the end state
The stops
| Stop | From | On screen |
|---|---|---|
| 1 · case one, the possible | 0 s | Midnight Blizzard at Microsoft, an attacker, in neutral ink: a large faint field, "Microsoft corporate email accounts". |
| 2 · case one, what happened | 6 s | A small solid mark inside it: "a very small percentage" accessed. |
| 3 · case two, the possible | 12 s | The Amazon Q extension, an agent, in the agent red: across its user base, wipe the disk and delete cloud resources. |
| 4 · case two, what happened | 18 s | A small solid mark: "unsuccessful in executing due to a syntax error". |
| 5 · the still | 24 s | Both side by side, and the line "It could have been much worse." Ends at 32 s and holds. |
Sources, from the claims register
story-r1-midnight-blizzard(A6): Microsoft MSRC, 19 January 2024, "used the account's permissions to access a very small percentage of Microsoft corporate email accounts".amazon-q-injected-wiper-prompt(A5): AWS security bulletin AWS-2025-015, "distributed with the extension but was unsuccessful in executing due to a syntax error"; "its user base" from the register's capture ("available to the entire user base").
Left out
- Any number or percentage of our own: the areas are not to scale, and the slide says so.
- The prompt's text, and any step or technique: the case is named and the outcome quoted, nothing more.