The story · it could have been much worse · v1
What the way in could have reached.
What the shipped extension was meant to do.
Each time, a small part of what was possible.
M02
Midnight Blizzard at Microsoftan attacker, through a test-tenant foothold
What was possibleMicrosoft corporate email accounts
What happened"a very small percentage" accessed
Amazon Q extensionan agent, shipped with an injected prompt
What was possibleacross its user base: wipe the disk and delete cloud resources
What happened"unsuccessful in executing due to a syntax error"
It could have been much worse.