Extortion

The patch you skipped, and the WAF rule that never held ShinyHunters, the extortion gang that has made a business of breaching organizations running unpatched enterprise software, found a way through a web application firewall that many security teams believed was holding. The trick costs the attackers nothing: one character in the URL, changed from…