The TIE Brief
Leads 5
Russia-linked APT29 leveraged a compromised Ukrainian web‑analytics platform to inject malicious JavaScript into legitimate and look‑alike sites, delivering N‑day exploit kits targeting iOS and Android devices. The campaign exfiltrates cookies, Wi‑Fi passwords and extensive mobile data, focusing on high‑value visitors linked to the Russia‑Ukraine conflict.
Key points
- The operation, dubbed Poisoned Source, injects malicious JavaScript via compromised websites, spoofed domains and a supply‑chain breach of Plerdy SEO Tracker.
- Three exploit classes target iOS 16.7, iOS 18.5 and Android Chrome, leveraging multiple CVEs to deliver DarkSword and AndroSnitch payloads.
- Exfiltrated data—including cookies, Wi‑Fi credentials, messages, and health information—is sent to a remote telemetry endpoint.
- Targets include high‑value sites such as a U.S. chemical industry association, a European political party and Bulgarian military‑related pages, suggesting strategic intent.
- The campaign demonstrates a sophisticated, mobile‑focused watering‑hole approach tied to Russian geopolitical objectives.
Two Canadians were extradited after a grand jury indictment alleged they breached multiple U.S. university networks, stole credentials and installed malware to mine cryptocurrency on compromised supercomputers. The suspects face up to ten years in prison and a $250,000 fine.
Key points
- The Justice Department unsealed an indictment accusing Ryan James Roach and Mathiew James Stubbings of infiltrating at least four university networks between 2016 and 2019.
- They allegedly used stolen credentials and custom rootkits to commandeer processing power for illicit cryptocurrency mining.
- The pair rented VPN servers under false identities to hide traffic and transmit mining software, impacting supercomputer availability.
- Roach was extradited on Oct. 28 and arraigned; authorities are still seeking Stubbings’ extradition.
- If convicted, they face up to ten years imprisonment, a $250,000 fine, and forfeiture of related equipment.
In late July 2026 attackers accessed an AWS access key exposed in Beacon CRM's JavaScript build files and downloaded full database backups, compromising personal and donation data of more than 1,000 charity customers. The breach was detected on July 29, and affected charities were notified in early August. No payment card data was stored, but the leaked information enables phishing and identity fraud.
Key points
- Attackers leveraged an AWS access key unintentionally published in client‑side JavaScript to download complete database backups from Beacon CRM.
- The breach impacted over 1,500 nonprofit organisations, exposing names, contact details, donation histories and uploaded documents.
- Beacon CRM discovered the activity on July 29, revoked the key and began notifying affected charities between July 30 and August 3.
- Regulatory bodies, including the UK Charity Commission, issued public statements and required breach notifications under ICO rules.
- The incident underscores the risk of hard‑coded cloud credentials in SaaS supply chains and the need for automated secret‑scanning and strict IAM controls.
Google released patches for CVE-2026-58868, a critical out-of-bounds write that could enable remote code execution without user interaction on Android 14‑17. No active exploitation has been reported and the fix is available via the November 2026 security update.
Key points
- CVE-2026-58868 is a heap buffer overflow in FrameDecoder.cpp that could allow remote code execution on Android 14‑17.
- The fix is included in the November 2026 security patch (2026‑11‑01) and will be rolled out by OEMs and carriers.
- No attacks have been observed and the vulnerability is not listed in CISA’s Known Exploited Vulnerabilities catalog.
- The bulletin also details other critical issues, including a remote DoS via SMS (CVE-2026-58882) and additional RCE bugs (CVE-2026-58876, CVE-2026-58936).
- Patches address kernel and modem flaws from MediaTek and Qualcomm; no workaround exists for devices unable to update.
SonicWall disclosed two high‑severity flaws in its legacy GMS 9.5.2 and earlier, a remote file read (CVE‑2026‑109593) and a post‑auth SQL injection (CVE‑2026‑109594), and announced that no fixes will be issued due to the product’s end‑of‑life status. Users are urged to migrate to the newer Network Security Manager.
Key points
- CVE‑2026‑109593 (CVSS 9.1) allows unauthenticated attackers on the network to read internal GMS files.
- CVE‑2026‑109594 (CVSS 6.8) enables authenticated attackers to perform SQL injection and modify database records under certain conditions.
- Both vulnerabilities affect SonicWall GMS 9.5.2 and earlier, which are now end‑of‑life and will receive no remediation.
- SonicWall recommends customers upgrade to the Network Security Manager to mitigate risk.
- The announcement follows a recent patch for CVE‑2026‑102255, which was actively exploited in the wild.
Developing 25
WorkOS confirmed a breach of its internal sales tool where an AI‑driven pentesting framework exposed customer contact information.
Key points
- The intrusion was detected on October 30, 2026 and involved unauthorized access to a sales‑team application.
- Exfiltrated data included names, emails, job titles, account histories, and excerpts from sales calls and Slack chats.
- The attacker employed the ARTEX AI framework, previously linked to Chinese‑origin cyber‑espionage group Vapor Panda.
- WorkOS disabled external access, engaged a forensics firm, and is notifying affected customers.
- The ARTEX AI tool originated as an open‑source project from Chinese developers and has been used in multiple incidents this year.
Attack on refrigeration supplier raised temperatures in French blood storage sites, but no product loss was confirmed.
Key points
- The French Blood Establishment reported that a cyber intrusion into its refrigeration equipment provider altered temperature and defrost settings at three facilities.
- Coolworld Rentals confirmed the breach stemmed from a vulnerability in a third‑party component of its remote monitoring system.
- EFS’s monitoring alarms detected the change, allowing staff to secure or relocate blood products without health impact.
- The incident follows similar attacks on supermarket refrigeration systems across Europe that manipulated controller settings remotely.
- EFS is cooperating with France’s national cybersecurity agency ANSSI and the Ministry of Health to strengthen monitoring.
Volt Typhoon employs a disposable “Silent Train” of compromised devices to stealthily breach U.S. critical‑infrastructure targets.
Key points
- Lumen’s Black Lotus Labs published a report describing “Silent Train,” a constantly evolving network of procured and compromised SOHO routers and IoT devices used by Volt Typhoon to gain rapid entry to high‑value networks.
- Each device chain is used once to infiltrate a single target—often government agencies, defense contractors, telecoms, energy, water, rail and satellite operators—then discarded to erase traces.
- The group’s tactics emphasize extreme operational security, with intrusions lasting only minutes or hours before all artifacts are removed.
- Researchers have notified hundreds of victims across multiple sectors, highlighting the strategic selection of targets for potential military advantage.
TraderTraitor leveraged a fake recruitment scheme and an internal AI tool to breach Binance’s wallet signing system and steal $6.34 billion in crypto.
Key points
- The attack began with a compromised Homebrew installer downloaded by a wallet DevOps engineer in June, followed by a fake HR interview that delivered a malicious code repository to a second engineer.
- A 0‑day malware replaced a legitimate developer component, opened a C2 channel, and later enabled the attackers to use an internal AI tool to control compromised machines.
- Using stolen tokens, the hackers accessed Binance’s internal wallet signing service and exploited Ethereum’s EIP‑7702 to move XRP, SOL, OP and BTC out of hot wallets.
- Binance rebuilt the affected systems, replaced devices, and engaged third‑party firms for review; about $2.85 billion of the stolen assets have been frozen.
- The FBI attributes the operation to the North Korean TraderTraitor group, which the DPRK denies, and Binance reported detecting 57 related threats this year.
Sources
SecurityWeek
cryptopotato.com
Bleeping Computer
Chainalysis Blog
The Hacker News
The Record by Recorded Future
CSO Online
SecurityWeek
SecurityWeek
citationneeded.news
The Record by Recorded Future
Bleeping Computer
The Hacker News
Bleeping Computer
npr.org
wired.com
Twitter/craiu
Chainalysis Blog
Bleeping Computer
Twitter/blackorbird
SecurityWeek
The Hacker News
decrypt.co
The Record by Recorded Future
Bleeping Computer
@craiu
@blackorbird
25 articles
CISA’s new BOD 26‑04 forces three‑day patching and forensic analysis for high‑risk, exposed vulnerabilities.
Key points
- The directive, released June 10 2026, sets a three‑day deadline for remediation of vulnerabilities that are actively exploited, publicly reachable, and grant full control, with mandatory forensic investigation for Tier 1 cases.
- It replaces prior BOD 19‑02 and BOD 22‑01, moving from static CVSS scores to a dynamic model using four binary variables: asset exposure, KEV status, exploit automation, and technical impact.
- Remediation tiers range from three days with triage for critical KEV‑listed flaws to 60 days or deferred fixes for lower‑risk, internal issues.
- Rapid7 maps its capabilities—asset discovery, vulnerability prioritization, patch automation, and forensic tooling—to each BOD 26‑04 requirement, aiming to close the gap between the industry’s 43‑day median remediation time and the new three‑day mandate.
APT’s package verification can be bypassed by MITM attackers, prompting immediate patches for Debian and Ubuntu.
Key points
- The CVE‑2026‑109518 flaw allows attackers who can alter HTTP traffic to replace signed packages during download, leading to root code execution.
- Debian and Ubuntu published advisories on November 4 and released fixed APT versions for supported releases, rating the issue high priority with a CVSS 7.7.
- Exploitation relies on APT’s automatic retry of failed downloads, a default setting from Debian 12 and Ubuntu 22.04 onward.
- Older releases are not vulnerable by default, but user‑enabled retry settings could expose them.
- No known active exploitation or data breach has been reported, and patches are already available.
A compromised OpsShield update channel delivered malicious cPGuard updates to thousands of Linux hosting servers, exposing client data and installing root shells.
Key points
- Attackers used stolen credentials to hijack OpsShield’s CDN and serve malicious cPGuard versions 5.88.12‑5.88.19 for about 70 minutes.
- The malicious script created a hidden root shell, collected files, and uploaded them to the licensing server, affecting an estimated 2,950 customer servers.
- OpsShield responded by evicting attackers, resetting all secrets, re‑issuing license keys, and releasing clean cPGuard updates (5.88.25+).
- Approximately 7,900 client account records, password hashes, SSH keys and MySQL passwords were exfiltrated.
- Indicators of compromise have been published to aid detection.
A China‑linked actor chained PHP2Shell and kernel bugs to compromise dozens of Palo Alto firewalls and exfiltrate AD credentials.
Key points
- The campaign combined two PHP2Shell CVEs and a high‑severity Linux kernel flaw to achieve root on 25 firewall and management servers.
- Targets included at least two U.S. government‑linked firewalls among roughly two dozen compromised devices.
- Attackers used an AI‑enabled platform, aiscan, to scan ~19,000 firewalls and filter 240 likely victims before exploitation.
- After access, the group enumerated Active Directory and stole credentials, prompting CISA to list the flaws in its KEV catalog.
- Palo Alto advises restricting IP access and applying PAN‑OS fixes that address the PHP2Shell vulnerabilities.
Sources
cybersecuritydive.com
qurium.org
Twitter/msuiche
SecurityWeek
blue-initiative.org
CSO Online
The Record by Recorded Future
Bleeping Computer
CSO Online
The Hacker News
crowdstrike.com
europa.eu
bbc.co.uk
theregister.com
Twitter/HackingLZ
The Hacker News
Bleeping Computer
Bleeping Computer
SecurityWeek
arstechnica.com
Twitter/IceSolst
The Record by Recorded Future
Bleeping Computer
The Hacker News
sans.edu
SecurityWeek
Bleeping Computer
The Register Security
qualys.com
arcticwolf.com
linkedin.com
The Hacker News
Twitter/HackingLZ
Twitter/HackingLZ
Twitter/HackingLZ
virustotal.com
openai.com
Twitter/blackorbird
Bleeping Computer
SecurityWeek
The Hacker News
The Hacker News
The Record by Recorded Future
linkedin.com
amazon.com
hadrian.io
google.com
CSO Online
Twitter/lorenzofb
Bleeping Computer
SecurityWeek
SecurityWeek
The Hacker News
Twitter/HackingLZ
dshield.org
sans.edu
eliastaylor.com
CSO Online
amazon.com
@msuiche
@HackingLZ
@IceSolst
@HackingLZ
@HackingLZ
@HackingLZ
@JohnHultquist
@blackorbird
@lorenzofb
@HackingLZ
59 articles
Google‑led effort disables X.CPE botnet across 1.3 million set‑top boxes, halting illicit bandwidth resale and ad‑fraud operations.
Key points
- The X.CPE malware was pre‑installed in firmware of TV set‑top boxes before sale, giving attackers remote access and the ability to use home broadband for proxy traffic, ad fraud and other illicit activities.
- Coordinated takedown dismantled the botnet’s C2 infrastructure and blocked domains that could have compromised up to 10 million more devices.
- Google updated its app review process and banned the responsible OEM from future devices with preloaded Google apps.
- Partners contributed expertise in device security, malware analysis, network visibility and digital fraud to achieve the disruption.
- The case highlights hidden supply‑chain risks in consumer broadband equipment and the value of cross‑industry intelligence sharing.
CISA confirms active exploitation of WordPress CVE-2026-119977 and mandates rapid patching across federal agencies.
Key points
- CISA placed the high‑severity WordPress core TOCTOU race condition (CVE‑2026‑119977) in its KEV catalog, indicating observed in‑the‑wild attacks.
- The vulnerability was patched in WordPress 7.1.4, released on October 28, and agencies are ordered to remediate by Friday under BOD 26‑04.
- Wordfence’s threat intel logged 13,095 attempts against the flaw within a 24‑hour window.
- CISA’s advisory applies to federal civilian agencies but also recommends private sector operators prioritize the update.
Sources
Bleeping Computer
The Hacker News
CISA Cybersecurity Advisories
Rapid7 Research Blog
Bleeping Computer
SecurityWeek
Bleeping Computer
The Hacker News
CISA Cybersecurity Advisories
SecurityWeek
The Hacker News
CISA Cybersecurity Advisories
CISA Cybersecurity Advisories
CISA Cybersecurity Advisories
CISA Cybersecurity Advisories
CISA Cybersecurity Advisories
CISA Cybersecurity Advisories
CISA Cybersecurity Advisories
CISA Cybersecurity Advisories
19 articles
Polymarket will refund $3.9 million after a compromised third‑party script stole cryptocurrency from user wallets.
Key points
- The breach stemmed from a malicious script injected into Polymarket’s site via the DebugBear performance‑monitoring service, enabling attackers to sell positions and transfer funds from active sessions.
- Polymarket plans to reimburse $2.7 million for direct losses and $1.2 million for downtime‑related losses, with 95% of wallets already fully refunded.
- Hudson Rock identified “wallet‑draining code” in the compromised script and linked the attack to a third‑party supply‑chain compromise.
- Polymarket removed the malicious script, paused trading, reset all login sessions and added additional integrity controls while notifying law enforcement.
- DebugBear said its own systems appear uncompromised and is investigating the domain‑registrar breach that enabled the attack.
Multiple AI developer platforms suffer credential‑theft incidents in October, dubbed “Black October”
A wave of credential‑theft breaches hit nine AI developer platforms in October, exposing crypto assets and enterprise keys.
Multiple AI developer platforms suffer credential‑theft incidents in October, dubbed “Black October”
Key points
- Nine AI developer platforms disclosed breaches in October, with additional incidents reported for Brev, Trigger.dev, and Chainstack.
- Attacks often used “agent swarm” techniques and targeted stored environment variables granting AI access.
- Root causes include credential compromise, supply‑chain dependencies, privilege escalation, and legacy systems.
- Impacts include theft of cryptocurrency (~$371,000) and downstream abuse of compromised enterprise credentials.
- Analysts note the campaign aligns with broader trends in agentic attacks, LLM jacking, and distillation threats.
Node‑RED’s unauthenticated admin API flaw is being exploited in the wild, threatening unpatched IoT/IIoT gateways that link IT and OT systems.
Key points
- Siemens disclosed and patched the Node‑RED authentication vulnerability in August 2026, but many deployments remain unpatched.
- VulnCheck’s research recorded exploitation on October 30, 2026, with an attacker using the flaw to download a Linux bot and, in some cases, leave web shells.
- Node‑RED’s default configuration disables authentication, making it a credential vault and bridge across IT/OT boundaries when deployed by non‑technical staff.
- Unpatched gateways in critical infrastructure may stay vulnerable for months due to scheduled maintenance windows.
- The vulnerability is identified as CVE‑2026‑58115 and has an official Siemens advisory.
North Korea’s missile launches coincide with its protest over U.S. accusations that a state‑backed group stole $6 billion from Binance.
Key points
- North Korea fired multiple missiles into its eastern waters, citing U.S. hostility after the FBI linked a North Korean hacking group to the Binance theft.
- Kim Yo Jong rejected the FBI’s claim that the TraderTraitor group was behind the $6 billion cryptocurrency heist, calling it a provocation.
- Binance reported the theft as the largest crypto heist on record, while the U.S. and South Korean militaries monitored the missile launches.
- The incident adds to rising regional tensions, including recent border mine blasts and North Korea’s naval shipbuilding efforts.
Russian law enforcement arrested three VasyGrek suspects and seized the group’s phishing infrastructure after attacks that stole $8,000.
Key points
- Three individuals suspected of operating the VasyGrek (aka Fluffy Wolf) threat group were arrested by the Russian Ministry of Internal Affairs.
- The group’s phishing emails disguised as financial documents deployed a range of stealers, RATs and remote‑access tools, targeting metallurgical, energy, healthcare and other critical‑infrastructure sectors.
- Kaspersky recorded more than 100 attack attempts by VasyGrek in Russia, Belarus and Kazakhstan during 2026, resulting in a reported loss of 660,000 rubles.
- Law enforcement seized computers, communication devices and other evidence during searches of the suspects’ residences and office.
- BI.ZONE and other security firms linked VasyGrek’s activity to additional malware families such as LxBase RAT and CoreRAT.
A supply‑chain attack on the NIKKE PC launcher distributed a remote‑access backdoor and wallet‑stealing module, prompting a patch that may not have fully removed the malicious script.
Key points
- The game’s launcher scripts were modified on September 27 2026 to download obfuscated code from attacker‑controlled domains insightjs.com and insightjs.org.
- The downloaded payload deployed a LuaJIT backdoor named K2F, enabling remote command execution, file browsing, screenshot capture and credential theft.
- A malicious DLL (platform_experience_helper.dll) could steal cryptocurrency wallet recovery phrases and private keys from extensions such as MetaMask and Phantom.
- Level Infinite issued a client update on November 4, yet researchers observed one tampered script still being served afterward.
SlippyNunchucks exploits Sogou Input Method DNS to install the DarkVigil backdoor, prompting a Tencent patch.
Key points
- The operation, active since July 2026, targets Chinese‑speaking users in several Asian countries by tampering with the app’s brand‑promotion DNS resolution.
- Hijacked requests deliver a malicious configuration that causes SGTool.exe to download a rogue libcef.dll containing DarkVigil via DLL sideloading.
- DarkVigil uses a proprietary DMTP protocol for C2 and can load over 20 plugins for persistence and data collection.
- The campaign follows a prior QuickFox supply‑chain compromise and is classified as a nation‑state surveillance effort.
- Tencent released a fix (CVE‑2026‑120422) on Oct 29 2026, moving the affected requests to HTTPS.
VasyGrek’s late‑2025 phishing ops used PureCoder tools and Pay2Key ransomware, adding BAT/VBS attachments to its infection chain.
Key points
- VasyGrek sent phishing emails with malicious attachments or links to GitHub‑hosted files, primarily using PureCoder’s PureCrypter, PureHVNC, and PureLogs Stealer.
- Pay2Key ransomware‑as‑a‑service was observed in a few infections, built on the Mimic encryptor.
- In November the payload delivery changed to BAT and VBS archives, still culminating in PureHVNC deployment via a new loader.
- The actor ceased using BurnsRAT after a July 2024 disclosure but otherwise maintained a consistent attack pattern.
- All observed activity targeted Russian organizations across multiple economic sectors for credential and data theft.
Former Syrian regime hacker sentenced for a multi‑target campaign that briefly erased $136 billion from U.S. stocks.
Key points
- A federal judge in Virginia imposed a 42‑month prison term on Ahmad Umar Agha for leading a hacking conspiracy from 2011‑2014 that targeted roughly 47 media, business, NGO and government victims.
- The intrusion campaign was directed by members of Bashar al‑Assad’s inner circle and aimed to silence press coverage, intimidate opponents, and sow discord among U.S. military personnel.
- One of Agha’s attacks triggered a flash crash, temporarily wiping $136 billion from the Dow Jones Industrial Average.
- Co‑conspirator Firas Dardar remains at large; another associate, Peter Romar, was extradited and pleaded guilty in related charges.
- The sentencing highlights U.S. law‑enforcement focus on state‑sponsored cyber actors.
Sources
justice.gov
SecurityWeek
Cyberscoop
The Record by Recorded Future
The Hacker News
5 articles
MCP OAuth servers with lax redirect‑URI allowlists enable one‑click account takeover, exposing merchant data.
Key points
- Open registration of MCP clients without redirect‑URI validation lets attackers register malicious URIs and capture authorization codes.
- A single‑click phishing flow can steal tokens, granting attackers access to storage, transaction and banking details, as seen in a Square MCP breach.
- The flaw also creates open‑redirect behavior, allowing crafted links to bounce users to arbitrary sites under the server’s domain.
- Researchers across several platforms and bug‑bounty programs have confirmed the vulnerability, noting that PKCE does not mitigate the attack.
- Mitigation requires servers to enforce exact redirect‑URI matching and maintain a vetted allowlist, as recommended in the MCP spec.
Embedded AI agents evade gateway inspection, and a compromised LiteLLM gateway illustrates the need for distributed runtime controls.
Key points
- Agents running inside SaaS platforms (e.g., Claude in Salesforce, Copilot in Microsoft 365, Workday agents) operate beyond enterprise‑owned gateways, creating an "unreachable skill" gap.
- A March 2026 attack on the open‑source LiteLLM gateway exposed traffic for roughly 40 minutes, impacting more than 2,500 organizations according to CloudSEK.
- The authors propose runtime rules—such as blocking attempts to contact over fifty external domains—and visibility across platform hooks to enforce security.
- They argue that relying on a single inspection point concentrates risk, turning the gateway itself into a high‑value target in the supply chain.
- Effective enforcement must consider the full request chain, permissions, data sensitivity, and context, not just the final action.
A U.S. government IT staffer pleaded guilty to sending Top Secret files to Ethiopia, highlighting insider threat concerns.
Key points
- The employee, who had privileged access to classified systems, sent multiple Top Secret documents to foreign recipients in Ethiopia.
- Federal prosecutors secured a guilty plea, indicating the worker’s intent to compromise national security information.
- The incident raises concerns about insider detection controls within government IT environments.
- No public estimate of the number of documents or individuals affected was provided.
- The case is being handled through the criminal justice system, reflecting law‑enforcement involvement.
Sources
The Register Security
The Register Security
The Register Security
The Register Security
theregister.com
The Register Security
The Register Security
The Register Security
The Register Security
theregister.com
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
16 articles
Multiple AI developer platforms were breached, exposing customer secrets and AI access tokens, some attacks tied to Chinese APT Storm‑0940 and the Artex tool.
Key points
- Hackers targeted AI developer services to steal stored access tokens, aiming to monetize them on a growing underground market.
- Initial access varied from stolen credentials to exploitation of vulnerable third‑party components.
- The open‑source AI pentest framework Artex was used to automate attacks on Chainstack and WorkOS, and has been linked to Chinese APT Storm‑0940.
- Compromised data included organization names, email addresses, password hashes, and detailed customer relationship information.
- Analysts warn that the breach trend could fuel AI model‑training by state actors, especially China, through stolen inference credentials.
A malicious Claude Code extension in Cursor's marketplace tried to install an SSH backdoor and exfiltrate system information.
Key points
- The compromised extension (versions 2.1.312 and 2.1.313) was live for about 11 hours on Oct 29 before Cursor removed it.
- Malware inserted at the start of the JavaScript ran automatically, adding an SSH key to authorized_keys and attempting persistence via scripts and startup entries.
- Analysis by Phorion and Microsoft showed the payload collected machine details, environment variables and Git email addresses, but did not require user interaction.
- Cursor cautioned that simply uninstalling the extension may leave the planted SSH key and scripts behind, recommending key rotation and log review.
Threat actors hijack LLM APIs, resell access, and drive fraudulent cloud spend up to $1 million.
Key points
- Google and Mandiant identified two attacker groups: scanners of public LLM endpoints and thieves of valid API keys.
- Compromised credentials are sold to “LLM mixers” such as Jet Night and newapi.pro, which relay requests and inflate token usage.
- One actor generated over 500,000 API calls in eight hours, pushing costs near $1 million for the victim.
- Attackers also exploit CVE‑2026‑40217 in LiteLLM to run code on servers and host unauthorized proxies.
- Mitigations focus on strict IAM, secret rotation, MFA, usage limits, and comprehensive logging.