Decrypted: The UK Cyber Briefing
Oct 5, 2026 · 5 min · 7 segments
Proofpoint found attackers sprayed default passwords at 5,714 Microsoft 365 accounts and got into seven. All seven were forgotten service accounts with no MFA. The Secure by Design fix, plus a Lords…
Most security stories this week are about clever exploits.
This one is about a password nobody remembered setting.
In research published in late September, Proofpoint described a campaign that tried default passwords against five thousand seven hundred and fourteen Microsoft 365 accounts across twenty organizations.
It got into seven.
None of the seven belonged to a person.
Each was a service or functional account created for convenience, never rotated, and never protected by multi-factor authentication.
The targets were mostly Chilean, but the weakness isn't national.
Most security stories this week are about clever exploits.
This one is about a password nobody remembered setting.
In research published in late September, Proofpoint described a campaign that tried default passwords against five thousand seven hundred and fourteen Microsoft 365 accounts across twenty organizations.
It got into seven.
None of the seven belonged to a person.
Each was a service or functional account created for convenience, never rotated, and never protected by multi-factor authentication.
The targets were mostly Chilean, but the weakness isn't national.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.
