Corben Leo on Twitter: "Apparently there was an internal network share that contained powershell scripts... "One of the powershell scripts contained the username and password for a admin user in Thycotic (PAM) Using this i was able to extract secrets for all services, DA, DUO, Onelogin, AWS, GSuite" https://t.co/FhszpxxUEW" / Twitter

https://twitter.com/hacker_/status/1570582547415068672

https://x.com/home/status/1570583222454747136

https://x.com/home/status/1570609510196322304

https://x.com/home/status/1570612411522252802

https://x.com/home/status/1570617286570147840

https://x.com/home/status/1570635016438452225

https://x.com/home/status/1570642933778620417

https://x.com/home/status/1570645940352196610

https://x.com/home/status/1570650105493204993

https://x.com/home/status/1570650478924693507

https://x.com/home/status/1570651365797658626

https://x.com/home/status/1570657077382778881

https://x.com/home/status/1570657304420179969

https://x.com/home/status/1570660713659789317

https://x.com/home/status/1570660962004504576

https://x.com/home/status/1570672862327111682

https://x.com/home/status/1570678360698933248

https://x.com/home/status/1570689239788187650

https://x.com/home/status/1570731683359641603

https://x.com/home/status/1570732992708104193

https://x.com/home/status/1570747488465989633

https://x.com/home/status/1570754388054151172

https://x.com/home/status/1570766291430174720

https://x.com/home/status/1570768328742014977

https://x.com/home/status/1570771634155560960

https://x.com/home/status/1570905395073515520