Hello and welcome to the Thursday, July 31st, 2025 edition of the Sands Internet Storm Center's

Stormcast. My name is Johannes Ulrich, recording today from Jacksonville, Florida. And this episode

is brought you by the Sands.edu graduate certificate program in industrial control systems security.

And today on the Internet Storm Center website and our diary, we are trying something a little

bit different.

Now, we had guest diaries in the past from not our usual group of handlers, but this time

we actually tried a little bit of video.

And the reason behind this is that, well, last week we had this

huge breach in the T application. The breach itself, I think, was a little bit stupid in the sense

how simple it was, but of course it had a big impact for some of the victims affected by

the breach.

However, when I'm talking about breaches here also in a podcast,

I don't like to do it because I don't like the victim shaming,

even if some of them may deserve it.

I usually try to focus on what are the lessons we can all learn from a particular breach.

So we don't end up in the same situation as the victim here.

And of course, one of the victims here was T.

And they made really sort of a very crucial, simple mistake with Firebase,

a mistake that has been made many times before,

but has been sort of brought to everybody's attention here in this latest preach.

Brandon focuses on that technical lesson here in his video.

Essentially, how do you secure Firebase if you have to use it at all? And how do you make sure

...