Welcome to watchTowr vs the Internet, part 68.
That feeling you’re experiencing? Dread. You should be used to it by now.
As is fast becoming an unofficial and, apparently, frowned upon tradition - we identified incredible amounts of publicly exposed passwords, secrets, keys and more for very sensitive environments
password manager, secured by another password manager with MFA that is locked behind a 3rd password manager with a physical yubikey to gain access.
it may be annoying, but that’s the point. security isn’t supposed to be easy, or friendly. it’s meant to secure things.
While I agree with your defense in depth approach, holy shit that sounds exhausting every time I just want to check my bank account.