---
title: "Sixtus Sphere (@sixtusphere) | Hashnode"
description: "Founder of Sixtusphere — cybersecurity, simplified. Read the latest articles by Sixtus Sphere on Hashnode."
url: "https://hashnode.com/@sixtusphere"
---

@sixtusphere

# Sixtus Sphere

@sixtusphere · Anambra, Nigeria · Joined September 2026

Founder of Sixtusphere — cybersecurity, simplified.

## Comments

[Good add, you're right that the click was only the entry point, the real failure was that nothing flagged one account suddenly pulling thousands of documents. If I had to pick one control for a mid-size club today, I'd lean toward alerts on bulk document access over passkeys alone. Passkeys stop THIS specific attack (credential phishing), but they don't stop an already-authenticated account from being used to exfiltrate data, whether that's through a compromised session, an insider, or malware on the device. Anomaly detection on access patterns catches a wider range of ways this could go wrong, not just phishing. Ideally you'd want both, but if budget forces a choice, I'd protect the data movement, not just the login.](https://hashnode.com/posts/before-the-115-charges-against-man-city-there-was-one-phishing-email/6ac356b593fac4039279ceac/comment/6ac36bb28247e4b882099f8e#reply-6ac3f672b00cee8f5a08501a)

Reply · Article · Oct 5 · [Before the 115 Charges Against Man City, There Was One Phishing Email](https://hashnode.com/posts/before-the-115-charges-against-man-city-there-was-one-phishing-email/6ac356b593fac4039279ceac)