The Subdomain That Brought Down an Enterprise (And How to Find Yours Before Attackers Do)

When a security researcher found a major company's abandoned subdomain pointing to an internal BambooHR instance — no firewall, no auth, just a login page sitting on the public internet — it made head