https://orasec.co/case-studies/from-initial-foothold-to-domain-admin-a-complete-active-directory-takeover 2025-12-26 https://orasec.co/case-studies/one-idor-away-from-exposing-2-7-million-customer-records 2025-12-26 https://orasec.co/case-studies/how-a-cloud-misconfiguration-nearly-led-to-a-5m-gdpr-fine 2025-12-26 https://orasec.co/case-studies/stolen-admin-credentials-found-on-the-dark-web-before-attackers-could-strike 2025-12-26 https://orasec.co/case-studies/shadow-asset-unsecured-test-server-left-sensitive-customer-data-exposed 2025-12-26