The one where a fake email proved the risk was real.
A fake onboarding email gave CovertSwarm valid credentials inside a major B2C retailer's network. The client caught the phishing attempt fast, but a VPN session from the attack stayed open long after the incident was closed. That's the gap a real attacker would have found first.
