Claude, GPT and the Minnesota attackers all used known bugs and weak logins

Three separate incidents, all of them starting at something exposed and unauthenticated