Three crews this week didn't break in. They wore a name your tools already trust. A phishing chain hopped through Google Meet, Search and DoubleClick before its one malicious step, so the gateway let it pass. Separately, OpenAI's internal package repo became a covert channel that quietly pulled data out through Gmail. huggingface.co lands on AWS, and we flag that address investigate: a familiar brand tells you where traffic is from, never whether it's safe. RR#10: https://www.reput.io/blog/reputation-radar-10