[palant]

I haven’t seen it when I wrote the article. However, the formulation is vague enough that it could mean anything. Maybe the alerts were sent out by mistake which would be good news. But they don’t quite say that. Their statement might also mean that they rather disabled legitimate alerts so that people don’t get concerned. So they might have “cured” the symptoms without addressing the actual issue.

It certainly isn’t reassuring that they keep talking about credential stuffing, even though it’s quite unlikely to be the culprit here.

[tuwtuwtuwtuw]

What's the difference between "triggered in error" and "sent out by mistake" then? In this context they seem like the same..

[palant]

The difference is the word “likely” which means as much as “we have no idea.”