One stolen keyring. Hundreds of firewalls. That is the risk when one provider holds the keys to many businesses. Attackers broke into a central firewall-management system and stole material covering more than five hundred firewalls. Unit 42 documented the intrusion. CISA has added a related exploited flaw to its warning catalog. The important limit: the researchers did not confirm five hundred customer breaches. They found exposed configurations and credentials. For buyers, that changes the renewal conversation. Ask how your provider separates customers, replaces compromised credentials, and proves that old access no longer works. Before you sign, ask: if your management console is breached, show me the last test proving our systems stay beyond the attacker's reach.