How Hired Hackers Got “Complete Control” of Palantir
I don't think Palantir should be shamed for this. It's laudable that they invested in penetration testing - better they find out this way than by an actual APT/hacking group.