Can't unsee what you saw on Seesaw

from here and here

Apparently Seesaw suffered a credential stuffing attack and the attacker(s) sent Goatse pics all over the place. Now you might be thinking "Wait a minute, credential stuffing is hardly their fault", but there are defenses against such things, so the fact that the attack worked suggests that Seesaw did not have adequate defenses against what is a fairly ordinary kind of attack, all things considered.

A password stealer no one would suspect

from here

Normally it's a login form that gets stuffed (and that would actually accomplish something), but why not stuff a Roomba, or even a turkey for that matter.