Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Identity Attack Watch: AD Security News, July 2024

semperis.com | incident | #active-directory | #ransomware | #mfa | #crowdstrike | #news-roundup | #att-data-breach

Summary

July 2024 roundup: the CrowdStrike outage spotlights disaster recovery testing, ransomware shuttered LA County courts, and the AT&T breach tied to Snowflake credentials renews MFA calls.
Published
Collected

original ↗

Related coverage

incident · semperis.com
Identity Attack Watch: January 2022
January 2022 roundup: phishing enrolled attacker devices into Azure AD tenants lacking enforced MFA; LockBit hit the French Ministry of Justice and European firms via GPO-based deployment; noPac can compromise DCs in seconds.
blog · netspi.com
Move from Passive to Proactive with Offensive Security over Cyber Insurance
With cyber insurance premiums climbing and coverage shrinking, carriers now require MFA, access management, and phishing training; investing those dollars in offensive security may pay off better.
incident · semperis.com
Identity Attack Watch: November 2022
November 2022 roundup: Sandworm spread RansomBoggs via domain controllers in Ukraine; LockBit hit Southampton County and Continental; Vice Society struck Cincinnati College; Black Basta hit Sobeys.
incident · semperis.com
Identity Attack Watch: October 2022
October 2022 roundup: Microsoft warned of Prestige ransomware hitting Ukraine/Poland logistics via domain admin credentials; Hive attacked Tata Power; LockBit breached UK dealer Pendragon.
incident · semperis.com
Identity Attack Watch: September 2022
September 2022 roundup: the Bloody Ransomware Gang used a leaked LockBit builder; an SEO poisoning campaign led to AD compromise; Lapsus$ breached Uber; Hive struck New York and Canadian targets.
incident · semperis.com
Protecting Healthcare Organizations from Ransomware Attacks
Healthcare organizations face rising ransomware risk via Active Directory: experts recommend least privilege, strong service-account passwords, and MFA, warning traditional defenses fall short.
back