Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Identity Attack Watch: AD Security News, June 2024

semperis.com | blog | #active-directory | #mfa | #snowflake | #healthcare | #okta | #news-roundup

Summary

June 2024 roundup: attacks disrupted London hospitals, stolen credentials bypassed Okta to hit Snowflake customers, and Medibank's breach renewed lessons on enforcing MFA.
Published
Collected

original ↗

Related coverage

blog · semperis.com
Semperis Offers New Protection Against Okta Breaches
Semperis extended its identity protection platform to Okta. Explains Okta's IAM role, breach consequences (data theft, takeover, compliance issues), and why cloud IAM platforms need protection.
vulnerability · semperis.com
Using Purple Knight to Detect the Okta Super Admin Attack
Semperis expanded Purple Knight to Okta with two indicators: new Super Admin grants in 7 days and users without MFA. They helped detect the recent Okta attacks, where elevated access disabled 2FA.
incident · semperis.com
Identity Attack Watch: January 2022
January 2022 roundup: phishing enrolled attacker devices into Azure AD tenants lacking enforced MFA; LockBit hit the French Ministry of Justice and European firms via GPO-based deployment; noPac can compromise DCs in seconds.
blog · semperis.com
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.
blog · semperis.com
Checklist: How to Assess Your Cloud Identity Environment for True Cyber Resilience
A four-point checklist for assessing cloud identity resilience in Entra ID and Okta: crisis response preparedness, fault tolerance and high availability, monitoring and logging, and load testing.
blog · semperis.com
Semperis Acquires MightyID: Expands True Cyber Resilience Across Multi-IdP Environments
Semperis acquires MightyID, a resilience specialist for Okta and Ping, extending its identity resilience coverage across AD, Entra ID, Okta and Ping for multi-IdP environments.
back