Identity Attack Watch: AD Security News, March 2024

Summary

March 2024 roundup: credential stuffing hit Hot Topic and PetSmart, while Akira's ransomware attack on Nissan compromised data on roughly 100,000 people.

Published: 2024-03-29 01:35
Collected: 2026-08-07 02:03

original ↗

← PreviousSemperis DSP: Enhance AD and Entra ID Protection from Cyber Threats Next →LDAP Injection Attack Defense: AD Security 101

Related coverage

incident · semperis.com

Identity Attack Watch: AD Security News, May 2024

May 2024 roundup: LockBit stole London Drugs data, Live Nation confirmed a Ticketmaster breach via a third party, a Check Point VPN zero-day exposed AD data, and Okta flagged credential stuffing.

incident · semperis.com

Identity Attack Watch: November 2022

November 2022 roundup: Sandworm spread RansomBoggs via domain controllers in Ukraine; LockBit hit Southampton County and Continental; Vice Society struck Cincinnati College; Black Basta hit Sobeys.

incident · semperis.com

Identity Attack Watch: October 2022

October 2022 roundup: Microsoft warned of Prestige ransomware hitting Ukraine/Poland logistics via domain admin credentials; Hive attacked Tata Power; LockBit breached UK dealer Pendragon.

incident · semperis.com

Identity Attack Watch: September 2022

September 2022 roundup: the Bloody Ransomware Gang used a leaked LockBit builder; an SEO poisoning campaign led to AD compromise; Lapsus$ breached Uber; Hive struck New York and Canadian targets.

incident · semperis.com

Identity Attack Watch: July 2022

July 2022 roundup: LockBit claimed 100GB stolen from Italy's tax agency and hit small towns; Black Basta shut down manufacturer Knauf; BlackCat breached game publisher Bandai Namco.

incident · semperis.com

Identity Attack Watch: January 2022

January 2022 roundup: phishing enrolled attacker devices into Azure AD tenants lacking enforced MFA; LockBit hit the French Ministry of Justice and European firms via GPO-based deployment; noPac can compromise DCs in seconds.

back