Top 3 Identity-Based Attack Trends to Watch in 2024

One year after JBS paid an 11 million dollar ransom to ransomware actors, this piece urges critical infrastructure operators to patch proactively and validate security controls continuously.

A ransomware attack attributed to an Eastern European group forced Colonial Pipeline, supplier of nearly half the US East Coast's fuel, to shut down its entire system and triggered a federal response.

Three OAuth techniques attackers use in Azure, and how Entra ID sign-in logs and JWT claims expose them; includes Wiz telemetry on prevalence and ready-to-use KQL detection queries.

NetSPI consultant Michelle Eggers recaps the SANS ICS Security Summit 2023, from the beta SANS ICS 310 course to why ransomware tops ICS threats and how OT security differs from IT.

One year after Colonial Pipeline, Semperis' Sean Deuby on the state of infrastructure security: ransomware groups keep targeting utilities, healthcare and food supply; Gartner counts 400% more attacks; SCADA/IoT estates remain hard to secure.

Why SolarWinds should push organizations to secure AD: attackers gained initial access through on-premises AD, and AD admin access yields total on-prem and cloud visibility—continuous monitoring and layered defense are essential.