Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Identity Attack Watch: AD Security News, November 2023

semperis.com | incident | #active-directory | #ransomware | #healthcare | #okta | #news-roundup | #blackcat | #jaxa

Summary

November 2023 roundup: the Okta breach exposed support-user data (many admins lacked MFA), attackers targeted JAXA's Active Directory, and BlackCat/ALPHV hit Henry Schein twice; MOVEit victims grew.
Published
Collected

original ↗

Related coverage

incident · semperis.com
Identity Attack Watch: July 2022
July 2022 roundup: LockBit claimed 100GB stolen from Italy's tax agency and hit small towns; Black Basta shut down manufacturer Knauf; BlackCat breached game publisher Bandai Namco.
blog · semperis.com
Identity Attack Watch: December 2022
December 2022 roundup: LockBit hit the Port of Lisbon and California's Department of Finance; Hive hit Louisiana's Lake Charles Memorial (270,000 patients); BlackCat hit Colombian energy firm EPM.
blog · semperis.com
Identity Attack Watch: June 2022
June 2022 roundup: Conti breached 40+ organizations in one month; CISA urged Exchange Online users onto Modern Auth; BlackCat targets Exchange servers for AD recon; Vice Society hit Palermo; Black Basta paired with QBot.
blog · semperis.com
Identity Attack Watch: April 2022
April 2022 roundup: FBI warning on BlackCat/ALPHV (dozens of victims); leaked Conti tools used against Russian firms; Hive breach exposed 850,000 Partnership HealthPlan members' data; Conti claimed the Panasonic Canada attack.
incident · semperis.com
Identity Attack Watch: AD Security News, February 2024
February 2024 roundup: Rhysida hit Lurie Children's Hospital and Insomniac Games, BlackCat claimed Change Healthcare and loanDepot, and LockBit attacked Fulton County.
incident · semperis.com
Identity Attack Watch: AD Security News, August 2023
August 2023 roundup: fake LockBit Locker phishing in Spain, Rhysida hitting Prospect Medical (500K SSNs), BlackCat hitting Seiko, Cuba abusing NetLogon, and more MOVEit victims.
back