[CVE-2022-30216] Identity Attack Watch: August 2022

December 2021 roundup: Microsoft urged immediate patching of two AD flaws enabling domain takeover; Conti weaponized Log4j against Kronos payroll; FBI warned on Cuba ransomware; ALPHV BlackCat emerged with domain-credential features.

Semperis argues that testing backups under ideal conditions creates only an illusion of resilience; real cyber resilience is about staying recoverable when the plan fails and the assumptions behind it collapse.

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

December 2022 roundup: LockBit hit the Port of Lisbon and California's Department of Finance; Hive hit Louisiana's Lake Charles Memorial (270,000 patients); BlackCat hit Colombian energy firm EPM.

June 2022 roundup: Conti breached 40+ organizations in one month; CISA urged Exchange Online users onto Modern Auth; BlackCat targets Exchange servers for AD recon; Vice Society hit Palermo; Black Basta paired with QBot.

May 2022 roundup: CISA warned against May Windows updates on domain controllers due to Kerberos/AD DS auth issues; Costa Rica declared emergency over Conti attacks; Verizon DBIR tied ~50% of breaches to stolen credentials.