---
id: 5968
title: "Identity Attack Watch: December 2021"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/identity-attack-watch-december-2021/"
published_at: "2021-12-31T16:00:37Z"
tags: ["active-directory", "log4j", "patching", "alphv", "news-roundup", "cuba-ransomware"]
phying_url: "https://phying.com/item/5968"
lang: en
---

# Identity Attack Watch: December 2021

## Summary

December 2021 roundup: Microsoft urged immediate patching of two AD flaws enabling domain takeover; Conti weaponized Log4j against Kronos payroll; FBI warned on Cuba ransomware; ALPHV BlackCat emerged with domain-credential features.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2021-12-31T16:00:37Z
- **Original:** https://www.semperis.com/blog/identity-attack-watch-december-2021/
- **Phying News:** https://phying.com/item/5968