Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Identity Attack Watch: December 2021

semperis.com | blog | #active-directory | #log4j | #patching | #alphv | #news-roundup | #cuba-ransomware

Summary

December 2021 roundup: Microsoft urged immediate patching of two AD flaws enabling domain takeover; Conti weaponized Log4j against Kronos payroll; FBI warned on Cuba ransomware; ALPHV BlackCat emerged with domain-credential features.
Published
Collected

original ↗

Related coverage

blog · semperis.com
Identity Attack Watch: August 2022
August 2022 roundup: Bumblebee loader aided AD attacks; Nobelium's MagicWeb backdoored ADFS; an Iranian group exploited Log4j against Israel; CVE-2022-30216 threatened domain controllers.
blog · netspi.com
A Faster Way to Identify High Risk Windows Assets
Shows how Active Directory computer account properties expose OS and service pack levels queryable by any domain user, enabling faster identification of high-risk unpatched Windows assets.
blog · semperis.com
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.
blog · semperis.com
Identity Attack Watch: AD Security News, May 2023
May 2023 roundup: Black Basta hit ABB's Active Directory and Rheinmetall, LockBit claimed MCNA Dental (nearly 9 million patients), and ALPHV/BlackCat compromised Constellation Software.
blog · semperis.com
Identity Attack Watch: December 2022
December 2022 roundup: LockBit hit the Port of Lisbon and California's Department of Finance; Hive hit Louisiana's Lake Charles Memorial (270,000 patients); BlackCat hit Colombian energy firm EPM.
blog · semperis.com
Identity Attack Watch: June 2022
June 2022 roundup: Conti breached 40+ organizations in one month; CISA urged Exchange Online users onto Modern Auth; BlackCat targets Exchange servers for AD recon; Vice Society hit Palermo; Black Basta paired with QBot.
back