Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

NotPetya Flashback: The Latest Supply-Chain Attack Puts Active Directory at Risk of Compromise

semperis.com | blog | #supply-chain | #active-directory | #solarwinds | #fireeye | #notpetya | #netlogon

Summary

The FireEye breach and SolarWinds supply-chain attack (SUNBURST, 18,000 customers) revived NotPetya parallels: an exploited NETLOGON flaw could hand attackers domain-admin rights; Maersk's week-long manual AD rebuild showed the stakes.
Published
Collected

original ↗

Related coverage

blog · netspi.com
FireEye, SolarWinds, U.S. Treasury: What’s Happening in the Cyber Security World Right Now?
Early analysis of the SolarWinds Orion supply chain attack: UNC2452 (attributed to APT29) delivered the SUNBURST backdoor via trojanized signed updates to 300,000+ organizations including FireEye.
blog · bishopfox.com
What We Know (And Don’t) About The SolarWinds Orion Hack So Far
Dan Petro explains what's known and unknown about the SolarWinds Orion supply-chain hack: trojanized updates reached agencies from the Pentagon to NASA; around 18,000 customers were affected.
blog · netspi.com
The Need to Prevent Insider Threats, as Revealed by the SolarWinds Cyber Security Breach
Using the SolarWinds breach as a lens, the post urges CISOs to prioritize insider threat prevention, citing Ponemon data showing average insider incident costs reached $11.45 million in 2020.
blog · semperis.com
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.
blog · semperis.com
How to Secure Service Accounts: Protecting Identity Security’s Achilles’ Heel
Service accounts are business-critical but hard to find and govern, making them frequent attack entry points. The post explains the risks and how automated, layered controls close the security gap.
blog · semperis.com
EMA Report: Unknown Vulnerabilities Emerge as Top Active Directory Security Concern
EMA report: unknown AD vulnerabilities top practitioners' security concerns, followed by known-but-unfixed flaws; SolarWinds and Colonial Pipeline raised awareness, and Mandiant says AD features in 90% of investigated incidents.
back