/
initial_access_vector:valid_accounts × victim_sectors:"it services" × limpar

Resultados

3 casos · pág. 1/1

wiz.io · high

Storm-0940 actor uses ARTEX AI pentest agent against IT and software vendors' identity providers and M365 integrations

Throughout October 2026, Wiz observed an actor using tooling associated with ARTEX, an open-source autonomous AI penetration-testing framework, against multiple IT and software vendors. The activity targeted identity providers (Okta, Entra ID, AWS Cognito) and Microsoft 365 integrations, with repeated attempts to bypass authentication, en…

infosecurity-magazine.com · · 2 fontes · 2 atualizações medium

ICO reprimands Ogi Networks and Data Cymru over 2024 ransomware attack via forgotten 'Password1' test account

The UK Information Commissioner's Office (ICO) has issued reprimands, not fines, to Ogi Networks Limited (ONL) and the Local Government Data Unit – Wales (Data Cymru) over a ransomware attack on 1 November 2024 (theregister.com, infosecurity-magazine.com). The intruder entered Data Cymru's network through a forgotten test account, Test2 (…

infosecurity-magazine.com · · 10 fontes · 12 atualizações critical

ConnectWise Cloud Backup (SkyKick) app credentials abused in Microsoft 365 supply-chain attack; ~1,000 tenants probed, services suspended

ConnectWise suspended Cloud Backup (formerly SkyKick), SaaS Security and Cloud Management after unknown actors gained unauthorized access to its application identities and used them to sign in to customers' Microsoft 365 tenants. ConnectWise says it identified the incident on October 14, 2026 (thehackernews.com) and began mitigations on O…