highThreat Intelligence
Specops Warns of Persistent MFA Gaps Being Exploited in Credential-Based Attacks
Analysis reveals attackers targeting VPNs, RDP, and Windows systems with incomplete multi-factor authentication coverage
Cyber.TechVoid1 min read
Key Takeaways
- Attackers are exploiting MFA gaps using stolen credentials to access VPNs, RDP, and password-only Windows systems.
- Protecting only cloud applications is insufficient; on-premises and hybrid environments remain vulnerable.
- Specops recommends comprehensive MFA deployment across all access points to close authentication gaps.
- Organizations must address legacy systems that rely on password-only authentication to reduce risk.
Related Security News
highThreat Intelligence
FBI Disrupts Flax Typhoon Tools Targeting U.S. Critical Infrastructure
The U.S. Federal Bureau of Investigation and the Department of Justice have seized seven domains associated with Flax Typhoon, a China-linked advanced persistent threat group. The operation disrupted the group's ability to conduct reconnaissance and gain initial access to U.S. critical infrastructure systems. Authorities stated the domains were used for scanning and, in some cases, infiltrating target networks. The action is intended to reduce the threat to critical infrastructure assets across multiple sectors.
The Hacker News1 min read
