Identity and Access Management

‘China’ Azure Breach: MUCH Worse Than Microsoft Said
Richi Jennings | | Active Directory, Authentication, azure, Azure Active Directory, Azure AD, Entra ID, Exchange, Microsoft, Microsoft Azure, Microsoft Azure Active Directory, Microsoft Azure Security, OpenID, Outlook.com, SB Blogwatch, Storm-0558, Wiz
Storm-0558 Breaks: Satya and Pooh, sitting in a tree, K.I.S.S.I.N.G ...
Security Boulevard

OPSEC FAIL: US Military Email Going to Mali — via Typo
Richi Jennings | | defense department, Department of Defense, DoD, E-mail, email, Johannes Zuurbier, Mali, military, Military Communications, mxrecords, pentagon, Russia, SB Blogwatch, U.S. Department of Defense, U.S. military, United States Department of Defense, US DOD, US Military
MX Mixup: Russian-allied government can intercept “highly sensitive information”—because there’s no “I” in .ML ...
Security Boulevard

China Breaches Microsoft Cloud — Spied on US Govt. Email
Richi Jennings | | Active Directory, Authentication, Azure Active Directory, Azure AD, Exchange, Microsoft, Outlook.com, SB Blogwatch, Storm-0558
Storm-0558 Brewing: Multiple Microsoft failures cause data leaks at State and Commerce depts., plus 23 other orgs ...
Security Boulevard

3 Tips to Protect Employees From External Exploitation Threats
Here's how credentialed insider attacks work and how to avoid situations where user negligence can lead to successful attacks ...
Security Boulevard

StackRot: Linux Bug so bad Linus Dives Into Code to Fix It
Maple Tree Side Effects: Torvalds feels the pressure, fixes lazy locks ...
Security Boulevard

Contec SolarView: Critical Bug Unpatched After 14 MONTHS
Richi Jennings | | Contec, CVE-2022-29303, CVE-2022-44354, CVE-2023-23333, ICS, ICS/SCADA, iot, Mirai, Mirai botnet, OT, SB Blogwatch, SCADA, SolarView
PV OT: VPN PDQ! 9.8 CVSS known since May 2022—but still exploitable on 400+ net-connected OT/ICS/SCADA systems ...
Security Boulevard

Fortinet Bug: RUN — Don’t Walk — to Patch Critical RCE
Richi Jennings | | CVE-2023-27997, Fortigate, FortiNAC, Fortinet, Fortinet VPN, Fortiphyd, FortiSIEM, Heap Overflow, rce, SB Blogwatch
Or just get it off the internet, stat ...
Security Boulevard

‘Wagner Mercenary’ Hackers Destroy Russian Satellite Comms
Richi Jennings | | Dozor-Teleport, false flag, Russia, Russia-Ukraine, russia-ukraine conflict, Russia's War on Ukraine, Satellite Attacks, Satellite Communications, Satellite Hacking, Satellites, SB Blogwatch, Ukraine, ukraine conflict, Ukraine Cyber War, Ukraine cyberattack, Ukraine-Russia War
Dozor-Teleport hack, vandalism and data breach. But is it a Ukrainian false flag op? ...
Security Boulevard

Ironic: LetMeSpy Spyware Hackers Were Hacked (by Hackers)
Richi Jennings | | android spyware, cyberstalking, Data breach, Data Leaks, iOS spyware, LetMeSpy, maia arson crimew, Malware Spyware, Parental Control, parental controls, Privacy, SB Blogwatch, spyware, Stalkerware, Stalking, Stalkware
Content warning: Abuse, stalking, controlling behavior, Schadenfreude, irony, doxxing ...
Security Boulevard