For providers

A MOIS-aligned threat group has been using Microsoft Exchange servers to exfiltrate sensitive data from Gulf-state government agencies.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

I noticed in my logs 2 weeks ago regular probe from a subnet in the Amazone cloud only scanning for TCP/8080 capture by the iptables of my DShield sensor. The scanning started on the 15 Aug - 4 Oct 2024 where the sensor recorded 1046 individual IPs from this network. 

But the time when quantum computers pose a tangible threat to modern encryption is likely still several years away.

Okta is pitching new features to address what it sees as critical security holes in the way SaaS and cloud vendors interact.

Okta has announced a working group that will aim to standardize identity management and authentication.

By using EDRSilencer, threat actors are able to prevent security alerts and reports getting generated.

The shift to a distributed work model has exposed organizations to new threats, and a low but continuing stream of printer-related vulnerabilities isn't helping.