Cyberattackers Double Down on Bypassing MFA

As companies increasingly adopt MFA, cybercriminals are developing a variety of strategies to steal credentials and gain access to high-value accounts anyway. As companies increasingly adopt MFA, cybercriminals are developing a variety of strategies to steal credentials and gain access to high-value accounts anyway. [TechWeb]( Follow Dark Reading: [RSS]( March 02, 2023 LATEST SECURITY NEWS & COMMENTARY [Cyberattackers Double Down on Bypassing MFA]( As companies increasingly adopt MFA, cybercriminals are developing a variety of strategies to steal credentials and gain access to high-value accounts anyway. [CISA: ZK Java Framework RCE Flaw Under Active Exploit]( The flaw, which drew attention in October when it was found in ConnectWise products, could pose a significant risk to the supply chain if not patched immediately. [Dish Blames Ransomware Attack for Disruptions of Internal Systems, Call Center Services]( The cyberattackers might have potentially accessed customer information, the service provider warns. [What Happened in That Cyberattack? With Some Cloud Services, You May Never Know]( More cyberattackers are targeting organizations' cloud environments, but some cloud services, such as Google Cloud Platform's storage, fail to create adequate logs for forensics. [Without FIDO2, MFA Falls Short]( The open authentication standard addresses existing multifactor authentication security vulnerabilities. [The Importance of Recession-Proofing Security Operations]( Make sure cybersecurity is taken seriously and consistently across the board. Educate the ecosystem beyond your own organization to mitigate security risks for everyone. [Linux Support Expands Cyber Spy Group's Arsenal]( An infamous Chinese cyber-hacking team has extended its SysUpdate malware framework to target Linux systems. [MORE NEWS /]( [MORE COMMENTARY]( HOT TOPICS [Pernicious Permissions: How Kubernetes Cryptomining Became an AWS Cloud Data Heist]( The opportunistic "SCARLETEEL" attack on a firm's Amazon Web Services account turns into targeted data theft after the intruder uses an overpermissioned service to jump into cloud system. [The DoJ Disruption of the Hive Ransomware Group Is a Short-Lived Win]( The war on critical infrastructure demands a better security strategy. [How the Ukraine War Opened a Fault Line in Cybercrime, Possibly Forever]( Infighting, conscription, emigration. The war in Ukraine has pitted cybercriminals against one another like no other event before it. [MORE]( EDITORS' CHOICE [Attackers Were on Network for 2 Years, News Corp Says]( The publisher of the Wall Street Journal, New York Post, and several other publications had last year disclosed a breach it said was the work of a state-backed actor likely working for China. LATEST FROM THE EDGE [Visibility Is as Vital as Zero Trust for Low-Code/No-Code Security]( By authenticating and authorizing every application, and by maintaining data lineage for auditing, enterprises can reduce the chances of data exfiltration. LATEST FROM DR TECHNOLOGY [Ermetic Adds Kubernetes Security to CNAPP]( The automated capabilities can discover misconfigurations, compliance violations, and risk or excessive privileges in Kubernetes clusters. WEBINARS - [How Firewalls Fit With Modern Enterprise Security]( With all the focus on the newest security technologies, it is easy to forget that the firewall is still an important part of the enterprise security strategy. In this webinar, experts offer a look at some of the most common ... - [Ten Emerging Vulnerabilities Every Enterprise Should Know]( Every day, black hat attackers and white hat researchers are discovering new security vulnerabilities in widely-used systems and applications that might be exploited to compromise your data. Are you aware of the newest - and potentially most impactful - vulnerabilities ... [View More Dark Reading Webinars >>]( WHITE PAPERS - [Enable and Protect Your Remote Workforce]( - [Securing OT, Remote Access and Converged SOC Operations]( - [Top Three Considerations To Build, Deploy, and Run Your Application Journey]( - [Cloud Journey Consideration Stage: 2022 Cloud Security Report]( - [Attack Surface Management v2.0 by Brad LaPorte]( - [Forrester Total Economic Impact Report Infographic]( - [State of Enterprise Cybersecurity: Invest Now, or Pay Big Later]( [View More White Papers >>]( FEATURED REPORTS - [The Promise and Reality of Cloud Security]( Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises ... - [10 Hot Talks From Black Hat USA 2022]( Black Hat USA brings together cutting-edge research, new security tools, and sophisticated defensive techniques over the course of two days. There were some recurring themes across the sessions, and many of these topics are going to be important issues to ... - [How Machine Learning, AI & Deep Learning Improve Cybersecurity]( [View More Dark Reading Reports >>]( PRODUCTS & RELEASES [Offensive Security Is Now OffSec - Refresh Reflects Future of Cybersecurity Learning and Skills Development]( [Octillo Launches Women's Cybersecurity Scholarship in Partnership With the Center for Cyber Safety and Education]( [Forescout Addresses Modern SecOps Challenges With Launch of Forescout XDR]( [Fastly Launches Managed Security Service to Protect Enterprises From Rising Web Application Attacks]( [2 of the Worst Healthcare Data Breaches in US History Happened Last Year]( [MORE PRODUCTS & RELEASES]( CURRENT ISSUE [The Promise and Reality of Cloud Security]( [DOWNLOAD THIS ISSUE]( [VIEW BACK ISSUES]( Dark Reading Daily -- Published By [Dark Reading]( Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:ContactDarkReading@informa.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2023]( | [Informa Tech]( | [Privacy Statement]( | [Terms & Conditions]( | [Contact Us](mailto:ContactDarkReading@informa.com)