Posts Tagged ‘cisa’
CISA Cyber Security News – Threat Activity in Microsoft Cloud
CISA has reported seeing post-compromise threat activity in Microsoft Cloud/Azure environments, identifying three key components of this advanced persistent threat: Compromise / bypassing of federated identity solutions Use of forged authentication tokens to move laterally to Microsoft cloud environments Use of privileged access to a victim’s cloud environment to establish difficult-to-detect persistence mechanisms for…
Read MoreCyber Security News: CISA Updates SolarWinds Orion Incident
Over the last month, a largescale cyber incident affected over 18,000 federal government and private industry information technology systems reliant on SolarWinds Orion technology. It has been confirmed that this Advanced Persistent Threat is primarily used for information-gathering activity. The Cybersecurity Infrastructure Security Administration (“CISA”) recently issued an update on their remediation progress, which…
Read More