3 pieces by Mateo Lindqvist.
A destructive attack in March reportedly used a company’s own device management platform to wipe its devices. Admin planes can reach everything by design. Here’s how to protect them as the critical systems they are.
Attackers used OAuth tokens from a sales chat integration to export CRM data from hundreds of organizations, then searched it for more credentials. Most victims had strong login security. The tokens went around it.
This spring’s retail and insurance intrusions started with phone calls to the help desk. Attackers convinced help desks to reset credentials and MFA. Here’s how to make the service desk a strong link in identity security.