Identity & access
-
Phishing campaign hides behind Microsoft Power BI links
Huntress has uncovered a phishing campaign using legitimate Microsoft Power BI pages to reach victims before installing redundant ScreenConnect clients for persistent remote access.
-
European security data links incidents to identity and visibility gaps
European security data analysed by Conscia links cyber incidents to compromised identities, excessive trust, incomplete visibility and delays between detection and response.
-
Denmark breach exposes data on 8.8 million people
Denmark is investigating unauthorised access to its central population register after a private company’s legitimate connection was abused to obtain personal data relating to around 8.8 million registered people.
-
Fortra fixes eight BoKS flaws in privileged access stack
Fortra has disclosed eight BoKS vulnerabilities, including critical weaknesses affecting Active Directory service account passwords, command execution, and memory safety.
-
DTU breach puts data on 200,000 users at risk
Denmark’s Technical University says attackers accessed its identity and access management system and downloaded data that may relate to as many as 200,000 current and former users.
-
Keeper brings access approvals into Freshservice
Keeper Security has integrated privileged-access approvals with Freshservice, allowing IT agents to handle vault, endpoint-privilege, and device requests from service tickets.
-
Public GitHub credentials remain live for years
Truffle Security says it verified 543,699 working credentials in a snapshot of 224 million public GitHub repositories, with a median exposure age of 784 days.
-
One identity compromise reached Kubernetes clusters
Microsoft says an attacker turned a compromised account into Azure DevOps and Kubernetes access by abusing password recovery, authentication enrolment, and trusted development pipelines.
-
Star Blizzard scales phishing with RedFlick
Microsoft says Russia-linked Star Blizzard has expanded from tightly targeted spear phishing into larger campaigns while adopting a lower-friction malware delivery technique known as RedFlick.
-
HMRC starts final MFA activation phase
HMRC has begun the final activation window for multi-factor authentication on remaining tax-agent Government Gateway accounts, with the rollout running until 15 October.