The MFA Gaps Attackers are Still Exploiting
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn't enough and how organizations can close these authentication gaps.
Nessun'altra testata seguita da Zonactu riporta ancora questa notizia.
On August 4, 2026, an Akira ransomware affiliate began spraying passwords against a SonicWall SSL VPN . Around seven minutes later, one attempt succeeded. The credentials were valid, and the VPN account had no multi-factor authentication (MFA) protecting it. Roughly two hours later, the attacker used RDP to access the domain controller and began enumerating Active Directory.
The ransomware deployment ultimately failed, but by then the attacker had already stolen credentials and file-share data.
