The MFA Gaps Attackers are Still Exploiting
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn't enough and how organizations can close these authentication gaps.
Żadne inne medium obserwowane przez Zonactu nie podaje jeszcze tej wiadomości.
On August 4, 2026, an Akira ransomware affiliate began spraying passwords against a SonicWall SSL VPN . Around seven minutes later, one attempt succeeded. The credentials were valid, and the VPN account had no multi-factor authentication (MFA) protecting it. Roughly two hours later, the attacker used RDP to access the domain controller and began enumerating Active Directory.
The ransomware deployment ultimately failed, but by then the attacker had already stolen credentials and file-share data.
