New attack tactics look to bypass MFA and target security blindspots

A new report from AI-powered managed extended detection and response company Ontinue shows a sharp rise in MFA-bypassing identity attacks in the first half of the year. These attacks are using token replay abuse with roughly 20 percent of live incidents involving adversaries reusing stolen refresh tokens to bypass MFA, even after password resets. The findings also reveal that while ransomware remains one of the most disruptive threats, adversaries are increasingly focused on identity-based attacks in the cloud, persistence in Azure environments, and even ‘back to basics. tactics like USB-delivered malware. Over 70 percent of attachments found bypassing secure email… [Continue Reading]