Cyber Threat Daily – 9/19/25

Today’s roundup brings fast, practical updates that matter to U.S. businesses and consumers. Microsoft disrupted a global phishing ring that fed ransomware and BEC attacks against hospitals. The FBI warned of two active campaigns targeting Salesforce instances, and supply chain compromises tied to Salesloft and Drift hit customers of Cloudflare, Proofpoint, Palo Alto Networks, and Zscaler.

Why this matters: manufacturing faces real setbacks as Jaguar Land Rover pushed production and Bridgestone Americas works to restore systems. These outages ripple through just-in-time supply chains and retail shelves, adding tangible costs for companies and shoppers.

Researchers flagged new attack techniques: VoidProxy’s MFA bypass against Microsoft and Google accounts, and a SiteCore ViewState deserialization flaw exposing ASP.NET keys. At the same time, CISA renewed support for the CVE program while a House bill moves to reauthorize key programs — tying policy to front-line needs.

Bottom line: AI-driven phishing, double extortion, and stolen policies are driving higher insurance losses. Investing in email defenses, stronger identity checks, faster patching, and hardened SaaS integrations costs less than the downtime and data loss that follow a breach.

Key Takeaways

Credential theft and targeted phishing are hitting hospitals and enterprise SaaS customers now.
Supply chain compromises can cascade to major vendors and downstream organizations.
New technical flaws and MFA bypasses raise urgency for faster patch and verification steps.
Policy moves in Washington aim to align resources with operational threats.
Practical steps—email hardening, identity verification, patching—offer strong returns.

Today’s threat landscape at a glance: breaking cyberattacks and policy moves shaping U.S. defenses

Multiple linked campaigns and supply-chain compromises are reshaping risk for hospitals, automakers, and SaaS users. This snapshot lists what happened, who is affected, and why it matters for U.S. firms and consumers.

Microsoft disrupts global phishing operation fueling ransomware and BEC against U.S. hospitals

Microsoft took down a phishing network that harvested credentials used in ransomware and business email compromise. Stolen logins opened access to patient systems and outsourced clinics, causing service disruption across hospital networks.

FBI flags dual campaigns against Salesforce instances

The FBI warned of two campaigns by UNC6040 and UNC6395 targeting Salesforce. Attackers sought customer and case data where fraud and BEC stem from even limited read-only access.

Salesloft/Drift-linked supply chain breaches ripple widely

Mandiant’s investigation tied a months-long GitHub compromise to Salesloft and Drift integrations. Downstream impacts hit Cloudflare and Proofpoint, and affected customers of Palo Alto Networks and Zscaler.

Manufacturing and supplier disruptions

Jaguar Land Rover paused production longer after a social-engineering-linked group claimed an attack. Bridgestone Americas is still restoring systems. These interruptions show how a single intrusion delays shipments and dealer operations.

Policy and vulnerability posture

CISA pledged enhancements to the CVE program while a House bill moves to reauthorize key programs. Meanwhile, researchers reported a SiteCore ViewState deserialization risk from exposed ASP.NET keys, and VoidProxy demonstrated MFA bypasses on Google and Microsoft accounts.

Incident	Primary Impact	Notable Adversary or Tool	Why it matters
Phishing takedown	Hospital credential theft	Phishing kits, BEC	Patient care and third-party clinics disrupted
Salesforce campaigns	Customer data exposure	UNC6040 / UNC6395	Business systems used for fraud and follow-on attacks
Salesloft/Drift compromise	Downstream supplier breaches	GitHub account compromise	Trusted integrations spread impact across firms
SiteCore / VoidProxy findings	Software vulnerabilities; MFA bypass	ViewState deserialization; VoidProxy	Raises urgency for patching, key management, and identity controls

Bottom line: adversaries focus on access, supply links, and social engineering. A clear strategy that pairs rapid detection with strict change control reduces the cost of response and recovery.

Counting the cost: how cyberattacks hit U.S. businesses and consumers today

From assembly lines to patient portals, recent incidents show how an account compromise ripples into dollars and days lost.

Operational and financial damage

Production slowdowns—like Jaguar Land Rover’s extended pause—create overtime, idle labor, and expedited shipping costs that cascade to suppliers. Restores at Bridgestone show how incident response and forensics can rival capital projects in expense.

Consumers on the front lines

Phishing-driven credential theft fuels BEC and fraud. Microsoft’s disruption of a hospital-focused phishing ring highlights how a single compromised login can delay care and expose patient data.

counting the cost cyber attacks

Insurance, severity, and strategy

Resilience’s report finds losses rising even as claims fall. AI-crafted phishing and double extortion let adversaries extract ransom and sell stolen policies. That trend pushes firms to fund stronger controls as part of underwriting.

Restoration and IR often cost more than prevention.
Salesforce-targeted campaigns show how cloud access multiplies exposure.
Higher deductibles shift more of the security burden onto insured organizations.

Impact	Typical cost drivers	Example
Production delays	Overtime, penalties	Jaguar Land Rover
Recovery spend	Forensics, rebuild	Bridgestone
Insurance loss	Ransom, double extortion	Resilience report

Phishing, vulnerabilities, and supply chain attacks: what today’s cybersecurity news means for your defenses

When OAuth apps or exposed keys are abused, an initial phish can balloon into supply chain attacks that touch many vendors. Researchers warned that VoidProxy bypasses MFA for Microsoft and Google, and Mandiant traced integration misuse through Salesloft and Drift.

phishing

MFA-bypass on the rise: VoidProxy targets Microsoft and Google accounts

Stop MFA-bypass phishing at the front door: deploy phishing-resistant authentication (FIDO2/WebAuthn) and conditional access based on device posture. Use real-time URL rewriting and sandboxing to blunt tools that intercept tokens.

Identity-based attacks and alert fatigue: why context and SOAR tools matter

Enrich alerts with geo-velocity, OAuth scopes, and SaaS audit logs so teams focus on real incidents, not noise. Security tools like SOAR can auto-revoke refresh tokens, quarantine risky apps, and reset sessions to cut dwell time.

From API and SaaS integrations to OT: secure software, networks, and third-party operations

Least-privilege access, signed webhooks, and API posture checks limit blast radius when integrations are abused. Require SBOMs, OAuth consent reviews, and periodic investigation of dormant integrations to spot hidden access.

Actionable steps: strengthen email, verify identity, harden SaaS, and speed patching

Enable DMARC/DKIM/SPF and advanced email filters to reduce phishing reach.
Rotate exposed ASP.NET keys, patch known deserialization vulnerabilities, and follow CISA CVE/KEV guidance.
Combine EDR with email protection and run tabletop exercises for BEC and API key theft.

“Focus on practical controls that remove easy attack paths—hardware-backed keys, just-in-time admin, and automated revocation when risk spikes.”

Priority	Concrete step	Why it helps
Identity	FIDO2 + conditional access	Blocks MFA-bypass tools
SaaS	Least privilege + signed webhooks	Limits integration misuse
Patching	Prioritize known exploits	Reduces vulnerability window

Conclusion

Today’s headlines reveal how criminals exploit everyday processes to reach far beyond a single system. Phishing, abused integrations, and linked campaigns let hackers move from one account to many, turning routine tools into a broader threat to data and operations.

Take action now,—invest in layered security: strong identity, email protections, and steady vulnerability management. These steps cut successful attacks and speed recovery when incidents hit.

Organizations and households are part of the same digital chain. With collaboration, clear playbooks, and practical choices, U.S. cyber resilience improves fast. Leaders who act today protect firms, partners, and families tomorrow.

FAQ

What was the major disruption Microsoft uncovered and who did it target?

Microsoft disrupted a global phishing operation that funneled ransomware and business email compromise (BEC) attacks. The campaign primarily targeted U.S. hospitals and healthcare providers, aiming to harvest credentials and deploy extortion tools that disrupt patient care and administrative systems.

How are threat actors exploiting Salesforce and other SaaS platforms?

The FBI warned of dual campaigns targeting Salesforce instances. Attackers abuse misconfigurations, stolen credentials, and weak API controls to move laterally, exfiltrate data, and inject malicious automation. These supply chain-style intrusions can cascade to integrated services and downstream partners.

Which vendors were affected by the Salesloft/Drift-linked supply chain breaches?

Customers of Cloudflare, Proofpoint, Palo Alto Networks, and Zscaler reported downstream impacts tied to incidents involving Salesloft and Drift. Compromised vendor tooling and credential reuse allowed attackers to pivot into security and networking environments, increasing detection difficulty.

How did attackers disrupt Jaguar Land Rover and Bridgestone operations?

Adversaries used social engineering to gain access to internal systems and logistics platforms. That led to production slowdowns and supply delays. These incidents underline how human-targeted attacks against operations teams can create broader manufacturing and distribution harm.

What is CISA focusing on in response to recent vulnerabilities and attacks?

CISA reinforced its emphasis on CVE management and rapid patching. The agency is pushing programs to improve vulnerability discovery, asset inventorying, and coordinated disclosure. Congress is also debating reauthorizing funds to expand these defensive capabilities.

Why are Sitecore vulnerabilities drawing attention from researchers?

Security teams flagged a Sitecore zero-day that exposes CMS instances to remote code execution and data leakage. Because Sitecore supports many enterprise sites, unpatched instances could enable supply chain compromise and widespread content or credential tampering.

What kinds of financial and operational costs are businesses facing from recent attacks?

Companies report production delays, emergency incident response spending, and losses in downstream suppliers. Ransom payments, forensic investigations, system rebuilds, and reputational damage all add up, often affecting quarterly revenue and insurance premiums.

How are consumers affected by these threats today?

Individuals face credential theft, account takeover, and fraud stemming from BEC and phishing. Healthcare and retail breaches can expose personal data, increasing identity theft risk and driving costly remediation for affected customers.

Why are ransomware insurance losses rising even if claim volume falls?

Attack severity has increased due to AI-enabled phishing, double extortion tactics, and targeted campaigns against critical infrastructure. Fewer but more damaging incidents push up payouts and premiums as insurers absorb larger single-event losses.

What is VoidProxy and why is MFA bypass a growing concern?

VoidProxy is a phishing platform that helps attackers evade MFA protections by relaying authentication flows or tricking users into approving logins. This trend shows that multi-factor methods must be paired with phishing-resistant options and behavioral analytics.

How should organizations address identity-based attacks and alert fatigue?

Adopt context-aware detection, SOAR (security orchestration, automation, and response) tools, and tighter identity governance. Prioritize high-fidelity alerts, reduce noisy signals, and automate routine response playbooks to improve analyst efficiency.

What defensive steps reduce risk from API, SaaS, and OT integrations?

Enforce least privilege for API keys, use strong API gateways, segment OT networks, and vet third-party software. Maintain an up-to-date asset inventory, deploy continuous monitoring, and require vendor security attestations for supply chain partners.

What immediate actions should teams take to harden email and SaaS security?

Implement DMARC, DKIM, and SPF; enable phishing-resistant MFA where possible; enforce conditional access policies; and lock down OAuth app consent. Regularly rotate service credentials and apply vendor-supplied security patches promptly.

How can organizations speed up patching and vulnerability workflows?

Centralize vulnerability data, prioritize by exploitability and business impact, and automate patch deployment for noncritical systems. Use threat intelligence to focus on active exploits and schedule regular tabletop exercises to reduce patching friction.

Today’s roundup brings fast, practical updates that matter to U.S. businesses and consumers. Microsoft disrupted a global phishing ring that fed ransomware and BEC attacks against hospitals. The FBI warned of two active campaigns targeting Salesforce instances, and supply chain compromises tied to Salesloft and Drift hit customers of Cloudflare, Proofpoint, Palo Alto Networks, and Zscaler.

Why this matters: manufacturing faces real setbacks as Jaguar Land Rover pushed production and Bridgestone Americas works to restore systems. These outages ripple through just-in-time supply chains and retail shelves, adding tangible costs for companies and shoppers.

Researchers flagged new attack techniques: VoidProxy’s MFA bypass against Microsoft and Google accounts, and a SiteCore ViewState deserialization flaw exposing ASP.NET keys. At the same time, CISA renewed support for the CVE program while a House bill moves to reauthorize key programs — tying policy to front-line needs.

Bottom line: AI-driven phishing, double extortion, and stolen policies are driving higher insurance losses. Investing in email defenses, stronger identity checks, faster patching, and hardened SaaS integrations costs less than the downtime and data loss that follow a breach.

Key Takeaways

Credential theft and targeted phishing are hitting hospitals and enterprise SaaS customers now.
Supply chain compromises can cascade to major vendors and downstream organizations.
New technical flaws and MFA bypasses raise urgency for faster patch and verification steps.
Policy moves in Washington aim to align resources with operational threats.
Practical steps—email hardening, identity verification, patching—offer strong returns.

Today’s threat landscape at a glance: breaking cyberattacks and policy moves shaping U.S. defenses

Multiple linked campaigns and supply-chain compromises are reshaping risk for hospitals, automakers, and SaaS users. This snapshot lists what happened, who is affected, and why it matters for U.S. firms and consumers.

Microsoft disrupts global phishing operation fueling ransomware and BEC against U.S. hospitals

Microsoft took down a phishing network that harvested credentials used in ransomware and business email compromise. Stolen logins opened access to patient systems and outsourced clinics, causing service disruption across hospital networks.

FBI flags dual campaigns against Salesforce instances

The FBI warned of two campaigns by UNC6040 and UNC6395 targeting Salesforce. Attackers sought customer and case data where fraud and BEC stem from even limited read-only access.

Salesloft/Drift-linked supply chain breaches ripple widely

Mandiant’s investigation tied a months-long GitHub compromise to Salesloft and Drift integrations. Downstream impacts hit Cloudflare and Proofpoint, and affected customers of Palo Alto Networks and Zscaler.

Manufacturing and supplier disruptions

Jaguar Land Rover paused production longer after a social-engineering-linked group claimed an attack. Bridgestone Americas is still restoring systems. These interruptions show how a single intrusion delays shipments and dealer operations.

Policy and vulnerability posture

CISA pledged enhancements to the CVE program while a House bill moves to reauthorize key programs. Meanwhile, researchers reported a SiteCore ViewState deserialization risk from exposed ASP.NET keys, and VoidProxy demonstrated MFA bypasses on Google and Microsoft accounts.

Incident	Primary Impact	Notable Adversary or Tool	Why it matters
Phishing takedown	Hospital credential theft	Phishing kits, BEC	Patient care and third-party clinics disrupted
Salesforce campaigns	Customer data exposure	UNC6040 / UNC6395	Business systems used for fraud and follow-on attacks
Salesloft/Drift compromise	Downstream supplier breaches	GitHub account compromise	Trusted integrations spread impact across firms
SiteCore / VoidProxy findings	Software vulnerabilities; MFA bypass	ViewState deserialization; VoidProxy	Raises urgency for patching, key management, and identity controls

Bottom line: adversaries focus on access, supply links, and social engineering. A clear strategy that pairs rapid detection with strict change control reduces the cost of response and recovery.

Counting the cost: how cyberattacks hit U.S. businesses and consumers today

From assembly lines to patient portals, recent incidents show how an account compromise ripples into dollars and days lost.

Operational and financial damage

Production slowdowns—like Jaguar Land Rover’s extended pause—create overtime, idle labor, and expedited shipping costs that cascade to suppliers. Restores at Bridgestone show how incident response and forensics can rival capital projects in expense.

Consumers on the front lines

Phishing-driven credential theft fuels BEC and fraud. Microsoft’s disruption of a hospital-focused phishing ring highlights how a single compromised login can delay care and expose patient data.

counting the cost cyber attacks

Insurance, severity, and strategy

Resilience’s report finds losses rising even as claims fall. AI-crafted phishing and double extortion let adversaries extract ransom and sell stolen policies. That trend pushes firms to fund stronger controls as part of underwriting.

Restoration and IR often cost more than prevention.
Salesforce-targeted campaigns show how cloud access multiplies exposure.
Higher deductibles shift more of the security burden onto insured organizations.

Impact	Typical cost drivers	Example
Production delays	Overtime, penalties	Jaguar Land Rover
Recovery spend	Forensics, rebuild	Bridgestone
Insurance loss	Ransom, double extortion	Resilience report

Phishing, vulnerabilities, and supply chain attacks: what today’s cybersecurity news means for your defenses

When OAuth apps or exposed keys are abused, an initial phish can balloon into supply chain attacks that touch many vendors. Researchers warned that VoidProxy bypasses MFA for Microsoft and Google, and Mandiant traced integration misuse through Salesloft and Drift.

phishing

MFA-bypass on the rise: VoidProxy targets Microsoft and Google accounts

Stop MFA-bypass phishing at the front door: deploy phishing-resistant authentication (FIDO2/WebAuthn) and conditional access based on device posture. Use real-time URL rewriting and sandboxing to blunt tools that intercept tokens.

Identity-based attacks and alert fatigue: why context and SOAR tools matter

Enrich alerts with geo-velocity, OAuth scopes, and SaaS audit logs so teams focus on real incidents, not noise. Security tools like SOAR can auto-revoke refresh tokens, quarantine risky apps, and reset sessions to cut dwell time.

From API and SaaS integrations to OT: secure software, networks, and third-party operations

Least-privilege access, signed webhooks, and API posture checks limit blast radius when integrations are abused. Require SBOMs, OAuth consent reviews, and periodic investigation of dormant integrations to spot hidden access.

Actionable steps: strengthen email, verify identity, harden SaaS, and speed patching

Enable DMARC/DKIM/SPF and advanced email filters to reduce phishing reach.
Rotate exposed ASP.NET keys, patch known deserialization vulnerabilities, and follow CISA CVE/KEV guidance.
Combine EDR with email protection and run tabletop exercises for BEC and API key theft.

“Focus on practical controls that remove easy attack paths—hardware-backed keys, just-in-time admin, and automated revocation when risk spikes.”

Priority	Concrete step	Why it helps
Identity	FIDO2 + conditional access	Blocks MFA-bypass tools
SaaS	Least privilege + signed webhooks	Limits integration misuse
Patching	Prioritize known exploits	Reduces vulnerability window

Conclusion

Today’s headlines reveal how criminals exploit everyday processes to reach far beyond a single system. Phishing, abused integrations, and linked campaigns let hackers move from one account to many, turning routine tools into a broader threat to data and operations.

Take action now,—invest in layered security: strong identity, email protections, and steady vulnerability management. These steps cut successful attacks and speed recovery when incidents hit.

Organizations and households are part of the same digital chain. With collaboration, clear playbooks, and practical choices, U.S. cyber resilience improves fast. Leaders who act today protect firms, partners, and families tomorrow.

FAQ

What was the major disruption Microsoft uncovered and who did it target?

Microsoft disrupted a global phishing operation that funneled ransomware and business email compromise (BEC) attacks. The campaign primarily targeted U.S. hospitals and healthcare providers, aiming to harvest credentials and deploy extortion tools that disrupt patient care and administrative systems.

How are threat actors exploiting Salesforce and other SaaS platforms?

The FBI warned of dual campaigns targeting Salesforce instances. Attackers abuse misconfigurations, stolen credentials, and weak API controls to move laterally, exfiltrate data, and inject malicious automation. These supply chain-style intrusions can cascade to integrated services and downstream partners.

Which vendors were affected by the Salesloft/Drift-linked supply chain breaches?

Customers of Cloudflare, Proofpoint, Palo Alto Networks, and Zscaler reported downstream impacts tied to incidents involving Salesloft and Drift. Compromised vendor tooling and credential reuse allowed attackers to pivot into security and networking environments, increasing detection difficulty.

How did attackers disrupt Jaguar Land Rover and Bridgestone operations?

Adversaries used social engineering to gain access to internal systems and logistics platforms. That led to production slowdowns and supply delays. These incidents underline how human-targeted attacks against operations teams can create broader manufacturing and distribution harm.

What is CISA focusing on in response to recent vulnerabilities and attacks?

CISA reinforced its emphasis on CVE management and rapid patching. The agency is pushing programs to improve vulnerability discovery, asset inventorying, and coordinated disclosure. Congress is also debating reauthorizing funds to expand these defensive capabilities.

Why are Sitecore vulnerabilities drawing attention from researchers?

Security teams flagged a Sitecore zero-day that exposes CMS instances to remote code execution and data leakage. Because Sitecore supports many enterprise sites, unpatched instances could enable supply chain compromise and widespread content or credential tampering.

What kinds of financial and operational costs are businesses facing from recent attacks?

Companies report production delays, emergency incident response spending, and losses in downstream suppliers. Ransom payments, forensic investigations, system rebuilds, and reputational damage all add up, often affecting quarterly revenue and insurance premiums.

How are consumers affected by these threats today?

Individuals face credential theft, account takeover, and fraud stemming from BEC and phishing. Healthcare and retail breaches can expose personal data, increasing identity theft risk and driving costly remediation for affected customers.

Why are ransomware insurance losses rising even if claim volume falls?

Attack severity has increased due to AI-enabled phishing, double extortion tactics, and targeted campaigns against critical infrastructure. Fewer but more damaging incidents push up payouts and premiums as insurers absorb larger single-event losses.

What is VoidProxy and why is MFA bypass a growing concern?

VoidProxy is a phishing platform that helps attackers evade MFA protections by relaying authentication flows or tricking users into approving logins. This trend shows that multi-factor methods must be paired with phishing-resistant options and behavioral analytics.

How should organizations address identity-based attacks and alert fatigue?

Adopt context-aware detection, SOAR (security orchestration, automation, and response) tools, and tighter identity governance. Prioritize high-fidelity alerts, reduce noisy signals, and automate routine response playbooks to improve analyst efficiency.

What defensive steps reduce risk from API, SaaS, and OT integrations?

Enforce least privilege for API keys, use strong API gateways, segment OT networks, and vet third-party software. Maintain an up-to-date asset inventory, deploy continuous monitoring, and require vendor security attestations for supply chain partners.

What immediate actions should teams take to harden email and SaaS security?

Implement DMARC, DKIM, and SPF; enable phishing-resistant MFA where possible; enforce conditional access policies; and lock down OAuth app consent. Regularly rotate service credentials and apply vendor-supplied security patches promptly.

How can organizations speed up patching and vulnerability workflows?

Centralize vulnerability data, prioritize by exploitability and business impact, and automate patch deployment for noncritical systems. Use threat intelligence to focus on active exploits and schedule regular tabletop exercises to reduce patching friction.

Cyber Threat Daily – 9/19/25

Key Takeaways

Today’s threat landscape at a glance: breaking cyberattacks and policy moves shaping U.S. defenses

Microsoft disrupts global phishing operation fueling ransomware and BEC against U.S. hospitals

FBI flags dual campaigns against Salesforce instances

Salesloft/Drift-linked supply chain breaches ripple widely

Manufacturing and supplier disruptions

Policy and vulnerability posture

Counting the cost: how cyberattacks hit U.S. businesses and consumers today

Operational and financial damage

Consumers on the front lines

Insurance, severity, and strategy

Phishing, vulnerabilities, and supply chain attacks: what today’s cybersecurity news means for your defenses

MFA-bypass on the rise: VoidProxy targets Microsoft and Google accounts

Identity-based attacks and alert fatigue: why context and SOAR tools matter

From API and SaaS integrations to OT: secure software, networks, and third-party operations

Actionable steps: strengthen email, verify identity, harden SaaS, and speed patching

Conclusion

FAQ

What was the major disruption Microsoft uncovered and who did it target?

How are threat actors exploiting Salesforce and other SaaS platforms?

Which vendors were affected by the Salesloft/Drift-linked supply chain breaches?

How did attackers disrupt Jaguar Land Rover and Bridgestone operations?

What is CISA focusing on in response to recent vulnerabilities and attacks?

Why are Sitecore vulnerabilities drawing attention from researchers?

What kinds of financial and operational costs are businesses facing from recent attacks?

How are consumers affected by these threats today?

Why are ransomware insurance losses rising even if claim volume falls?

What is VoidProxy and why is MFA bypass a growing concern?

How should organizations address identity-based attacks and alert fatigue?

What defensive steps reduce risk from API, SaaS, and OT integrations?

What immediate actions should teams take to harden email and SaaS security?

How can organizations speed up patching and vulnerability workflows?

Key Takeaways

Today’s threat landscape at a glance: breaking cyberattacks and policy moves shaping U.S. defenses

Microsoft disrupts global phishing operation fueling ransomware and BEC against U.S. hospitals

FBI flags dual campaigns against Salesforce instances

Salesloft/Drift-linked supply chain breaches ripple widely

Manufacturing and supplier disruptions

Policy and vulnerability posture

Counting the cost: how cyberattacks hit U.S. businesses and consumers today

Operational and financial damage

Consumers on the front lines

Insurance, severity, and strategy

Phishing, vulnerabilities, and supply chain attacks: what today’s cybersecurity news means for your defenses

MFA-bypass on the rise: VoidProxy targets Microsoft and Google accounts

Identity-based attacks and alert fatigue: why context and SOAR tools matter

From API and SaaS integrations to OT: secure software, networks, and third-party operations

Actionable steps: strengthen email, verify identity, harden SaaS, and speed patching

Conclusion

FAQ

What was the major disruption Microsoft uncovered and who did it target?

How are threat actors exploiting Salesforce and other SaaS platforms?

Which vendors were affected by the Salesloft/Drift-linked supply chain breaches?

How did attackers disrupt Jaguar Land Rover and Bridgestone operations?

What is CISA focusing on in response to recent vulnerabilities and attacks?

Why are Sitecore vulnerabilities drawing attention from researchers?

What kinds of financial and operational costs are businesses facing from recent attacks?

How are consumers affected by these threats today?

Why are ransomware insurance losses rising even if claim volume falls?

What is VoidProxy and why is MFA bypass a growing concern?

How should organizations address identity-based attacks and alert fatigue?

What defensive steps reduce risk from API, SaaS, and OT integrations?

What immediate actions should teams take to harden email and SaaS security?

How can organizations speed up patching and vulnerability workflows?

More from author

LEAVE A REPLY Cancel reply

Related posts

Latest posts

Want to stay up to date with the latest news?

Latest Posts

Most Popular

Fast Access