According to its data breach notice, HACLA discovered on December 31, 2022, that files on its computer systems were encrypted. This prompted the agency to shut down its servers and launch an investigation.

Organizations will still be informed seven days before the protocol is disabled for them. Once it is turned off, affected apps will throw an HTTP error 401 for bad username/password. The only way for them to work will be to switch to Modern Auth.

The malware uses cmd.exe to read and execute a file stored on the infected external drive, it leverages msiexec.exe for external network communication to a rogue domain used as C2 to download and install a DLL library file.

App-specific passwords are used in conjunction with two-factor authentication on your Google account. Most applications do not know how to handle two-factor, which is why app-specific passwords were created.

Red Canary noted that it’s not just individuals who use KMSPico to fraudulently activate Windows as it has also noticed various IT departments using the tool which makes it a big threat in such cases.

Microsoft has developed a new machine learning-based algorithm that detects password spray attacks with considerably improved performance than its previous heuristic mechanism.

To beef up endpoint security, Dell's new SafeBIOS Events and Indicators of Attack (IoA) detects changes in BIOS configurations to detect potential attacks.