‼️A threat actor is auctioning highly sensitive data exfiltrated from the corporate file-sharing portals of approximately 50 multinationals
The compromised file-sharing portals lacked MFA, allowing the threat actor to use stealer logs to gain access to ShareFile, OwnCloud, and Nextcloud instances of critical entities in the aviation, robotics, housing, and government infrastructure sectors.
Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was.
No worries admins, Microsoft says that it was only a "Moderate" issue.
ℹ️ Confirmed: Metrics show access to X (formerly Twitter) has been restored in #Pakistan as conflict breaks out with neigbouring India. The platform was restricted by authories in February 2024 after it was used to draw attention to instances of alleged election fraud
@esjesjesj On a related note, I did not have the US government slapping 32% on Taiwan as their way of formally acknowledging them as its own sovereign nation on my 2025 Bingo Card.