Tag
Crypttech Vatos DLP: Plaintext credential storage (CVE-2026-86715)
1 TTP 1 CVECrypttech Vatos DLP versions 1.1.176 through 1.1.242 store passwords in plaintext, facilitating unauthorized access to domain credentials.
CVE-2026-0278 Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
1 TTPCVE-2026-0278 describes multiple protection mechanism failures in the Prisma Access Agent's Data Loss Prevention (DLP) component for Windows, allowing a local user to bypass DLP policy enforcement controls and exfiltrate sensitive data on affected versions prior to 26.2.1.
Symantec DLP Windows Endpoint Elevation of Privilege Vulnerability (CVE-2026-3991)
2 rules 1 TTPCVE-2026-3991 is an elevation of privilege vulnerability in Symantec Data Loss Prevention (DLP) Windows Endpoint that could allow a local attacker to gain elevated access to resources.
CrowdStrike Falcon Data Security Prevents Data Exfiltration
2 rules 1 TTPCrowdStrike's Falcon Data Security helps organizations understand sensitive data, track its movement, and prevent data theft across endpoints, browsers, SaaS applications, cloud services, GenAI tools, and agentic workflows by leveraging advanced classification and real-time monitoring.
Defense Evasion via Exchange DLP Policy Removal
2 rules 1 TTPAttackers may remove or modify Exchange Data Loss Prevention (DLP) policies in Microsoft 365 to evade detection and exfiltrate sensitive data without triggering alerts.
O365 Data Loss Prevention Rule Triggered
2 rules 2 TTPsDetection of triggered Microsoft Office 365 Data Loss Prevention (DLP) rules, which can indicate potential data exfiltration or policy violations, dependent on upstream DLP configuration.