Skip to content
Threat Feed
Subscribe

Tag

Identity-Compromise

3 briefs RSS
high advisory

Detection of Authentication Certificate Theft or Forgery

This correlation identifies anomalous activity targeting Windows Certificate Services by aggregating multiple risk-based detections on a single system, signaling potential adversary efforts to forge or steal authentication certificates.

Active Directory Certificate Services certificate-theft identity-compromise adcs credential-access
1t
critical advisory

Automated LLM-Based User Account Compromise Triage

An automated detection framework that uses Large Language Models to correlate disparate security alerts and assess potential account compromise based on behavioral indicators.

Elastic Stack +2 identity-compromise llm-security detection-engineering automated-triage
3t updated
high advisory

Sophos State of Ransomware 2026 Report Highlights Evolving Attack Vectors

The Sophos State of Ransomware 2026 report indicates that while median ransom payments are dropping, successful data encryption by ransomware attackers is climbing, with malicious email, phishing, and compromised credentials now surpassing exploited vulnerabilities as the primary initial access vectors, often leveraging identity-based attacks against critical systems like VPNs and firewalls.

ransomware trend-report initial-access identity-compromise email-security
8t