Tag
medium
advisory
GitHub Organizations 2FA Disabled
3 rules 3 TTPsThe disabling of two-factor authentication (2FA) in GitHub Organizations is detected through audit log monitoring, potentially indicating an attacker's attempt to weaken account security and facilitate unauthorized access.
github.com +3
github
2fa
security_controls
supply_chain
3r
3t
high
advisory
ESXi Lockdown Mode Disabled
2 rulesThe disabling of Lockdown Mode on an ESXi host may indicate a threat actor attempting to weaken host security controls to enable broader remote access for data exfiltration, lateral movement, or VM tampering.
ESXi +3
vmware
lockdown_mode
security_controls
2r