Phishing & fraudhigh
Talos IR trends: BEC attacks surge, while weaknesses in MFA persist
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-27876 | Authentication Bypass in Veritas Backup Exec Agent Enables Arbitrary File Access | 8.1 | 14% | KEVRansomwarePoC | KEV |
| CVE-2023-27532 | Missing Authentication in Veeam Backup & Replication Exposes Stored Credentials | 7.5 | 81% | KEVRansomware | KEV |
From the original article
12 min read at blog.talosintelligence.com
Business email compromise (BEC) was the top threat observed by Cisco Talos Incident Response (Talos IR) in the first quarter of 2024, accounting for nearly half of engagements, which is more than double what was observed in the previous quarter . The most observed means of gaining initial access was the use of compromised credentials on valid accounts, which accounted for 29 percent of engagements.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.