Active Directory stories
Businesses are seeking more advisers as AI and tighter rules make cybersecurity compliance the most in-demand skillset on Malt’s platform.
Patching alone has left some older SonicWall devices exposed to VPN attacks, with reliaQuest finding the first known in-the-wild use of CVE-2024-12802.
Security teams can now automate exposure fixes and reporting as Tenable makes Hexa AI generally available to Tenable One customers.
Security teams face faster exploit windows as Tenable rolls out AI-driven remediation tools to customers using its Exposure Management Platform.
The ranking underscores growing demand for tools that secure human, machine and AI identities across cloud and hybrid environments.
Customers can now govern AI agents across mixed systems as Okta adds Bedrock support and lets firms keep existing identity providers.
UKG Ready users can now automate employee data into email signatures and meeting themes, reducing manual updates for IT teams.
The attack kept retrying for hours after network blocks, as a scheduled task and Python proxy preserved access on the host.
Stolen credentials and post-login attacks are pushing security teams to seek unified monitoring across endpoints and identities.
Domain controllers face urgent patching after a Netlogon flaw was rated 9.8, with no privileges or user interaction needed for exploitation.
Rising identity-based attacks are pushing Australian and New Zealand businesses to seek faster recovery tools for Active Directory and hybrid systems.
The surge in attacks shows how criminals are bypassing passwords and multifactor checks to hijack Microsoft 365 accounts for days or weeks.
Boards are being pressed to abandon periodic patching as AI models can now uncover and chain software flaws faster than human teams can respond.
Machines now account for most cloud identities, leaving firms exposed to faster attacks, over-privileged access and AI-driven risks.
AI agents and service accounts are exposing Australian and New Zealand firms to regulatory, financial and reputational risk as controls lag.
A Monday-morning Microsoft 365 login from Germany was flagged, letting a partner reset a compromised account before attackers could act.
Most Australian organisations are using or planning AI agents for security tasks before formal controls are in place, Semperis found.
Identity breaches now take months to spot, prompting ThreatDown to add post-authentication monitoring for smaller IT teams and MSPs.
Attackers are now moving fast enough that patching delays, standing privilege and inherited trust leave organisations exposed within minutes.
Agencies using Microsoft Government Community Cloud High can now scan cloud identities for weaknesses, closing a gap in hybrid security oversight.