DarkReading: Ivanti EPMM Zero-Day, LockBit Suspect Indicted, and Credential Stuffing Hits Major Platforms

Analysis

Credential Stuffing Attacks Surge Across Major Platforms

Attackers are burning through leaked credential databases at scale against consumer and enterprise platforms alike. The tactical takeaway is simple: if your users are not on phishing-resistant MFA, they are exposed.

Tools

Pacu AWS Exploitation Framework Gets Updated Modules for Modern Attack Paths

Rhino Security pushed new modules to Pacu covering current AWS attack paths that red teams and cloud security engineers need in their toolkit. Worth pulling the latest if you do any AWS offensive work or want to test your own cloud defenses.