Lapsus$ Eyes SharePoint, VPNs, and VMs


The NCC Group has released a new research that reveals how Lapsus$ assaults are launched. The paper goes into great depth about the very unpredictable attacks’ procedures and tactics, as well as how the gang selects its victims.

The focus of Lapsus$ appears to be on application source code or private information. As a result, the research makes several recommendations to protect against such attacks, including logging for cloud computing settings, employing multi-factor authentication for user login, and prohibiting unauthorised access to critical data. Read More…