May 2024 TRU Intelligence Briefing

eSentire’s Threat Response Unit (TRU) is a team of industry-renowned experts with real-world experience who are battle-tested to protect you against the most advanced cyber threats. TRU is foundational to our Managed Detection and Response (MDR) service – no add-ons or additional cost required. Every month, TRU hosts a live webinar to share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape. During the May TRU Intelligence Briefing, our Threat Response Unit (TRU) reviewed: - Authentication Method Downgrade Attacks: eSentire TRU Researchers discuss how threat actors bypass passwordless authentication methods in real-world attacks. - Palo Alto Vulnerability (CVE-2024-3400): eSentire observations and new detections from eSentire’s Tactical Threat Response (TTR) team. - Updates on FIN7, D3F@ck Loader, and SocGholish - Notable vulnerabilities impacting Palo Alto, Cisco, and CrushFTP - A brief geopolitical update focused on Russian Information Operations.