GruesomeLarch, an advanced persistent threat group, compromised several account passwords on a web service platform using credential-stuffing attacks. However, two-factor authentication prevented actual account breaches. The hackers then hacked physically nearby devices and accessed the target’s Wi-Fi network using the same credentials. The Wi-Fi network didn’t require two-factor authentication, reflecting the faulty assumption that its close proximity would protect it.

CrowdStrike And Meta Deliver Benchmarks For AI In Cybersecurity
CrowdStrike, in partnership with Meta, introduced a new suite of benchmarks – CyberSOCEval – for evaluating how AI systems perform in real-world security operations. Built on Meta’s CyberSecEval