Menu

  • Alerts
  • Incidents
  • News
  • APTs
  • Cyber Decoded
  • Cyber Hygiene
  • Cyber Review
  • Cyber Tips
  • Definitions
  • Malware
  • Threat Actors
  • Tutorials

Useful Tools

  • Password generator
  • Report an incident
  • Report to authorities
No Result
View All Result
CTF Hack Havoc
CyberMaterial
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
    • Report an incident
  • About
    • About Us
    • Advertise with us
Get Help
Hall of Hacks
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
    • Report an incident
  • About
    • About Us
    • Advertise with us
Get Help
No Result
View All Result
Hall of Hacks
CyberMaterial
No Result
View All Result
Home Incidents

U.S. State Government Network Breached

February 16, 2024
Reading Time: 2 mins read
in Incidents

The Cybersecurity and Infrastructure Security Agency (CISA) has disclosed a significant breach within a state government organization’s network infrastructure, facilitated by an administrator account belonging to a former employee. This breach allowed threat actors to authenticate to an internal VPN access point, enabling them to blend in with legitimate traffic and evade detection while accessing the network environment.

Suspicions arise that the threat actor obtained the credentials through a separate data breach, as the compromised credentials appeared in publicly available channels containing leaked account information. With access to an admin account that also had privileges to a virtualized SharePoint server, the attackers further infiltrated the network, gaining access to additional credentials stored within the server, which granted administrative privileges to both on-premises and Azure Active Directory environments.

While the investigation revealed no lateral movement from the on-premises environment to the Azure cloud infrastructure, the attackers were able to access host and user information, posting it on the dark web for potential financial gain. To mitigate further risks, the organization took immediate action, resetting passwords for all users, disabling the compromised administrator account, and revoking elevated privileges for the second account. However, the absence of multi-factor authentication (MFA) for both accounts underscores the critical need for securing privileged access and implementing least privilege principles to limit unauthorized access to critical systems.

Reference:
  • Threat Actor Leverages Compromised Account of Former Employee to Access State Government Organization
Tags: CISAcyber incidentsCyber Incidents 2024CyberattacksCybercrimeCybersecurityFebruary 2024GovernmentUSA
ADVERTISEMENT

Related Posts

Customer Data Breach at Seychelles Bank

Cyberattack Strikes Air Serbia

July 17, 2025
Customer Data Breach at Seychelles Bank

Ukrainian Hack Hits Russian Drone Firm

July 17, 2025
Customer Data Breach at Seychelles Bank

Customer Data Breach at Seychelles Bank

July 17, 2025
Fitify Leaks 138K User Progress Photos

Albemarle County Ransomware Attack

July 16, 2025
Fitify Leaks 138K User Progress Photos

Millions Affected By Episource Data Breach

July 16, 2025
Fitify Leaks 138K User Progress Photos

Fitify Leaks 138K User Progress Photos

July 16, 2025

Latest Alerts

SonicWall Zero-Day RCE Exploited

Stealthy JavaScript Attacks via SVG Files

Malicious Telegram APK Campaign Uncovered

Google Realeases Critical Chrome Update

Interlock deploys new PHP RAT via FileFix

Android Malware Konfety Evolves

Subscribe to our newsletter

    Latest Incidents

    Cyberattack Strikes Air Serbia

    Customer Data Breach at Seychelles Bank

    Ukrainian Hack Hits Russian Drone Firm

    Albemarle County Ransomware Attack

    Fitify Leaks 138K User Progress Photos

    Millions Affected By Episource Data Breach

    CyberMaterial Logo
    • About Us
    • Contact Us
    • Jobs
    • Legal and Privacy Policy
    • Site Map

    © 2025 | CyberMaterial | All rights reserved

    Welcome Back!

    Login to your account below

    Forgotten Password?

    Retrieve your password

    Please enter your username or email address to reset your password.

    Log In

    Add New Playlist

    No Result
    View All Result
    • Alerts
    • Incidents
    • News
    • Cyber Decoded
    • Cyber Hygiene
    • Cyber Review
    • Definitions
    • Malware
    • Cyber Tips
    • Tutorials
    • Advanced Persistent Threats
    • Threat Actors
    • Report an incident
    • Password Generator
    • About Us
    • Contact Us
    • Advertise with us

    Copyright © 2025 CyberMaterial