Product
Sophos ITDR
- First Reported
- Oct 19, 2026
- Latest Reported
- Oct 19, 2026
Reported Context (1)
- Sophos ITDR flags tenants for which SMS, voice call, and email OTP remain enabled as authentication methods, and for which SSPR for non-admins accepts a single method. These checks push account recovery away from Vishing-Led Microsoft 365 Intrusion Pivoted Across SaaS Apps, Exporting 2,500 ServiceNow User Records
People (1)
MITRE ATT&CK (10)
Vendors (4)
Products (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.