Company

Specops Software

Vendor of password policy and service desk identity verification software for Active Directory and Entra ID environments.

Known aliases

Specops

Current stories

securityOne report1 publisher

Akira affiliate took a password-only SonicWall VPN account to the domain controller in about two hours

An Akira affiliate began spraying passwords at a SonicWall SSL VPN on August 4, 2026, and one worked about seven minutes later. The account had no MFA, and the ransomware deployment that followed failed after credentials and file-share data were already stolen.

Publishers:bleepingcomputer.com

Reality

Evidence35
Adoption: Insufficient
Hype gap+15
Incentives80
Confidence50

securityOne report1 publisher

CJIS v6.1 doubles the key strength required for criminal justice data outside secure locations

The FBI published version 6.1 on June 25, 2026, keeping v6.0's NIST-aligned structure while lifting SC-13 and SC-28 to a 256-bit minimum and tripling how often agencies must run vulnerability scans.

Publishers:bleepingcomputer.comscworld.com

Reality

Evidence45
Adoption: Insufficient
Hype gap+10
Incentives65
Confidence55

securityOne report1 publisher

Google says an agent framework harvested thousands of third-party credentials in under six hours

The actor compromised a cloud environment first and built the framework inside it. The scanning and address rotation ran with little human involvement. The credentials collected belonged to other companies.

Publishers:bleepingcomputer.com

Reality

Evidence38
Adoption32
Hype gap+40
Incentives88
Confidence55

securityOne report1 publisher

Scattered Spider talks help desks into moving MFA onto attacker-controlled devices

A joint CISA and FBI advisory says the group rehearses a company's password-reset process over several calls before it asks for anything. That puts factor-reset workflows in the identity boundary, not the support queue.

Publishers:bleepingcomputer.com

Reality

Evidence52
Adoption32
Hype gap+22
Incentives85
Confidence50

securityOne report1 publisher

Attackers stopped fighting MFA and started phoning the service desk

A July 2026 joint alert on North Korean IT workers and the 2025 M&S breach sit at opposite ends of the identity lifecycle: hiring and recovery. Neither required breaking authentication.

Publishers:bleepingcomputer.com

Reality

Evidence34
Adoption: Insufficient
Hype gap+38
Incentives90
Confidence46