Why keeping track of user accounts is important

CISA (the Cybersecurity & Infrastructure Security Agency) has issued a cybersecurity advisory after the discovery of documents containing host and user information of a state government organization’s network environment—including metadata—on a dark web brokerage site.

An attacker managed to compromise network administrator credentials through the account of a former employee of the organization. The attacker managed to authenticate to an internal virtual private network (VPN) access point, further navigate the victim’s on-premises environment, and execute various lightweight directory access protocol …

account accounts administrator advisory agency amp attacker cisa compromise credentials cybersecurity cybersecurity advisory dark dark web discovery documents employee environment government host important information infrastructure infrastructure security managed metadata network organization security state state government track web