Russian state-sponsored cyberattackers gained network access to a non-governmental organization by exploiting default multi-factor authentication (MFA) protocols and PrintNightmare, a known security vulnerability in Windows Print Spooler. As such, all organizations should take action to enable, enforce and properly configure MFA and prioritize patching of known exploited security vulnerabilities, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have warned.

Read full article on Security Magazine