VulnHub

Real-time Cybersecurity News

Study: Identity recovery testing remains inconsistent across organizations

SCM feed for Latest
Critical

Overview

A recent study by Quest Software has revealed that only 24% of organizations conduct semiannual tests of their identity disaster recovery plans. This lack of testing raises concerns about how well companies can restore their authentication systems following cyber incidents. With identity management being a critical component of cybersecurity, the inconsistency in testing could leave many organizations vulnerable to prolonged downtimes or breaches. The findings suggest that a significant number of organizations may not be adequately prepared to respond effectively in the event of an identity-related cyber attack. As identity systems are central to access control and data protection, this gap in preparedness could have serious implications for businesses and their customers.

Key Takeaways

  • Affected Systems: Identity disaster recovery plans
  • Action Required: Organizations should implement regular testing of identity disaster recovery plans and establish a schedule for semiannual reviews.
  • Timeline: Newly disclosed

Original Article Summary

Infosecurity Magazine reports that a recent Quest Software study found only 24% of organizations have run semiannual tests of their identity disaster recovery plans, indicating many may struggle to restore authentication systems after a cyber incident.

Impact

Identity disaster recovery plans

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Newly disclosed

Remediation

Organizations should implement regular testing of identity disaster recovery plans and establish a schedule for semiannual reviews.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Critical.

Read Original Article

Related Coverage

VoidStealer malware steals Chrome master key via debugger trick

BleepingComputer

VoidStealer is a new type of information-stealing malware that has been discovered to exploit a flaw in Chrome's Application-Bound Encryption (ABE). This malware uses a clever method to bypass security measures and access the master key needed to decrypt sensitive data stored in the Chrome browser. As a result, users' personal information, including passwords and credit card details, could be at risk. This development is concerning for anyone using Chrome, as it highlights vulnerabilities that attackers can exploit to gain unauthorized access to private data. Users should remain vigilant and consider enhancing their security measures to protect against such threats.

Mar 22, 2026

Week in review: ScreenConnect servers open to attack, exploited Microsoft SharePoint flaw

Help Net Security

Last week, security researchers discovered that ScreenConnect servers were vulnerable to attacks due to misconfigurations, potentially allowing unauthorized access to sensitive data. Additionally, a flaw in Microsoft SharePoint was exploited, putting numerous organizations at risk. This vulnerability could allow attackers to execute malicious code or gain access to restricted information. Both incidents emphasize the need for companies to regularly review their security settings and update their systems to protect against these types of vulnerabilities. With many businesses relying on these platforms, the implications of these security issues could be significant, affecting operational integrity and data confidentiality.

Mar 22, 2026

WorldLeaks ransomware group breached the City of Los Angels

Security Affairs

The WorldLeaks ransomware group has launched attacks against the City of Los Angeles, specifically targeting its Metro system, which resulted in a significant system shutdown. This breach forced the Metro to halt operations temporarily, disrupting public transit services. In addition to Los Angeles, two cities in the Bay Area have declared emergencies due to similar ransomware incidents. These attacks are part of a growing trend in which local governments and essential services are increasingly becoming targets for cybercriminals, raising concerns about the security of public infrastructure and the potential for widespread disruption. The implications of such breaches are serious, as they can hinder public safety and essential services.

Mar 21, 2026

Trivy vulnerability scanner breach pushed infostealer via GitHub Actions

BleepingComputer

The Trivy vulnerability scanner was recently compromised in a supply-chain attack orchestrated by a group known as TeamPCP. This attack involved the distribution of credential-stealing malware through official releases and GitHub Actions, which are automated workflows for software development. As a result, users who downloaded the compromised versions of Trivy may have inadvertently installed malware that could steal sensitive information. This incident raises significant concerns about the security of software supply chains and the potential for attackers to exploit trusted platforms to distribute malicious code. Organizations that rely on Trivy for vulnerability scanning need to be aware of this breach and take appropriate measures to safeguard their systems.

Mar 21, 2026

Critical Quest KACE Vulnerability Potentially Exploited in Attacks

SecurityWeek

A recent vulnerability identified as CVE-2025-32975 may have been exploited in attacks targeting the education sector. This flaw affects Critical Quest's KACE systems, which are commonly used for IT management and endpoint security. The potential exploitation raises concerns about the security of sensitive data within educational institutions. As attackers increasingly focus on this sector, it is crucial for organizations to assess their systems and ensure they are protected against such vulnerabilities. Institutions that use KACE products should be particularly vigilant and consider implementing protective measures immediately.

Mar 21, 2026

Critical Langflow RCE vulnerability exploited within 20 hours

SCM feed for Latest

A newly discovered vulnerability, identified as CVE-2026-33017, poses a serious risk by allowing unauthenticated attackers to run arbitrary Python code on vulnerable servers. This flaw was reportedly exploited within 20 hours of its disclosure, raising concerns among cybersecurity experts. Organizations that use systems affected by this vulnerability need to act swiftly to secure their environments. The ability for attackers to execute arbitrary code can lead to severe data breaches and system compromises, making it crucial for affected users to understand their risk and take appropriate measures. As of now, details on specific systems or versions impacted have not been disclosed, leaving many organizations potentially vulnerable.

Mar 20, 2026