[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJbkHf3ssHGXJDiZnnq9L2iEQOSFT50qXFSFiqrsKF2w":3},{"article":4,"iocs":41,"watch_terms":49,"solutions":50,"lesson":139},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"3da26bc9-140f-4ff1-8423-7a64149b1e78","ReliaQuest confirms failed data-theft attack after ShinyHunters breach","reliaquest-confirms-failed-data-theft-attack-after-shinyhunters-breach-515763","Cybersecurity company ReliaQuest has confirmed that one of its employees was targeted in a social engineering attack after hackers impersonated a member of the security team. [...]","Cybersecurity firm ReliaQuest has confirmed an employee was targeted in a social engineering attack by the ShinyHunters gang, who impersonated security staff. The attackers used a fake SSO page to steal credentials and MFA approval, gaining view-only access to an identity dashboard. However, security controls prevented further access to applications or customer data, and no persistence was established.","ReliaQuest confirms ShinyHunters attempted data theft via social engineering.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Freliaquest-confirms-failed-data-theft-attack-after-shinyhunters-breach\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F11\u002FHacker.jpg","2026-08-24T15:17:16+00:00","2026-08-24T16:00:18.887166+00:00",7,[17,20,23,26],{"name":18,"type":19},"ReliaQuest","vendor",{"name":21,"type":22},"ShinyHunters","threat_actor",{"name":24,"type":25},"Okta","technology",{"name":27,"type":25},"SSO","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":28,"icon":30,"name":31,"slug":32},null,"Threat Intelligence","threat-intelligence",[34,39],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":40},{"id":28,"icon":30,"name":31,"slug":32},[42,46],{"type":43,"value":44,"context":45},"domain","reliaquest.claims","Phishing domain used in the attack.",{"type":47,"value":21,"context":48},"malware","Threat actor group responsible for the attack.",[18],{"controls":51,"vendors":133},[52,81,110],{"slug":53,"name":54,"problem":55,"products":56},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":82,"name":83,"problem":84,"products":85},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"slug":111,"name":112,"problem":113,"products":114},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[115,121,126],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":116,"product_name":117,"url":119,"description":120},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":122,"product_name":123,"url":124,"description":125},"managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":127,"product_name":130,"url":131,"description":132},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",[134],{"slug":135,"name":18,"logo_path":136,"roles":137},"reliaquest","\u002Fvendor-logos\u002Freliaquest.png",[138],"affected",{"slug":140,"title":141,"body":142,"framework_refs":143,"framework_notes":156},"shinyhunters-targets-reliaquest-employee-via-fake-sso-page","ShinyHunters Targets ReliaQuest Employee via Fake SSO Page","A ReliaQuest employee was socially engineered by the ShinyHunters gang, who impersonated internal security staff to steal credentials and MFA approvals through a convincing fake SSO portal. This attack highlights how even security-focused organizations are vulnerable to credential phishing when employees cannot distinguish legitimate login pages from spoofed ones. The incident demonstrates that MFA alone is insufficient if users can be manipulated into approving fraudulent authentication requests — a technique known as MFA fatigue or real-time phishing proxying. Fortunately, defense-in-depth controls limited the blast radius, preventing access to sensitive applications or customer data. This serves as a critical reminder that human factors remain the most exploitable attack surface regardless of technical sophistication.",[144,145,146,147,148,149,150,151,152,153,154,155],"CIS Control 4 – Controlled Use of Administrative Privileges","CIS Control 6 – Access Control Management","CIS Control 14 – Security Awareness and Skills Training","NIST SP 800-63B – Digital Identity Guidelines (Phishing-Resistant AAL3)","NIST AC-2 – Account Management","NIST AC-17 – Remote Access","NIST AT-2 – Literacy Training and Awareness","NIST SI-4 – System Monitoring","NIST SP 800-207 – Zero Trust Architecture","MITRE ATT&CK T1566 – Phishing","MITRE ATT&CK T1557 – Adversary-in-the-Middle","ISO\u002FIEC 27001 A.6.3 – Information Security Awareness",{}]