[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDLtlZDJUtu-h5Lv9iAmiiYyOGln_99eEMEEbTC79LJ4":3},{"article":4,"iocs":39,"watch_terms":44,"solutions":45,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"388afc03-72aa-453b-8715-6ebcdedc893f","ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited","reliaquest-confirms-shinyhunters-hack-but-says-impact-was-limited-b44c65","A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard. The post ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited appeared first on SecurityWeek.","Cybersecurity firm ReliaQuest has confirmed a phishing attack by the ShinyHunters group that compromised an employee's credentials. The attackers used a fake ReliaQuest SSO phishing page and impersonated a security employee to trick the victim into entering their password and approving a push notification. While the attackers gained brief view-only access to an identity dashboard, ReliaQuest states no customer data, business applications, or systems were compromised.","ReliaQuest confirms ShinyHunters phishing attack targeting employee credentials.","https:\u002F\u002Fwww.securityweek.com\u002Freliaquest-confirms-shinyhunters-hack-but-says-impact-was-limited\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F08\u002FReliaQuest.jpeg","2026-08-24T17:38:21+00:00","2026-08-24T18:00:09.859245+00:00",7,[17,20,23],{"name":18,"type":19},"ShinyHunters","threat_actor",{"name":21,"type":22},"ReliaQuest","vendor",{"name":24,"type":25},"Okta","product","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":26,"icon":28,"name":29,"slug":30},null,"Threat Intelligence","threat-intelligence",[32,37],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},[40],{"type":41,"value":42,"context":43},"domain","company.claims","URL pattern used in ShinyHunters phishing campaign",[21,24],{"controls":46,"vendors":129},[47,75,104],{"slug":48,"name":49,"problem":50,"products":51},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":69,"vendor_name":24,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":76,"name":77,"problem":78,"products":79},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[80,88,96],{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-office-365","Microsoft Defender for Office 365","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-office-365","Protection for Exchange Online, Teams and SharePoint against phishing, malicious links and attachments.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"mimecast","Mimecast","\u002Fvendor-logos\u002Fmimecast.png","mimecast-email-security","Mimecast Email Security","https:\u002F\u002Fwww.mimecast.com\u002Fproducts\u002Femail-security\u002F","Email filtering, impersonation protection and continuity.",{"slug":105,"name":106,"problem":107,"products":108},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[109,116,122],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":105,"product_name":113,"url":114,"description":115},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":117,"product_name":118,"url":120,"description":121},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":123,"product_name":126,"url":127,"description":128},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",[130],{"slug":131,"name":21,"logo_path":132,"roles":133},"reliaquest","\u002Fvendor-logos\u002Freliaquest.png",[134],"affected",{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":152},"shinyhunters-phishes-reliaquest-employee-via-fake-sso-page-and-mfa-manipulation","ShinyHunters Phishes ReliaQuest Employee via Fake SSO Page and MFA Manipulation","A ReliaQuest employee fell victim to a targeted phishing attack in which threat actors cloned the company's SSO login page and impersonated a trusted colleague to socially engineer MFA approval. This incident highlights that even cybersecurity professionals are not immune to sophisticated credential harvesting combined with MFA fatigue or push notification abuse. The attacker's ability to gain — even briefly — view-only access to an identity dashboard underscores how a single compromised account can expose sensitive organizational infrastructure. Prompt detection and containment limited the blast radius, but the incident demonstrates that phishing-resistant MFA and rigorous user training remain critical even inside security firms.",[140,141,142,143,144,145,146,147,148,149,150,151],"CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 6: Access Control Management","CIS Control 14: Security Awareness and Skills Training","CIS Control 17: Incident Response Management","NIST SP 800-63B: Digital Identity Guidelines – Phishing-Resistant AAL3 Authenticators","NIST AC-2: Account Management","NIST AC-17: Remote Access","NIST IA-5: Authenticator Management","NIST SI-3: Malicious Code Protection","MITRE ATT&CK T1566.002: Spearphishing Link","MITRE ATT&CK T1621: Multi-Factor Authentication Request Generation","GDPR Article 32: Security of Processing (where EU data subjects may be involved)",{}]