Threat Intelligence Brief
Curated summary with source attribution
Source: idtechwire.com
Threat Risk: Medium
Victim: DigiCert customers
Incident: Unauthorized access to archived customer identity documentation due to a network misconfiguration.
Impact: Exposure of sensitive PII, including passports and driver’s licenses, for a minority of customers.
Attacker: Unidentified threat actors
Analysis: An infrastructure migration accidentally moved a business system from a VPN-restricted segment to a public availability zone. This exposed a self-registration feature that bypassed MFA, allowing unauthorized actors to read archived identity documents. Although core certificate authority services remained secure, the incident underscores the danger of treating network migrations as routine infrastructure changes rather than security events.
Recommendations: Implement mandatory security sign-offs for all network architecture and infrastructure changes.; Enforce multi-factor authentication (MFA) across all internal systems, regardless of the account’s permission level.; Perform regular external attack surface mapping to detect unintentionally exposed internal endpoints.
Source: ID Tech
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source