Kevin BeaumontPAM provider Delinea, aka Thycotic, had a quiet 5 hour long disruption due to a security incident.
They now have maintenance running for their Secret Server product.
“An endpoint containing a security concern has been identified.”
HT to @matdef
The So What is Delinea Secret Server holds user and system account credentials for orgs, it’s like CyberArk.
Delinea have published IoCs for a security incident in Delinea Secret Server Cloud aka Thycotic. It’s behind a paywall. It’s a vulnerability in their SOAP implementation. No CVE has been assigned, presumably because cloud service. #threatintel
Kevin Jones