Kevin BeaumontPAM provider Delinea, aka Thycotic, had a quiet 5 hour long disruption due to a security incident.
They now have maintenance running for their Secret Server product.
“An endpoint containing a security concern has been identified.”
HT to @matdef
The So What is Delinea Secret Server holds user and system account credentials for orgs, it’s like CyberArk.
Delinea have published IoCs for a security incident in Delinea Secret Server Cloud aka Thycotic. It’s behind a paywall. It’s a vulnerability in their SOAP implementation. No CVE has been assigned, presumably because cloud service. #threatintel
MatDefOh boy. Apparently things are not good at Delinea around Thycotic. I just checked and the cloud version appears to be patched for this - after security incident.
Ian Towner 
@GossiTheDog not the sort of response you want from a PAM vendor…or any vendor tbh! Question is was it already being exploited…
faebudo@GossiTheDog Just.. ouch..
René ☀️ Hoffmann 
@GossiTheDog The way, they handled the disclosure, was not very trustworthy, imho.