This briefing explains a public 2024 advisory. It is not a live incident feed; consult the original source and current vendor guidance for updates.
What the advisory tells us
The agencies observed password spraying and repeated MFA approval requests, often called push bombing. They also reported changes to MFA registrations that could support continued access to an account.
What teams can do
Use phishing-resistant MFA when available, monitor authentication anomalies, and review privileged accounts. Pair account protections with an escalation process for unusual sign-ins.
Read the original advisory
FBI IC3 / federal partners: source advisory (PDF) ↗
The linked advisory is an independent government source. It does not endorse CyberWall or its products.