corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0d50a-e2c7-73bd-8d83-3f8de03f838d

Analysis of a Ransomware Breach

aff-wg.org · published 26 September 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at aff-wg.org Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
69
Words captured
5,206

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.beckershospitalreview.com/healthcare-information-technology/cybersecurity/a-mistake-allowed-hackers-into-ascensions-it-system/
beckershospitalreview.com
https://www.wyden.senate.gov/news/press-releases/wyden-calls-for-ftc-investigation-of-microsoft-for-enabling-ascension-hospital-ransomware-hack-with-insecure-software
wyden.senate.gov
https://www.npr.org/2024/06/19/nx-s1-5010219/ascension-hospital-ransomware-attack-care-lapses
npr.org
https://web.archive.org/web/20240725154143/https://about.ascension.org/en/cybersecurity-event
web.archive.org
https://www.hipaajournal.com/change-healthcare-responding-to-cyberattack/
hipaajournal.com
https://www.hipaajournal.com/january-2024-cyberattack-on-lurie-childrens-hospital-affects-792k-individuals/
hipaajournal.com
https://www.statnews.com/2024/09/18/ascension-financials-cyberattack-cost-losses/
statnews.com
https://www.hipaajournal.com/ascension-cyberattack-2024/
hipaajournal.com
https://nationalcioreview.com/articles-insights/extra-bytes/how-one-employees-honest-mistake-caused-a-massive-ransomware-attack/
nationalcioreview.com
https://www.beckershospitalreview.com/podcasts/podcasts-beckers-hospital-review/steven-ramirez-chief-information-security-amp-technology-officer-at-renown-health-132553521/
beckershospitalreview.com
https://learn.microsoft.com/en-us/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/
learn.microsoft.com
https://www.microsoft.com/en-us/edge/features/security?ep=1397&form=MT015F&es=248&cs=82041551
microsoft.com
BlackBasta Leaks: Lessons from the Ascension Health attack Read at the source ↗
blog.bushidotoken.net
https://ofac.treasury.gov/media/48301/download?inline
ofac.treasury.gov
https://nightlion.com/case-study/ransomware-negotiation/
nightlion.com
https://www.youtube.com/watch?v=QbjuO5IlpBU
youtube.com
https://www.prnewswire.com/news-releases/new-independent-tests-of-endpoint-protection-reveal-significant-differences-in-performance-and-efficacy-302136442.html
prnewswire.com
https://static.rainfocus.com/rsac/us24/exh/1612375264247001eW49/exhibitorboothresource/Tolly%20Test%20Report_CylanceENDPOINT%20by%20BlackBerry_May%202024_1714763768672001G9Ii.pdf
static.rainfocus.com
https://www.ic3.gov/CSA/2024/240511.pdf
ic3.gov
https://www.first.org/blog/20250321-black-basta-ransomware-leak
first.org
https://redsiege.com/tools-techniques/2020/10/detecting-kerberoasting/
redsiege.com
Kerberoasting Read at the source ↗
blog.cryptographyengineering.com
Post-ex Weaponization: An Oral History Read at the source ↗
aff-wg.org
https://posts.specterops.io/kerberoasting-revisited-d434351bd4d1
posts.specterops.io
https://github.com/RalfHacker/Kerbeus-BOF
github.com
https://youtu.be/oOIdvPtuy5U?si=9IRUZsQz5Ojrr6OM&t=1257
youtu.be
https://www.akamai.com/blog/security-research/abusing-dmsa-for-privilege-escalation-in-active-directory
akamai.com
https://posts.specterops.io/certified-pre-owned-d95910965cd2
posts.specterops.io
https://www.varonis.com/blog/kerberoasting-still-matters
varonis.com
https://web.archive.org/web/20160201044056/https://files.sans.org/summit/hackfest2014/PDFs/Kicking%20the%20Guard%20Dog%20of%20Hades%20-%20Attacking%20Microsoft%20Kerberos%20%20-%20Tim%20Medin(1
web.archive.org
http://youtube.com/watch?v=PUyhlN-E5MU
youtube.com
https://redsiege.com/blog/2025/09/kerberoasting-microsoft-and-a-senator/
redsiege.com
https://malicious.link/posts/2016/kerberoast-pt2/
malicious.link
The Security Conversation Read at the source ↗
aff-wg.org
https://medium.com/@anthomsec/misconceptions-unrestricted-release-of-offensive-security-tools-789299c72afe
medium.com
https://www.youtube.com/watch?v=MXhsfs6c0lU
youtube.com
https://x.com/edskoudis/status/1196441466681405440
x.com
https://www.microsoft.com/en-us/security/blog/2024/10/11/microsofts-guidance-to-help-mitigate-kerberoasting/
microsoft.com
https://www.wyden.senate.gov/imo/media/doc/wyden_letter_to_ftc_on_microsoft_kerberoasting_ransomwarepdf.pdf
wyden.senate.gov
https://www.youtube.com/watch?v=xYTG0-nLbvE&t=450s
youtube.com
https://x.com/YuG0rd/status/1925528806153998841
x.com
https://x.com/cyb3rops/status/1925467172307959876
x.com
https://dailysecurityreview.com/security-spotlight/german-cybersecurity-agency-flags-critical-windows-server-2025-flaw-enabling-domain-takeover/
dailysecurityreview.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53779
msrc.microsoft.com
https://www.helpnetsecurity.com/2025/08/13/microsoft-fixes-badsuccessor-kerberos-vulnerability-cve-2025-53779/
helpnetsecurity.com
https://www.akamai.com/blog/security-research/badsuccessor-is-dead-analyzing-badsuccessor-patch
akamai.com
https://web.archive.org/web/20080905201210/http://www.securityfocus.com/bid/233/discuss
web.archive.org
https://youtu.be/c3_Cx8mcEEY?si=3sq2vC434l9_AV6L&t=2589
youtu.be
https://www.youtube.com/watch?v=uXRfD0sx-LA
youtube.com
https://download.microsoft.com/download/7/7/a/77abc5bd-8320-41af-863c-6ecfb10cb4b9/mitigating%20pass-the-hash%20(pth
download.microsoft.com
https://www.microsoft.com/en-us/msrc/windows-security-servicing-criteria
microsoft.com
https://www.slideshare.net/slideshow/bluehat-v17-is-not-a-security-boundary-things-i-have-learned-and-things-that-have-gotten-better-from-researching-microsoft-software/83688081
slideshare.net
https://learn.microsoft.com/en-us/archive/blogs/markrussinovich/psexec-user-account-control-and-security-boundaries
learn.microsoft.com
https://youtu.be/uXRfD0sx-LA?si=YbvsZx0dq3540Sev&t=165
youtu.be
https://passing-the-hash.blogspot.com/2014/03/dontgetpth.html
passing-the-hash.blogspot.com
https://web.archive.org/web/20131010070956/http://www.infoworld.com/d/security/windows-81-stops-pass-the-hash-attacks-227875
web.archive.org
https://labs.portcullis.co.uk/blog/new-restricted-admin-feature-of-rdp-8-1-allows-pass-the-hash/
labs.portcullis.co.uk
https://blog.harmj0y.net/penetesting/pass-the-hash-is-dead-long-live-pass-the-hash/
blog.harmj0y.net
https://youtu.be/uXRfD0sx-LA?si=N--omsx9jzPqKYRg&t=3535
youtu.be
https://www.reddit.com/r/activedirectory/comments/q35gyk/comment/hfpw69j/
reddit.com
https://www.semperis.com/blog/golden-dmsa-what-is-dmsa-authentication-bypass/
semperis.com
https://www.microsoft.com/en-us/security/blog/2020/03/05/human-operated-ransomware-attacks-a-preventable-disaster/
microsoft.com
https://www.microsoft.com/en-us/msrc/blog/2026/05/a-shared-responsibility-protecting-customers-through-coordinated-vulnerability-disclosure
microsoft.com
https://www.cyber.gov.au/sites/default/files/2024-09/PROTECT-Detecting-and-Mitigating-Active-Directory-Compromises.pdf
cyber.gov.au
https://arstechnica.com/security/2025/09/senator-blasts-microsoft-for-making-default-windows-vulnerable-to-kerberoasting/
arstechnica.com
https://arstechnica.com/security/2025/09/how-weak-passwords-and-other-failings-led-to-catastrophic-breach-of-ascension/
arstechnica.com
https://www.facebook.com/arstechnica/posts/theres-no-excuse-for-an-organization-as-big-and-sensitive-as-ascension-suffering/1151825163471381/
facebook.com
https://consilienceproject.org/the-endgames-of-bad-faith-communication/
consilienceproject.org
https://ico.org.uk/media2/pv5nhks4/capita-plc-and-cpsl-monetary-penalty-notice.pdf
ico.org.uk