https://pwn.watch/i/jumpcloud-nation-state-breach-2023 A spear-phishing attack let a nation-state actor into JumpCloud's infrastructure. The attacker abused its command framework to target a small set of customers. JumpCloud force-rotated all customer API keys, and researchers tied the attack to North Korea, aimed at crypto companies. en Thu, 20 Jul 2023 00:00:00 GMT https://pwn.watch/i/jumpcloud-nation-state-breach-2023 https://pwn.watch/i/jumpcloud-nation-state-breach-2023#2023-07-20-a4abfc6d Thu, 20 Jul 2023 00:00:00 GMT high <p><a href="https://www.sentinelone.com/labs/jumpcloud-intrusion-attacker-infrastructure-links-compromise-to-north-korean-apt-activity/">Source</a></p> https://pwn.watch/i/jumpcloud-nation-state-breach-2023 https://pwn.watch/i/jumpcloud-nation-state-breach-2023#2023-07-12-4341158f Wed, 12 Jul 2023 00:00:00 GMT high <p><a href="https://jumpcloud.com/blog/security-update-incident-details">Source</a></p> https://pwn.watch/i/jumpcloud-nation-state-breach-2023 https://pwn.watch/i/jumpcloud-nation-state-breach-2023#2023-07-05-9dde427a Wed, 05 Jul 2023 00:00:00 GMT high <p><a href="https://jumpcloud.com/blog/security-update-incident-details">Source</a></p> https://pwn.watch/i/jumpcloud-nation-state-breach-2023 https://pwn.watch/i/jumpcloud-nation-state-breach-2023#2023-06-27-519c6119 Tue, 27 Jun 2023 00:00:00 GMT high <p><a href="https://jumpcloud.com/blog/security-update-incident-details">Source</a></p>