Hackers have been exploiting the TeamFiltration framework to launch password spraying attacks against over 80,000 Microsoft Entra ID accounts across hundreds of organizations since December 2024. The threat actor, known as UNK_SneakyStrike, has successfully compromised multiple accounts, particularly peaking on January 8 with 16,500 accounts targeted in one day. Organizations are advised to implement detection measures and enable multi-factor authentication to mitigate these attacks.

GitLab has released critical security updates for its DevSecOps platform to address multiple vulnerabilities, including account takeover and injection of malicious jobs in CI/CD pipelines. Users are urged to upgrade to the latest versions immediately to protect against these security flaws, which have been exploited in recent attacks on major companies.