RELIAQUEST CONFIRMS SHINYHUNTERS HACK

Summary from the TLDR InfoSec newsletter

ShinyHunters ran a phishing campaign using "company.claims" domains, then called ReliaQuest staff posing as security employees to push them to a fake SSO page. One employee entered a password and approved a push notification, giving attackers a brief session on the identity dashboard. ReliaQuest says access was view-only, all further access attempts were blocked, no other identities or business apps were reached, no customer data was taken, and no ransomware was involved.