On this episode of SecOps Weekly, Senior Security Researcher host Chris Brook is joined by Staff Threat Researcher Mitchel Parish to discuss the latest evolution of identity-based cyber threats and TTPs. With identity threats surging this year, attackers are increasingly targeting legitimate identity providers and processes through human vulnerabilities rather than zero-day exploits. Watch as Chris and Mitchel break down high-profile platform disruptions, threat group shifts, sophisticated phishing mechanics, and actionable defense strategies for SOC teams. Chapters -- 00:00 - 01:43: Welcome to SecOps Weekly! 01:44 - 07:44: EvilTokens disruption 07:45 - 10:38: BlackFile rebranded 10:39 - 14:33: Helix: A new face in data extortion 14:34 - 19:33: Helix exploit chain 19:34 - 22:42 Obfuscated Lure URLs 22:43 - 24:43: TTP parallels 24:44 - 26:32: Mitigation & protection guidance 26:33 - 29:38: Response guidance for compromised account 29:39 - 30:10: Final thoughts Show Notes -- 😈 EvilTokens disruption: https://www.microsoft.com/en-us/security/blog/2026/09/22/unmasking-eviltokens-getting-to-the-root-of-device-code-phishing/ 📚 Background on BlackFile: https://cloud.google.com/blog/topics/threat-intelligence/blackfile-vishing-extortion-operation/ 🔎 Insights on the BlackFile rebrand: https://cloud.google.com/blog/topics/threat-intelligence/unc6671-targets-financial-services-and-enterprise-cloud-environments 🕵️ OAuth device code abuse: https://www.zscaler.com/blogs/cybersecurity-best-practices/intelligence-insights-may-2026 🚨 ShinyHunters arrest: https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation/ About Zscaler Zscaler (NASDAQ: ZS) is a pioneer and global leader in zero trust security. The world’s largest businesses, critical infrastructure organizations, and government agencies rely on Zscaler to secure users, branches, applications, data & devices, and to accelerate digital transformation initiatives. Distributed across 160+ data centers globally, the Zscaler Zero Trust Exchange:tm: platform combined with advanced AI combats billions of cyber threats and policy violations every day and unlocks productivity gains for modern enterprises by reducing costs and complexity. ©2025 Zscaler, Inc. All rights reserved. Zscaler, Zscaler Digital Exchange, Zscaler Internet Access, ZIA, Zscaler Private Access, and ZPA are either (i) registered trademarks or service marks or (ii) trademarks or service marks of Zscaler, Inc. in the United States and/or other countries. Any other trademarks are the properties of their respective owners. #identitymanagement #phishing #shinyhunters #datatheft #mfa

 221      1