Snowflake tells customers to enable MFA as investigations continue

Infosec briefing: Snowflake is responding to a targeted campaign that led to credential theft and reported data exfiltration from multiple high-profile customers (Ticketmaster, Santander, Advance Auto Parts), with credentials appearing for sale on criminal forums; the vendor is moving to require MFA. The roundup also highlights multiple critical OT vulnerabilities (Emerson Ovation, Johnson Controls iStar Pro, Fuji Electric Monitouch) and active cryptojacking campaigns exploiting misconfigured Kubernetes and Docker services, advising patching, enabling MFA, and hardening container configurations.