What we know about BlackCat and the MGM hack

The report details a BlackCat/ALPHV ransomware campaign that disrupted MGM Resorts (and affected other hospitality firms), describing how attackers used social engineering to bypass Okta MFA and gain super-admin/Azure privileges, leveraged known vulnerabilities and tools (ProxyShell, Mimikatz, Cobalt Strike) for lateral movement and exfiltration, and highlights the RaaS affiliate model and operational impacts; recommended defenses include staff training, patching, and early detection.