Loading story…
Organizations face significant security challenges in managing social media accounts, especially as remote work becomes widespread and large enterprises coordinate across multiple brands and agencies. Common risks include insecure password sharing, use of personal devices and public networks, unclear account ownership, and lack of centralized control, which can lead to incidents such as unauthorized posts, account suspensions, and loss of content or followers. To address these issues, best practices include implementing the principle of least privilege, standardizing environments with dedicated proxies and devices, maintaining comprehensive audit trails, and establishing unified monitoring systems to detect abnormal activities.
Colgate-Palmolive, a global brand, tackled these challenges by partnering with Cerby to centralize control of its social media accounts, enforce multi-factor authentication, and eliminate credential sprawl. Integration with identity management solutions like Okta enabled secure single sign-on for both employees and external agencies, while audit trails and automatic credential rotation improved oversight and reduced operational risk. These measures not only enhanced security but also delivered operational efficiencies, allowing marketing teams to manage accounts securely and efficiently without disrupting creative workflows.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
Colgate adopted Cerby to centralize control of social media accounts, enforce multi-factor authentication, add audit trails, and automate credential rotation while preserving marketing team workflows. The deployment also integrated with Okta to provide single sign-on for employees and agency users and was extended to legacy systems and third-party portals.
Colgate-Palmolive encountered repeated challenges securing hundreds of social media accounts used by its brands and external agencies, including compromised accounts, unauthorized posts, and follower loss. The issues highlighted gaps in applying traditional enterprise identity controls to consumer-facing platforms.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Organizations are facing increasing risks from the proliferation of hardcoded credentials, access tokens, and API keys, which are often exposed in code repositories and other unexpected locations. Recent high-profile attacks, such as those targeting Salesforce customers through stolen OAuth tokens, have demonstrated how attackers exploit poor secret management practices to gain unauthorized access to sensitive systems. Security experts warn that both cybercriminals and nation-state actors are capitalizing on this widespread issue, urging organizations to improve their secret hygiene and reduce over-privileging of credentials. In response to these threats, enterprises are moving away from static secrets and adopting managed identities and platform-native identity services. This transition is driven by the need to eliminate manual credential management, reduce the risk of credential leakage, and streamline authentication across complex, multicloud environments. Case studies show that organizations implementing managed identities experience significant reductions in time spent managing credentials and improved security posture, highlighting the importance of modernizing identity and access management strategies to counter evolving attacker tactics.
Jul 2, 2026
Organizations are increasingly challenged by the rapid proliferation of non-human identities (NHIs), such as service accounts, API keys, digital certificates, access tokens, automated bots, IoT devices, and AI agents. More than half of enterprises surveyed express uncertainty about their ability to secure these NHIs, highlighting a significant gap between the adoption of automated digital identities and the maturity of tools and processes to protect them. The complexity and diversity of NHIs, which now form the backbone of modern digital infrastructure, have outpaced traditional identity and access management strategies, leaving organizations exposed to new risks. The exponential growth of NHIs, especially in cloud-native and automated environments, has led to a situation where non-human accounts vastly outnumber human users. This expansion, combined with issues like "secrets sprawl"—where credentials are scattered across codebases and pipelines—creates opportunities for account hijacking, privilege escalation, and lateral movement by threat actors. Security experts emphasize the need for unified visibility, consistent identity policies, and automated responses to address these risks, particularly as NHIs and AI agents become more integral to business operations and the attack surface continues to expand.
Jun 29, 2026
Cybercriminals are increasingly targeting enterprise credentials through phishing, brute force attacks, and exploitation of password reuse, leading to widespread compromise and monetization of login details. Attackers use tactics such as convincing phishing emails, credential stuffing, and the sale of stolen credentials on underground markets, enabling further exploitation including data theft and ransomware. The prevalence of password reuse and weak password management practices among employees exacerbates the risk, as users often rotate between a small set of passwords or make only minor variations, making it easier for attackers to gain access to multiple accounts once a single credential is compromised. Security experts are urging organizations to move away from traditional password-based authentication and adopt phishing-resistant, device-bound cryptographic solutions such as FIDO2, passkeys, and certificate-based authentication. These measures are seen as essential to counter the growing threat posed by automated attacks leveraging AI agents and large-scale credential theft. SaaS providers are also encouraged to integrate with identity platforms that support these advanced authentication methods to strengthen overall security posture and reduce the risk of credential-based breaches.
Jul 12, 2026