09/15/2026
Public Wi-Fi is becoming a prime target for cybercriminals. Microsoft Threat Intelligence reports that the Midnight Blizzard group is compromising hospitality and travel networks to steal credentials, hijack sessions, and deliver malware to unsuspecting travelers.
As employees travel, organizations should reinforce phishing-resistant MFA, VPN usage, and identity monitoring to reduce risk.
Read the report and evaluate whether your remote access and identity security controls are prepared for these evolving threats: https://okt.to/6jYezA
Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related organizations such as hotels since May 2026 in order to deliver malware to travelers and steal credentials in an operation we call CaptiveCrunch.