LA lawyer Rob Freund shared an email via X showing that users are being told to avoid enrolling in the platform's MFA program until they are prompted to do so via email. PACER also told users to steer clear of the helplines to ease the burden on staff. "We ask that only users who receive a prompt to enroll in MFA when they log in should do so," the email reads. "If you do not receive an MFA enrollment prompt, no action is necessary. Please do not contact the [PACER Service Center] with questions about MFA until you are required to enroll. This ensures support is available for those who need it."
Virtualized environments are prime targets for cyberattacks due to their centralized nature and the potential vulnerabilities inherent in remote access protocols. Common Security Risks in Virtualization include credential-based attacks and exposure of RDP ports.
For anyone who still has doubts about MFA: just ask Snowflake CISO Brad Jones, who last year saw more than 160 of his customers' accounts compromised using stolen credentials. None of these had MFA enabled, and this safeguard likely would have prevented the intruders from accessing the customers' databases.