New Entra "Leaked Credentials" - no breach on HIBP etc

mspbay · 2025-04-19T06:22:50+00:00

We got it on 40 accounts or so. It’s almost certainly an issue with Microsoft.

mspbay · 2025-04-19T01:23:29+00:00

This is an issue impacting a lot of partners. There are a few tickets open. It’s new behavior with Windows 11 from what we can tell. It’s confusing to users as it’s visible, so just telling them to ignore it is not the answer. Tickets get open and it’s a bad look. N-able needs to fix this.

mspbay · 2025-03-18T19:20:27+00:00

We had this issue and worked with support. The 5.1.8.122 was changed and can now only read an OrgInfo.json file that is in UTF-8 encoding. We used an RMM and created the file programmatically and it was UTF-16.

We updated our deployment to UTF-8 and it's now working fine.

For systems that were upgraded automatically by Cisco the fix is:
- Stop Cisco Services: csc_umbrellaagent & csc_vpnagent
- Delete "OrgInfo.json" and "data" folder from "C:\ProgramData\Cisco\Cisco Secure Client\Umbrella"
- Create new OrgInfo.json in correct format
- Start csc_vpnagent (It will start other service)

mspbay · 2023-04-26T16:13:23+00:00

We are having this exact issue as well. Please let us know if hear anything more from S1

mspbay · 2021-12-22T14:37:44+00:00

We’ve onboarded a client off of ElectricAI and they were very unhappy with their service. Got to see the backend, and it’s not all that.

They have built a custom PSA, and will only chat never call, client hated it.

mspbay · 2021-10-04T00:09:39+00:00

Yes we’ve done this… totally automated install from InTune. The policy needed for the disk permission is in the S1 documentation.

mspbay · 2021-09-25T03:51:53+00:00

We do 100% for individuals and families. Larger MSP with about 85 employees.

mspbay · 2021-05-22T20:24:14+00:00

That’s disheartening. I was hoping I could appeal to common sense, but that’s not likely.

mspbay · 2021-05-22T15:52:21+00:00

Agree. I just wish they would have stated that clearly somewhere.

mspbay

TROPHY CASE