#sisense — Public Fediverse posts

#Sisense latest comms say “company information affected in the incident relates to certian customers in Sisense Fusion (cloud-based) product. At this time we have no evidence that company information related to customers of the Sisense Fusion (on-prem) or Sisense CDT (also known as Periscope) products was affected.”

Do we tell them that “no evidence” means many things:
1) We dont have logs, therefore no evidence
2) We have logs but have not investigated “at this time” so we have no evidence
3) Attackers have done what they need to, cleared logs and therefore now we have “no evidence” “at this time”

#infosec really need to understand having evidence something is not affected should be the priority to communicate than communicating there is no evidence that something is affected.

The analytics firm kept big companies’ secrets in an insecure #AWS bucket. Government says victims include the “critical infrastructure sector.”

#Sisense, a service provider to huge companies including Nasdaq, Verizon and Air Canada, has lost control of its customers’ credentials and access tokens. #CISA, the Cybersecurity and Infrastructure Security Agency, warned users of the service to drop everything and rotate or reset their secrets.

Sources say Sisense stopped storing secrets securely. In #SBBlogwatch, we facepalm hard. At @TechstrongGroup’s @SecurityBlvd: https://securityboulevard.com/2024/04/sisense-cisa-warning-richixbw/?utm_source=richisoc&utm_medium=social&utm_content=richisoc&utm_campaign=richisoc

Sisense hit by data breach, CISA warns⤵️
#Sisense #databreach #datasecurity #cybersecurity #infosec #CISA

https://cybernews.com/news/sisense-data-breach-cisa-warning/?utm_source=mastodon&utm_medium=social&utm_campaign=cybernews&utm_content=post

@briankrebs their advise to rotate any creds means rotating:

• Database connection strings,
• SSO config-Non-SSO config, x.509 certs
• Creds on support portal
• AD/LDAP
• Web tokens

Thats a tall order for customer to do.
What else did i miss anyone?

If their gitlab is affected that would imply it affects their codebase and may affect both hosted and self-hosted.

HugOps for the #sisense IR teams though

CISA urges #Sisense customers to reset credentials and secrets potentially exposed to, or used to access, Sisense services.

https://www.cisa.gov/news-events/alerts/2024/04/11/compromise-sisense-customer-data

CISA warns about Sisense data breach https://www.helpnetsecurity.com/2024/04/11/sisense-data-breach/ #credentials #databreach #Don'tmiss #Hotstuff #Sisense #News #CISA

The great unicorn retreat - Hello and welcome back to our regular morning look at private companies, public markets and the gray... more: http://feedproxy.google.com/~r/Techcrunch/~3/QEDEABM790g/ #darakhosrowshahi #fundings&exits #marketanalysis #ziprecruiter #extracrunch #tripactions #gocardless #techcrunch #deliveroo #getaround #magicleap #pinterest #startups #cohesity #softbank #unicorns #sisense #airbnb #sonder #wework #bird #lime #lyft #uber #oyo #tc

Sisense CEO Amir Orad explains why he raised $100M - Yesterday, Sisense, a player in the business intelligence space, announced a $100 million investment... more: http://feedproxy.google.com/~r/Techcrunch/~3/kbn6PmCeUoM/ #fundings&exits #periscope #sisense #unicorn #tc

Kicking off 2020 with 4 new members of the $100M ARR club - Hello and welcome back to our regular morning look at private companies, public markets and the gray... more: http://feedproxy.google.com/~r/Techcrunch/~3/Cx0ye_IwNnU/ #fundings&exits #monday.com #startups #lemonade #sisense #egnyte #braze #tc

Sisense acquires Periscope Data to build integrated data science and analytics solution - Sisense announced today that it has acquired Periscope Data to create what it is calling, a complete... more: http://feedproxy.google.com/~r/Techcrunch/~3/x3_pwOex_F4/ #mergersandacquistions #businessanalytics #fundings&exits #periscopedata #datascience #enterprise #sisense #cloud #m&a #tc