Why CISA Is Warning CISOs About a Breach at Sisense
krebsonsecurity.com
Why CISA Is Warning CISOs About a Breach at Sisense
1–10 of 62 posts
Re: Why CISA Is Warning CISOs About a Breach at Sisense
#2This sounds nuts. Are people still entrusting bearer tokens to third parties? I haven't seen that done in at least 10 years. Surely it's prohibited by the ToS of the first party providers?
Re: Why CISA Is Warning CISOs About a Breach at Sisense
#3This sounds nuts. Are people still entrusting bearer tokens to third parties? I haven't seen that done in at least 10 years. Surely it's prohibited by the ToS of the first party providers?
[deleted]
Re: Why CISA Is Warning CISOs About a Breach at Sisense
#4Ouch
""" Earlier today, a public relations firm working with Sisense reached out to learn if KrebsOnSecurity planned to publish any further updates on their breach (KrebsOnSecurity posted a screenshot of the CISO’s customer email to both LinkedIn and Mastodon on Wednesday evening). The PR rep said Sisense wanted to make sure they had an opportunity to comment before the story ran.
But when confronted with the details shared by my sources, Sisense apparently changed its mind.
“After consulting with Sisense, they have told me that they don’t wish to respond,” the PR rep said in an emailed reply. """
Re: Why CISA Is Warning CISOs About a Breach at Sisense
#5Ouch """ Earlier today, a public relations firm working with Sisense reached out to learn if KrebsOnSecurity planned to publish any further updates on their breach (KrebsOnSecurity posted a screenshot of the CISO’s customer email to both LinkedIn and Mastodon on Wednesday evening). The PR rep said Sisense wanted to make sure they had an opportunity to comment before the story ran. But when confronted with the details…
[deleted]
Re: Why CISA Is Warning CISOs About a Breach at Sisense
#6[flagged]
Re: Why CISA Is Warning CISOs About a Breach at Sisense
#7[flagged]
[deleted]
Re: Why CISA Is Warning CISOs About a Breach at Sisense
#8What do CISUs think about this?
Re: Why CISA Is Warning CISOs About a Breach at Sisense
#9This sounds nuts. Are people still entrusting bearer tokens to third parties? I haven't seen that done in at least 10 years. Surely it's prohibited by the ToS of the first party providers?
[deleted]
Re: Why CISA Is Warning CISOs About a Breach at Sisense
#10"Certain information" Check!
"We take this seriously" Check!
"Abundance of caution" Check!
Cloud buckets... Check!
Declined to comment... Check!
It's like playing Modern IT Security Bingo.