Ngenkathi imininingwane isavela, uhulumeni wobumbano wase-US ukhiphe isexwayiso sokufakwa engozini kwephasiwedi kumakhasimende enkundla yezibalo zebhizinisi i-Sisense futhi wakhuthaza ukusetha kabusha ngokushesha.
Ukwelulekwa okuvela kuCybersecurity and Infrastructure Security Agency (CISA) kunxusa amakhasimende akwaSisense ukuthi angagcini nje ngokugcina ngokulandela imithetho. setha kabusha izifakazelo endawenikazi, kodwa kanye namaphasiwedi anoma iyiphi enye idatha ebucayi okungenzeka ifinyelelwe ngamasevisi e-Sisense.
Inkundla yesoftware-as-a-service (SaaS) isebenzisa lokho ekubiza ngokuthi “izibalo ezishayelwa yi-AI” ukuze inikeze imininingwane ezinkampanini ezingaphezu kuka-2,000 ezihlanganisa i-Air Canada, iNasdaq, ne-ZoomInfo.
USisense akazange asiphendule isicelo sikaDark Reading sokuthi aphawule.
I-Sisense iyinhloso ekahle yabazingeli abasabisayo abanentshisekelo yokwethula ukuhlasela kwe-inthanethi okuthuthukisiwe, ngokusho kukaPatrick Tiquet, iphini likamongameli wezokuphepha nezakhiwo kwaKeeper Security.
"Abahlaseli bangase bafune ukuxhaphaza ukufinyelela kwabo ukuze baqhubeke nokungena kumanethiwekhi axhunyiwe amakhasimende akwa-Sisense, okwenza kube nomthelela omubi phansi kwe-supply chain," kusho u-Tiquet, esitatimendeni. “Amakhasimende e-Sisense kufanele alandele isiqondiso se-CISA ngokushesha futhi asethe kabusha imininingwane nezimfihlo ezidalulwe noma ezisetshenziselwa ukufinyelela izinsiza ze-Sisense.”
I-Sisense Supply Chain Ukuhlaselwa Okungenzeka
Ukusabela okusheshayo kukahulumeni wobumbano kuwuphawu lokuthi ukuyekethisa kweSisense kuthathwa njengokubalulekile, uSean Deuby, uchwepheshe wezobuchwepheshe oyinhloko noSemperis, echaza esitatimendeni, echaza izeluleko ze-CISA “njengezimbi kakhulu.”
“Njengoba sazi ngokwephulwa kwemithetho yakamuva edalulwe ngu Izindawo zokudlela ze-MGM futhi nowoKhesari Palace, i-supply chain iyaqhubeka nokuba inkundla enzima kakhulu ukuvikeleka, futhi iyindawo evundile yabamelene nawe-inthanethi,” kuqhuba isitatimende sikaDeuby. “Futhi lezi zibonelo ezimbili ngeshwa ziphaphatheka uma ziqhathaniswa nomonakalo odalwe ukuhlaselwa kwe-supply chain njenge WannaCry, SolarWinds, Futhi UKaseya, eyathinta amashumi ezinkulungwane zezinhlangano futhi yabiza amakhulu ezigidi ngezindleko zokuphendula isigameko kanye nezindleko zokuthola kabusha.”
Ngaphezu kokusetha kabusha iphasiwedi, u-Jason Soroko, iphini likamongameli ophezulu womkhiqizo nge-Sectigo, uncoma amakhasimende we-Sisense ukuthi abheke okhiye bephasiwedi ye-API.
“Imininingwane ngokuphulwa kweSisense ayaziwa; kodwa-ke, izincomo zami zokwenza kuzoba ukushintsha amagama ayimfihlo anoma yimaphi ama-akhawunti e-Sisense, ukusetha kabusha okhiye be-API abasetshenziselwa izinsizakalo ezihlobene ne-Sisense, futhi ngibheke noma yimuphi umsebenzi ongajwayelekile kusukela ngo-April 5 kuye phambili,” kusho uSoroko esitatimendeni.
- I-SEO Powered Content & PR Distribution. Khuliswa Namuhla.
- I-PlatoData.Network Vertical Generative Ai. Zinike Amandla. Finyelela Lapha.
- I-PlatoAiStream. I-Web3 Intelligence. Ulwazi Lukhulisiwe. Finyelela Lapha.
- I-PlatoESG. Ikhabhoni, I-CleanTech, Amandla, Environment, Ilanga, Ukuphathwa Kwemfucuza. Finyelela Lapha.
- I-PlatoHealth. I-Biotech kanye ne-Clinical Trials Intelligence. Finyelela Lapha.
- Source: https://www.darkreading.com/threat-intelligence/sisense-breach-triggers-cisa-password-reset-advisory
