CISA針對資料分析業者Sisense的憑證外洩提出警告
· 2024-04-12

專門提供資料分析服務的Sisense近日發生資安事故,美國CISA發布安全重訊,警示Sisense用戶應重置存取Sisense服務的憑證與秘密

Sisense是在2004年於以色列創立,專門針對中、小企業提供商業智慧工具,隨後將總部及主要業務移至美國市場,支援藥廠、健康醫療、零售、科技、金融服務與製造業等領域的商業、效率或競爭力的分析,客戶涵蓋Nasdaq、加拿大航空與Verizon等。

《Dark Reading》引用Keeper Security安全及架構副總裁Patrick Tiquet的看法指出,Sisense是有興趣發動高階供應鏈網路攻擊的駭客理想目標,可能會利用Sisense的存取權限進一步滲透Sisense客戶網路,產生連鎖反應。

資安研究人員Marc Rogers警告,Sisense要求可存取客戶的機密,意味著該公司能夠存取客戶的JDBC連線、SSH或諸如Salesforce等平臺,亦擁有權杖與憑證,自Sisense竊取的內容涵蓋了所有的權杖、憑證與存取配置,而這對所有的Sisense客戶來說將是最糟糕的情況。

迄今Sisense尚未公布遭到危害的細節,不管是途徑或是範圍,但Sisense客戶勢必要立馬輪替或更新登入憑證才是。

熱門文章
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
Manila delivers: Highlights from SiGMA Asia 2026 
Southeast Asia
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
首頁
遊戲
合作
發現
我的