Update: CISA is collaborating with private industry partners to respond to a recent compromise discovered by independent security researchers impacting Sisense, a company that provides data analytics services.
https://www.cisa.gov/news-events/alerts/2024/04/11/compromise-sisense-customer-data
Apparently several terabytes of Sisense customer data has been exfiltrated, and Sisense are doing a Syniverse and Equilend https://krebsonsecurity.com/2024/04/why-cisa-is-warning-cisos-about-a-breach-at-sisense/
Sisense customers are Not Happy with the response they’re getting. https://community.sisense.com/t5/technical-troubleshooting/sisense-security-concern/m-p/20714#M1
Worth noting Sisense purchased Periscope Data and renamed it Sisense for Cloud Data Teams https://www.sisense.com/blog/periscope-data-is-now-sisense-for-cloud-data-teams/
Also worth noting, Seal Software was a white label rebrand of Sisense data. Seal Software were purchased by DocuSign.
The DocuSign documentation tells you to allow list Sisense folders from AV scanning.
@GossiTheDog wow that looks brutal.
Yes they should have done better comms but we #infosec need to give some breathing room to their IR teams too