tag: Third-Party-Breach · 5 items
- Engineer — Skip
- SOC/IR — Skip
- Leader — Plan: Amadeus PSS is a widely-used passenger service platform across the aviation and travel sector; if your org uses Amadeus, confirm with your account team whether your customer or employee data was in scope and request their incident attestation this quarter.
- Engineer — Skip
- SOC/IR — Learn: Contractor-sourced malware propagating to parent company data is a useful case study in third-party access risk, but no IOCs or TTPs are published to act on.
- Leader — Learn: Illustrates how a contractor malware incident can expose the primary organization’s customer records at scale — useful framing for third-party risk reviews and vendor access controls, but no immediate action required unless this vendor is in your supply chain.
- Engineer — Skip
- SOC/IR — Learn: Active phishing campaign leveraging a breached third-party email provider to send lures from a trusted sending domain is a relevant TTP, but no IOCs or detection details are published to act on now.
- Leader — Skip
- Engineer — Plan: The flaw is on Lenovo’s side, not patchable by your team, but audit all corporate Dropbox accounts for unauthorized access and disable any Lenovo-linked authentication integrations in your Dropbox admin console.
- SOC/IR — Act: Dropbox accounts are actively compromised — review Dropbox audit logs for anomalous sign-ins tied to Lenovo ID authentication since the earliest affected date and sweep for any corporate accounts flagged by Dropbox’s warning.
- Leader — Act: Confirm this week whether your organization uses Dropbox accounts linked to Lenovo credentials, request Dropbox’s breach notification details, and assess whether customer or regulatory disclosure obligations are triggered.
- Engineer — Skip
- SOC/IR — Skip
- Leader — Learn: A logistics vendor breach affecting Pokémon Center customers in UK and Germany illustrates supply-chain data exposure risk; useful as a reference case if your organization relies on CEVA Logistics or similar third-party fulfillment providers for customer data handling.