Snowflake says malicious hackers are breaking in using legitimate login credentials, not via a security flaw.
with CrowdStrike and Mandiant over the weekend saying it had zero evidence that recent unauthorized access of user accounts was due to a software vulnerability, company breach or product misconfiguration.
Snowflake added that it appears these malicious actors leveraged credentials "previously purchased or obtained through infostealing malware" to access some customers' accounts, as well as stolen credentials to access a former employee's demo accounts.The precise extent of the unauthorized access — and whether it's directly tied to these massive, headline-grabbing corporate leaks — is still being determined.
If the hackers are to be believed, at least 500 million people's personal information, including financial data and home addresses, could have been stolen.Saturday that it's tracking "increased cyber threat activity" related to Snowflake customer environments. Snowflake said that only a "limited number" of customers have been affected, but it did not provide a specific number. Snowflake'sMandiant Consulting CTO Charles CarmakalWhat they're saying:
"The question is what kind of net increase in risk does that actually add to most people?" Rafe Pilling, director of threat intelligence at Secureworks' Counter Threat Unit, told Axios. "It probably feeds into just the run-of-the-mill volume of scams that most people receive on a day-to-day basis."All internet-facing databases need to have some sort of MFA added to them to keep attackers out, Pilling said.
Axios License Visuals Illustrations Data Breaches Cloud Computing Security Hackers Cyber Threats
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Massive Ticketmaster, Santander data breaches linked to Snowflake cloud storageReports of recent data breaches on Ticketmaster and Santander Bank have been traced back to the cloud storage company Snowflake.
Read more »
Snowflake says there’s no evidence attackers breached its platform to hack TicketmasterSnowflake, CrowdStrike, and Mandiant say there’s no evidence the cloud storage provider’s platform has been compromised to attack Ticketmaster and Santander.
Read more »
Databricks acquires data-optimization startup Tabular in fresh challenge to SnowflakeDatabricks interrupted Snowflake's conference to announce the acquisition of a startup that can help companies prepare data for more cost-effective queries.
Read more »
Databricks acquires data-optimization startup Tabular in fresh challenge to SnowflakeDatabricks interrupted Snowflake’s conference to announce the acquisition of a startup that can help companies prepare data for more cost-effective…
Read more »
Databricks acquires data-optimization startup Tabular in fresh challenge to SnowflakeDatabricks interrupted Snowflake’s conference to announce the acquisition of a startup that can help companies prepare data for more cost-effective…
Read more »
Snowflake earnings preview: Analysts share what they are looking for in Q1 printSnowflake earnings preview: Analysts share what they are looking for in Q1 print
Read more »