The Vimeo breach and the dangers of delegated trust
At the end of April, Vimeo, the second-largest video hosting, sharing, and streaming service after YouTube, publicly confirmed it had suffered a data breach affecting around 119,000 users and customers.
As is often the case, however, the devil is in the details. ShinyHunters, the ransomware group that claimed responsibility, threatened to release Vimeo data on the dark web after breaching the defenses of Anodot, an analytics company that provides real-time anomaly detection.
Anodot's product requires direct access to its customers' cloud data sources, such as Snowflake, BigQuery, S3, and Kinesis, to monitor metrics at the data source level.
On April 4, Anodot reported a broad outage when its datacollectors went down across Snowflake, S3, and Kinesis. What initially appeared to be an availability incident turned out to be an active intrusion, and ShinyHunters were already inside Anodot's environment and, by their own claim, had been there long...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
