Get the latest tech news
Snowflake’s customer breaches make 2024 the year of the identity siege
Access happened because the demo account was not behind Okta or Multi-Factor Authentication (MFA), unlike Snowflake’s corporate and production systems.
Breaches on Santander, TicketMaster, Snowflake, and most recently, Advanced Auto Parts, LendingTree, and its subsidiary QuoteWizard show how quickly attackers refine their tradecraft to prey on organizations’ security weaknesses. According to a June 2nd community forum update, threat actors are “leveraging credentials previously purchased or obtained through infostealing malware.” CISA has also issued an alert for all Snowflake customers. By continuously verifying the identity of users and devices, organizations can reduce the risk of unauthorized access and protect against potential threats,” says George Kurtz, co-founder and CEO of CrowdStrike.
Or read this on Venture Beat
