Služba Dropbox Sign byla hacknuta

Služba Dropbox Sign (původně HelloSign) pro elektronické podepisování smluv byla hacknuta.

2.5.2024 11:22 | Ladislav Hagara | Bezpečnostní upozornění

Komentáře

[X]

Detail:

Based on our investigation, a third party gained access to a Dropbox Sign automated system configuration tool. The actor compromised a service account that was part of Sign’s back-end, which is a type of non-human account used to execute applications and run automated services. As such, this account had privileges to take a variety of actions within Sign’s production environment. The threat actor then used this access to the production environment to access our customer database.

[Slavko]

(Ne)milé...

[Radius]

Pouzivat stejny ucet pro test a produkci je profi reseni. Ale bezna praxe do vyse platu admina. Hold kvalitni lidi si nemuze kazdy dovolit.