Sisense breach exposes customers to potential supply chain attack

Sisense, a business analytics SaaS used by thousands of organizations, was reportedly compromised and may have exposed tokens and credentials that mediate access to customer data sources. CISA issued an advisory recommending credential rotation and reporting suspicious activity; the extent of access to customer networks, the number of affected organizations, and attacker attribution remain unknown, but the incident poses a significant supply-chain risk.