Outdated info pilfered in purported SAS Institute breach

Major U.S. multinational analytics and artificial intelligence software manufacturer SAS Institute had old data stolen by threat actors who claimed to have exfiltrated source code from its systems following an attack this month, according to Cybernews.

"It is crucial to note that these files are old, with dates ranging from 2003 to 2011. This indicates that the supposed source code might be an old backup, minimizing the impact of the leak significantly," said Cybernews researchers, who discovered the inclusion of SAS Institute's Business Rules Manager source code and documentation in the sample included by attackers.

Despite the presence of outdated information, source code exposures remain a significant threat to organizations as they could be leveraged by threat actors to create exploits for more severe cyberattacks. Hacking operations have also increasingly compromised leading service providers to subsequently breach their customers, according to researchers.