In late February, data analytics company LexisNexis Legal & Professional suffered a data breach in which the threat actor responsible used an unpatched application to access the company’s Amazon Web Services infrastructure. While LexisNexis L&P claims the data leaked was minimal, this breach still serves as an important reminder of a critical security principle:
If a company as large as LexisNexis L&P can fall victim to such a simple vulnerability, what’s to say your business won’t?


