🟠 High | Source: The Register — Security
Attackers used social engineering to gain access to three Levi Strauss employee computers, ultimately exfiltrating corporate data. The incident highlights how human manipulation remains one of the most effective entry points for threat actors, bypassing technical controls entirely. No technical vulnerability was exploited — employees were simply talked into granting access.
Security Architect’s Take: Review your organisation’s privileged access and endpoint controls to ensure that even a compromised user session has limited blast radius — enforce just-in-time access, endpoint DLP, and behavioural anomaly detection so that social engineering of a single employee cannot lead directly to bulk data exfiltration.
Original advisory: Attackers pick Levi’s pockets in social engineering attack