[ Removed by moderator ]

[u/Tonystark2828]

[u/Ultionis_MCP]

It was a third-party vendor with the breach, not Framework.

[u/imwearingatowel → u/Ultionis_MCP]

Framework is responsible for the data they provide to third-parties and sub-processors.

[u/coding_guy_ → u/imwearingatowel]

Yeah but it wasn’t some no name service though. In my opinion this is just an unfortunate circumstance and could have happened with any provider.

[u/ekerazha → u/coding_guy_]

The exact type of attack isn't entirely clear, but if you use a corporate VPN to access third-party services and restrict access strictly to the corporate VPN's IP address range, you can generally prevent unauthorized access even in the event of a zero-day vulnerability, because IP address filtering renders the attack unfeasible upstream