Cyber analytics firm ExtraHop has discovered instances of enterprise software that collected and sent information home, a behavior which could lead to exposure of sensitive enterprise data. ExtraHop’s report showcases four cases unearthed during 2018 and the first weeks of 2019 when enterprise software was observed phoning home data to its own servers without the customers’ permission or prior knowledge. The behavior exposed the companies to a wide range of risks such as unauthorized access to data, potential vector for malware downloads, potential exposure of PII and violations underGraham-Leach-Bliley.
Source: https://www.bleepingcomputer.com/news/security/enterprise-software-may-transmit-data-without-your-knowledge/