[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foKiPooAar0aiVUogP1U81PHl91rKPe6oRNGKE_k94Fk":3},{"article":4,"iocs":48,"watch_terms":49,"solutions":50,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"f9edc4cb-0d7b-43a6-b36a-770b220c8fb8","LexisNexis shuts down services after suspicious activity on servers","lexisnexis-shuts-down-services-after-suspicious-activity-on-servers-836316","LexisNexis took its Diligence, Metabase API, and Newsdesk services offline as part of its response to unusual activity on servers hosted and managed by an unnamed third-party vendor. [...]","LexisNexis has taken down its Diligence, Metabase API, and Newsdesk services after identifying suspicious activity on servers managed by a third-party vendor. The company is investigating the incident with a cybersecurity firm and rebuilding affected systems. This follows previous security incidents involving LexisNexis in May 2025 and March of this year.","LexisNexis takes down Diligence, Metabase API, and Newsdesk services due to suspicious activity on vendor servers.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Flexisnexis-shuts-down-services-after-suspicious-activity-on-servers\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F08\u002F0_lexis.jpg","2026-08-10T12:11:52+00:00","2026-08-10T14:00:14.113516+00:00",7,[17,20,22,24,27],{"name":18,"type":19},"Diligence","product",{"name":21,"type":19},"Metabase API",{"name":23,"type":19},"Newsdesk",{"name":25,"type":26},"LexisNexis","vendor",{"name":28,"type":29},"FulcrumSec","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":30,"icon":32,"name":33,"slug":34},null,"Breaches","breaches",[36,38,43],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[25,18,21],{"controls":51,"vendors":137},[52,80,108],{"slug":53,"name":54,"problem":55,"products":56},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[57,64,72],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":59,"url":62,"description":63},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"slug":81,"name":82,"problem":83,"products":84},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[85,93,100],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":42,"product_name":97,"url":98,"description":99},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"slug":109,"name":110,"problem":111,"products":112},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[113,121,129],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",[],{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":154},"third-party-vendor-breach-forces-lexisnexis-to-shut-down-core-services","Third-Party Vendor Breach Forces LexisNexis to Shut Down Core Services","Suspicious activity detected on servers managed by a third-party vendor forced LexisNexis to take down multiple critical services, including Diligence, Metabase API, and Newsdesk. The root cause highlights a persistent and dangerous gap: organizations often extend implicit trust to third-party vendors without enforcing equivalent security standards or maintaining sufficient visibility into those environments. The fact that this is at least the third security incident involving LexisNexis in 2025 suggests systemic weaknesses in vendor oversight and potentially in the speed of detection and remediation. This matters greatly because LexisNexis handles sensitive legal, financial, and personal data, making breaches particularly high-impact for downstream clients and individuals whose data is processed.",[143,144,145,146,147,148,149,150,151,152,153],"CIS Control 15 – Service Provider Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-161 – Supply Chain Risk Management","NIST IR-6 – Incident Reporting","NIST CA-2 – Control Assessments","NIST SA-9 – External System Services","ISO 27001 – A.15.1 Information Security in Supplier Relationships","GDPR Article 28 – Processor Obligations","GDPR Article 33 – Notification of a Personal Data Breach","ITIL – Supplier Management Practice","ITIL – Incident Management Practice",{}]