Customers of Stormshield should be aware that Stormshield has issued password resets for all users as an additional preventative measure. Supply chain attacks are some of the most difficult to deal with, because software updates that are digitally signed by a trusted provider are usually assumed to be safe. The fact that Stormshield has proactively replaced their digital certificates suggests that they believe it is possible that the threat actors may have access to the keys used to sign software. Customers of Stormshield should take extra precautions to verify information about any updates and watch for announcements on the Stormshield customer portal, rather than just relying on email notifications. An attacker may use the stolen customer information to send a convincing phishing message by email, possibly even including details of a past technical support ticket, to convince customers to share sensitive information or install malware.

Read more in the article on ZDNet: https://www.zdnet.com/article/security-firm-stormshield-discloses-data-breach-theft-of-source-code/