Security News

CompTIA unveils a beta exam for its Cloud Essentials+ credential
2019-05-01 00:30

CompTIA, the leading provider of vendor-neutral skills certifications for the global technology workforce, launched a beta exam for its CompTIA Cloud Essentials+ credential. CompTIA Cloud...

How automated Dark Web marketplaces make credential stuffing attacks more profitable
2019-04-25 14:11

Validated stolen credentials cost less than a cup of coffee, but economies of scale have made selling user accounts more lucrative than ever, according to Recorded Future.

Hackers used credentials of a Microsoft Support worker to access users’ webmail
2019-04-16 10:29

On Friday, an unknown number of customers of Microsoft’s webmail services (Outlook.com, Hotmail, MSN Mail) received a notice from the company telling them that attackers had access to their email...

Who are the biggest targets of credential stuffing attacks?
2019-04-12 05:45

Media organizations, gaming companies, and the entertainment industry are among the biggest targets of credential stuffing attacks, in which malicious actors tap automated tools to use stolen...

Juniper slips out update after hardcoded credentials left in switches
2019-04-11 20:27

Telemetry Interface blamed for exposed gRPC passwords Juniper Networks has issued an update after finding hardcoded credentials had been left in some of its datacenter switches.…

Cars Exposed to Hacker Attacks by Hardcoded Credentials in MyCar Apps
2019-04-10 18:14

Hardcoded admin credentials found in the MyCar Controls mobile applications could have been exploited to locate and gain physical access to a vehicle. read more

Fourth Major Credential Spill in a Month Hits DreamMarket
2019-03-18 17:29

Gnosticplayers has released about 26 million records from what he said are breaches of six new companies.

Vulnerabilities in industrial Ethernet switches allow for credential theft, denial-of-service attacks
2019-03-11 13:15

Industrial Ethernet switches from Moxa were found to lack basic security measures, making it possible to brute-force access to the switch management console, according to Positive Technologies.

Week in review: Social media-enabled cybercrime, fighting credential stuffing, digital signature spoofing
2019-03-03 19:30

Here’s an overview of some of last week’s most interesting news and articles: How WebAuthn aims to solve the password problem Rather than tasking users with tracking dozens of separate passwords...

Fighting credential stuffing attacks is an uphill battle
2019-02-28 07:00

Hackers directed credential abuse attempts at retail sites more than 10 billion times from May to December last year, making retail the most targeted segment studied, according to the Akamai 2019...