Security News

Fighting Credential Stuffing Attacks
2018-12-10 15:48

Credential abuse attacks and identity theft incidents are rising, with attackers leveraging botnets to launch coordinated campaigns with high success rates, says Aseem Ahmed of Akamai...

Magecart Group Ups Ante: Now Goes After Admin Credentials
2018-12-04 11:00

The group's skimmer has added some capabilities that steals credentials from admins.

Hackers Breach Dunkin’ Donuts Accounts in Credential Stuffing Attack
2018-11-29 14:36

The donut giant first noticed the attack Oct. 31.

How consumers can defend against credential stuffing
2018-10-16 18:21

What should consumers be aware of, and what are some steps they could use to identify credential stuffing threats? Akamai's Andy Ellis offers tips to CNET's Dan Patterson.

Forecasting credential stuffing threats
2018-10-16 14:20

From password vaults to two-factor authentication, Andy Ellis of Akamai explains defensive tactics against password stuffing.

ThreatList: Credential Theft Spikes by Triple Digits in U.S.
2018-10-11 20:19

Meanwhile, the LokiPWS (a.k.a. Lokibot) malware family distribution is surging.

MikroTik routers with default credentials can be easily compromised
2018-10-08 10:23

If you own a MikroTik router and you haven’t updated its RouterOS in the last month, you should do so now: Tenable Research has released details about four vulnerabilities they found in the OS,...

Vulnerabilities in PureVPN Client Leak User Credentials
2018-09-28 17:54

The PureVPN client for Windows is impacted by two vulnerabilities that result in user credential leak, a Trustwave security researcher has discovered. read more

ISACA introduces new credential to build and recognize auditors’ cybersecurity knowledge
2018-09-28 05:00

Auditors are being required to audit cybersecurity processes, policies and tools to provide assurance that their enterprise has appropriate controls in place. To help them acquire and prove these...

AdGuard adblocker resets passwords after credential-stuffing attack
2018-09-25 11:15

AdGuard has taken the decision to reset all user accounts after suffering a credential-stuffing and brute-force password attack.