Security News

Surge in exposed credentials puts companies at risk
2017-11-29 12:30

The volume of credential exposures has increased to 16,583 from April to July 2017, compared to 5,275 last year’s analysis by Anomali. 77% of the FTSE 100 were exposed, with an average of 218...

Twilio Credentials Hardcoded in Mobile Apps Expose Calls, Texts
2017-11-09 14:22

Hundreds of mobile applications that use the Twilio SDK or REST API include hardcoded credentials that could be abused to access millions of calls and text messages, researchers warned on...

Bargain Prices: Compromised Credentials for $3 a Pop
2017-11-07 09:18

The ISMG Security Report leads with a discussion about the sale of compromised remote desktop protocol credentials for as little as $3 on darknet marketplaces. Also, grading the performance of DHS...

Hackers Exploit Weak Remote Desktop Protocol Credentials
2017-11-03 17:03

Darknet Markets Sell Harvested RDP Credentials for as Little as $3Many enterprises use remote desktop protocol to remotely administer their PCs and mobile devices. But security experts warn that...

Cybercriminals increasingly focusing on credential theft
2017-09-29 15:30

Criminal tactics used to access user credentials are growing in prevelance, and that a record 47 percent of all malware is new or zero day, and thus able to evade signature-based antivirus...

Verizon Wireless Internal Credentials, Infrastructure Details Exposed in Amazon S3 Bucket
2017-09-22 19:56

Verizon is the latest company to leak confidential data through an exposed Amazon S3 bucket.

Joomla Login Page Flaw Exposes Admin Credentials
2017-09-21 11:38

Joomla 3.8 brings more than 300 improvements to the popular content management system (CMS) and patches two vulnerabilities, including one that can be exploited to obtain administrator...

Do CISOs Need IT or InfoSec Academic Credentials?
2017-09-19 11:18

In the latest edition of the ISMG Security Report: a look at the former Equifax chief information security officer and whether her lack of academic credentials in IT or IT security is relevant to...

Former Anthem Cybersecurity Exec on Protecting Credentials
2017-09-13 18:03

A former cybersecurity analytics specialist at health insurer Anthem, which experienced a massive data breach, offers insights on key steps organizations should take to avoid becoming the next...

Researchers Devise Hopeful Defense Against Credential Spear Phishing Attacks (Security Week)
2017-09-05 12:07

Security Researchers Have Proposed a New and Effective Way to Detect Credential Spearphishing Attacks in the Enterprise read more