Security News

CIA Tools for Stealing SSH Credentials Exposed by WikiLeaks (Security Week)
2017-07-07 09:17

WikiLeaks has published documents detailing BothanSpy and Gyrfalcon, tools allegedly used by the U.S. Central Intelligence Agency (CIA) to steal SSH credentials from Windows and Linux systems. read more

NotPetya Operators Accessed M.E.Doc Server Using Stolen Credentials: Cisco (Security Week)
2017-07-06 15:43

The group behind last week’s destructive NotPetya attack was able to access M.E.Doc’s update server and use it for their nefarious purposes courtesy of stolen credentials, Cisco has discovered. read more

Sabre Says Stolen Credentials Led to Breach (InfoRiskToday)
2017-07-06 13:33

Travel Giant Declined to Release Number of VictimsTravel industry giant Sabre said Wednesday an intruder using stolen account credentials for its widely used reservations software had access to...

Wikileaks Unveils CIA Implants that Steal SSH Credentials from Windows & Linux PCs (The Hackers News)
2017-07-06 11:41

WikiLeaks has today published the 15th batch of its ongoing Vault 7 leak, this time detailing two alleged CIA implants that allowed the agency to intercept and exfiltrate SSH (Secure Shell)...

Intelligence data, security credentials found exposed in the Amazon cloud (Help Net Security)
2017-06-01 15:41

A data cache containing highly sensitive US military data has inadvertently been exposed online, UpGuard cyber risk analyst Chris Vickery has discovered last week. After downloading and analyzing...

Password Breaches Fueling Booming Credential Stuffing Business (Threatpost)
2017-05-24 21:49

The market for automated credential stuffing tools is growing fast, because of a record number of breaches.

Week in review: WannaCry decryptor available, stealing Windows credentials using Google Chrome (Help Net Security)
2017-05-22 01:42

Here’s an overview of some of last week’s most interesting news and articles: DocuSign breached, stolen info used for targeted phishing campaign Phishing emails impersonating electronic signature...