Security Affairs

DECEMBER 16, 2019

Another year is ending and this is the right time to discover which are the worst passwords of 2019 by analyzing data leaked in various data breaches. Independent anonymous researchers, compiled and shared with security firm NordPass a list of 200 most popular passwords that were leaked in data breaches during 2019. Use 2FA if you can.

Passwords 95

Passwords Data breaches Password Management Advertising 95

Security Affairs

APRIL 1, 2020

The popular Zoom app is under scrutiny, experts have discovered a vulnerability that could be exploited to steal users’ Windows passwords. The attack leverages the SMBRelay technique that provides username and NTLM password hashes to a remote SMB server when connecting to it. Baset (@SymbianSyMoh) April 1, 2020.

Passwords 124

Passwords Advertising Hacking Software 124

Security Affairs

NOVEMBER 18, 2018

Instagram has suffered a serious security leak that might have exposed user’s passwords, revealed The Information website. Instagram notified some of its users that it might have accidentally exposed their password due to a security glitch. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Passwords 110

Passwords Advertising Accountability Media 110

Security Affairs

APRIL 29, 2019

A cyber survey conducted by the United Kingdom’s National Cyber Security Centre (NCSC) revealed that ‘123456’ is still the most hacked password. Security experts at the United Kingdom’s National Cyber Security Centre (NCSC) analyzed the 100,000 most-commonly re-occurring breached passwords using data from Have I Been Pwned (HIBP).

Passwords 108

Passwords Accountability Data breaches Advertising 108

SiteLock

AUGUST 27, 2021

The three most common forms of attack on web apps were phishing (to lure users into revealing their passwords), brute force attacks to crack passwords, and SQL injections. The top targets for web app attacks were the information sector, utilities, manufacturing, and retail. The top two targets were the financial sector and retail.

Retail 52

Retail Data breaches DDOS Passwords 52

Security Affairs

AUGUST 12, 2020

The experts first discovered the malware in June 2018, but it has been available since 2014, when they observed threat actors spreading it via a Microsoft Word document containing an auto-executable malicious VBA Macro. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Passwords 137

Passwords Spyware VPN Malware 137

Security Affairs

AUGUST 15, 2019

The latest update released by Mozilla for Firefox patches a flaw in Firefox Password Manager that can be exploited to access stored passwords. fixes a vulnerability that can be exploited to bypass the master password in Firefox Password Manager and access stored passwords. ” reads a post published by Ducklin.

Passwords 94

Passwords Password Management Advertising Hacking 94

Security Affairs

DECEMBER 17, 2019

TP-Link has addressed a critical vulnerability impacting some TP-Link Archer routers that could allow attackers to login without passwords. “In such an event, the victim could lose access to the console and even a shell, and thereby would not be able to re-establish a new password.” ” continues the post.

Passwords 98

Passwords Advertising Firmware Authentication 98

Security Affairs

APRIL 19, 2019

Other problems for Facebook that admitted to have stored m illions of Instagram users’ passwords in plaintext. In March, Facebook admitted to have stored the passwords of hundreds of millions of users in plain text, including “tens of thousands” passwords belonging to Instagram users as well.

Passwords 103

Passwords Advertising Accountability Authentication 103

Security Affairs

AUGUST 3, 2019

Dragonblood researchers found two new weaknesses in WPA3 protocol that could be exploited to hack WPA3 protected WiFi passwords. passwords. A group of researchers known as Dragonblood (Mathy Vanhoef and Eyal Ronen ) devised new methods to hack WPA3 protected WiFi passwords by exploiting two new vulnerabilities dubbed Dragonblood flaws.

Passwords 103

Passwords Hacking Wireless Authentication 103

Security Affairs

SEPTEMBER 16, 2019

A flaw in LastPass password manager leaks credentials from previous site. An expert discovered a flaw in the LastPass password manager that exposes login credentials entered on a site previously visited by a user. Go to [link] , when prompted for password click the little “…” icon. Pierluigi Paganini.

Password Management 106

Password Management Passwords Advertising Mobile 106

Security Affairs

JANUARY 2, 2020

The Poloniex cryptocurrency exchange is forcing users to reset their passwords following a data leak. . Another bad news for the community of the virtual currencies communities, the Poloniex cryptocurrency exchange has forced its users to reset their passwords following a data leak. . This is a real email! Pierluigi Paganini.

Passwords 67

Passwords Cryptocurrency Data breaches Advertising 67

Security Affairs

APRIL 10, 2019

Security researchers discovered weaknesses in WPA3 that could be exploited to recover WiFi passwords by abusing timing or cache-based side-channel leaks. Security researchers discovered weaknesses in WPA3 that could be exploited to recover WiFi passwords by abusing timing or cache-based side-channel leaks.

Passwords 110

Passwords Hacking Advertising Network Security 110

Security Affairs

APRIL 28, 2019

Microsoft presented a series of security enhancements for its Windows 10, including the removal of the password-expiration policy. Microsoft announced the removal of the password-expiration policy from its operating system starting with the next Windows 10 feature update (Windows 10 version 1903, a.k.a., ” continues the post.

Passwords 87

Passwords Advertising Authentication Data breaches 87

Security Affairs

NOVEMBER 29, 2018

names, email addresses, and hashed passwords) from the company portal Dell.com, from support.dell.com websites. As a precautionary measure, Dell forced reset passwords for all accounts on Dell.com website, the company also announced additional measures to mitigate potential effects of the incident. . Pierluigi Paganini.

Data breaches 94

Data breaches Passwords Advertising Accountability 94

Security Affairs

AUGUST 17, 2019

Trend Micro addressed 2 DLL hijacking flaws in Trend Micro Password Manager that could allow malicious actors to escalate privileges and much more. “ SafeBreach Labs discovered a new vulnerability in Trend Micro Password Manager software.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Password Management 87

Password Management Passwords Advertising Authentication 87

Security Affairs

SEPTEMBER 23, 2019

The online education platform for developers Thinkful suffered a security breach and is notifying the incident to its customers requiring them to reset their passwords. The company is notifying the incident to its users via email and is forcing a password reset in response to the incident. ” continues the notification.

Data breaches 84

Data breaches Passwords Education Advertising 84

Security Affairs

AUGUST 30, 2019

Foxit Software, the company behind the Foxit PDF reader app, disclosed a data breach that exposed customers’ information, including passwords. Foxit already notified the impacted ‘My Account’ users of the security breach via emails and forced them to reset passwords. ” continues the advisory.

Data breaches 85

Data breaches Passwords Software Identity Theft 85

Security Affairs

JANUARY 2, 2019

The security researcher Gynvael Coldwind (@voltagex) discovered that the stored attributes can include user usernames and passwords. This includes the cases where the URL has a user/password in it $ getfattr -d -m – test user.xdg.origin.url="[link] — Gynvael Coldwind (@gynvael) December 25, 2018. Pierluigi Paganini.

Passwords 107

Passwords Advertising Internet Internet 107

Security Affairs

SEPTEMBER 6, 2019

600,000 GPS trackers left exposed online with a default password of ‘123456’ Avast researchers found at least 600,000 GPS trackers manufactured by a Chinese vendor that were exposed online with a default password of “123456.” The use of default passwords represents a serious problem also for the Chinese vendor.

Passwords 85

Passwords Manufacturing Advertising Firmware 85

Security Affairs

MAY 22, 2019

Google accidentally stored the passwords of its G Suite users in plain-text for 14 years allowing its employees to access them. The news is disconcerting, Google has accidentally stored the passwords of the G Suite users in plain-text for 14 years, this means that every employee in the company was able to access them.

Passwords 88

Passwords Encryption Advertising Accountability 88

Security Affairs

JANUARY 2, 2020

Security expert discovered a Google Chrome extension named Shitcoin Wallet that steals passwords and wallet private keys. Harry Denley, director of security at the MyCrypto , discovered that the Google Chrome extension named Shitcoin Wallet is stealing passwords and wallet private keys. Pierluigi Paganini.

Passwords 79

Passwords Cryptocurrency Advertising Antivirus 79

Security Affairs

JULY 21, 2019

The airline company WizzAir informed its customers that it had reset the account passwords due to a technical issue in the system. The airline company WizzAir had reset the account passwords of its users due to a technical issue in its system. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Passwords 77

Passwords Accountability Advertising Hacking 77

Security Affairs

FEBRUARY 11, 2019

Google has released a new extension for Chrome dubbed Password Checkup that will alert users if their username/password combinations were leaked online as part of a dump after a data breach. The tool will display a red alert box in case of a positive match and will suggest users change the password. Pierluigi Paganini.

Passwords 69

Passwords Data breaches Advertising Hacking 69

Security Affairs

JULY 25, 2019

Stock trading service Robinhood announced that the passwords of a number of users were stored in plaintext, the company is informing impacted ones. Stock trading service Robinhood admitted to have stored passwords of a number of users in plain text, the company is informing impacted ones via emai l. Pierluigi Paganini.

Passwords 65

Passwords Financial Services Advertising Accountability 65

Security Affairs

NOVEMBER 17, 2018

Million of password resets and two-factor authentication codes exposed in unsecured Vovox DB. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. Security Affairs – Voxox, data leak).

Passwords 98

Passwords Accountability Data breaches Advertising 98

Security Affairs

APRIL 5, 2019

Researchers at AT&T Alien Labs have spotted a malware called Xwo that is actively scanning the Internet for exposed web services and default passwords. Experts at AT&T Alien Labs discovered a new piece of malware called Xwo that is actively scanning the Internet for exposed web services and default passwords.

Internet 100

Internet Internet Passwords Malware 100

Security Affairs

APRIL 23, 2019

The IT staff behind Bodybuilding.com also introduced additional security measures and forced a password reset for its customers. Data potentially exposed in the incident includes name, Bodybuilding.com usernames and passwords. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” As usual.

Passwords 75

Passwords Retail Accountability Data breaches 75

Security Affairs

JANUARY 28, 2019

After the discovery of hacking attempts, the French firm logged users out and forced a password reset procedure by including in the notification a link to change the password and re-gain access to the account. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” continues the company.

Passwords 71

Passwords Data breaches Accountability Advertising 71

Krebs on Security

FEBRUARY 24, 2023

The account didn’t resume posting on the forum until April 2014. Shotliff said he sold his BHProxies account to another Black Hat World forum user from Egypt back in 2014. He also shared a PayPal receipt and snippets of Facebook Messenger logs showing conversations in March 2014 with legendboy2050@yahoo.com. com on Mar.

Accountability 216

Accountability Advertising Marketing Malware 216

Threatpost

NOVEMBER 27, 2017

Researcher Troy Hunt is credited for tipping image sharing site Imgur off to a 2014 breach of 1.7 million user accounts.

Accountability 45

Accountability Data breaches Passwords Hacking 45

Schneier on Security

APRIL 2, 2020

account number and points balance, but not passwords) Additional Personal Details (e.g., This isn't nearly as bad as the 2014 Marriott breach -- made public in 2018 -- which was the work of the Chinese government. Marriott announced another data breach, this one affecting 5.2 linked airline loyalty programs and numbers).

Hacking 297

Hacking Accountability Data breaches Government 297

Security Affairs

JULY 16, 2018

A security researcher discovered that the IoT search engine ZoomEye has cached login passwords for tens of thousands of Dahua DVRs. The IoT search engine ZoomEye has cached login passwords for tens of thousands of Dahua DVRs, the discovery was made by security researcher Ankit Anubhav, Principal Researcher at NewSky Security.

IoT 70

IoT Engineering Passwords Firmware 70

Krebs on Security

APRIL 18, 2023

Faceless grew out of a popular anonymity service called iSocks , which was launched in 2014 and advertised on multiple Russian crime forums as a proxy service that customers could use to route their malicious Web traffic through compromised computers. The password chosen by this user was “ 1232.” account at Klerk.ru).

Malware 221

Malware Passwords Accountability Advertising 221

Security Affairs

AUGUST 13, 2020

The leaked data includes login names, hashed passwords, and email addresses. It is not confirmed that all of the leaked data is legitimate, anyway, experts suggest users change their password immediately. Users that share the password at another site should also change the password. Pierluigi Paganini.

Hacking 136

Hacking Data breaches Cybercrime Passwords 136

Security Affairs

NOVEMBER 4, 2020

Yesterday almost $1 billion worth of cryptocurrency contained in a password-protected BitCoin wallet was moved to another wallet. Someone has transferred almost $1 billion worth of cryptocurrency contained in a password-protected BitCoin wallet to another wallet. I have the wallet, @Google hook me up with a quantum computer please.

Cryptocurrency 140

Cryptocurrency Passwords Advertising Hacking 140

Security Affairs

MAY 24, 2020

The online education portal EduCBA discloses a data breach and is resetting customers’ passwords in response to the incident. Online education website EduCBA discloses a data breach, it has started notifying customers that in response to the incident it is resetting their passwords. Pierluigi Paganini.

Data breaches 116

Data breaches Education Passwords Advertising 116