Jeremy Cruz

Archive

The Most Popular (and Worst) Passwords

A recent study of five million leaked passwords from enterprises in 2016 revealed the most popular ones among users. Tops on the list was “123456,” which makes up about 4% of the sample set, followed...

Cloudbleed – More Bad News For Using Passwords Alone

A new internet security vulnerability was announced last week, and it is “a scary big deal“. Cloudbleed, the name given to this vulnerability, has led to a potentially wide-spread leak of passwords and other data...

Phishing Scheme Allows Access to Los Angeles County Confidential Records

Last month, charges were filed against a hacker who used a phishing scheme in May 2016 to potentially access over 750,000 confidential health and personal records in Los Angeles County. As this incident shows, phishing...

Password Guessing Is Becoming Easier And Easier

With all of the leaked passwords that have been made available recently (passwords from services such as Yahoo and LinkedIn), cyber-criminals have access to vast data sets of passwords that make it easier to crack...

Hillary and the Democrats Hacked

As mentioned in a previous blog post, foreign spies had been targeting the Donald Trump and Hillary Clinton presidential campaigns. And in recent weeks, reports indicate attacks have not only been successful, but reaching other...

Password Files on OneDrive Increasing

Corporate users of Microsoft’s OneDrive cloud storage are increasingly storing files there that contain passwords. According to a report released last month, “enterprises are routinely storing corporate password files in the cloud through Microsoft’s OneDrive...

Foreign spies trying to hack Trump, Clinton, and Sanders campaigns

Last week, James Clapper, the U.S. director of national intelligence, said there have been “some indications” that foreign hackers have been targeting the presidential campaigns of Donald Trump, Hillary Clinton, and Bernie Sanders. The FBI...

Fake phishing scheme shows the value of corporate data to hackers

A recent faux phishing scheme designed to track the activity of hackers accessing the “leaked” data confirms what we already know — hackers gravitate towards corporate data, and not by the dozens, but by the...

Financial services are another prime target for hackers

Last month, I posted about the healthcare industry being a target for cybercriminals. Another target, likely even more lucrative, is the financial services industry. According to a 2014 news article, the Federal Bureau of Investigation...

Worried about stolen credentials? You’re not alone.

For decades, logging into a network, application, server, etc. usually only requires a username and password. Sometimes certain policies are put in place to try to make sure passwords are not compromised, such as requiring...