hard-coded credentials

Uber Hacked: Its Security is ‘Awful’ and ‘Weak’
Richi Jennings | | 2fa, hard-coded credentials, MFA, SB Blogwatch, social engineering, Tracking breaches sure is easy when the hackers just dump all the proof to Twitter and tell you exactly how they got in, Uber
Fake taxi-cum-takeout service Uber was fully pwned this week. It’s bad—REALLY bad ...
Security Boulevard

RSA App Exposes User Data Due to Common Developer Mistake
Michael Bentley | | app secuirty, app vulnerabilities, app-security, dataprivacy, developer errors, hard-coded credentials, Mobile Security, Mobile Security Insights, Mobile Threat Research, rsa, RSA Conference 2018, Security Conference
Late last week security researchers found the RSA security conference exposing conference attendee data via vulnerabilities in its mobile app. Because a 3rd party developer had hard coded data – including security ...

Public Remote Code Execution Exploit Affects Thousands of Email Servers
Lucian Constantin | | email server, Exim, hard-coded credentials, IoT botnet, Mirai, remote administration, Remote Code Execution, vulnerability
Developers of the widely used Exim message transfer agent are advising administrators to disable a feature on their email servers to protect them from a critical remote execution exploit that has been ...

HP Patches High-Risk Vulnerability in Business Printers
Lucian Constantin | | arbitrary code execution, CVE-2017-2750, Data leak, firmware security, firmware update, GitHub repository, hard-coded credentials, HP, printer, printer security, signature validation, Uber, vulnerability
HP released security firmware updates this week for dozens of printers, including enterprise models, to fix a high-risk vulnerability that could allow attackers to compromise the devices. The vulnerability, tracked as CVE-2017-2750, ...