A mistakenly exposed password let a hacker access internal Comodo files

guest · Jul 27, 2019

A mistakenly exposed password let a hacker access internal Comodo files
July 27, 2019
https://techcrunch.com/2019/07/27/comodo-password-access-data/

A hacker gained access to internal files and documents owned by security company and SSL certificate issuer Comodo by using an email address and password mistakenly exposed on the internet.
The credentials were found in a public GitHub repository owned by a Comodo software developer. With the email address and password in hand, the hacker was able to log into the company’s Microsoft-hosted cloud services. The account was not protected with two-factor authentication.

“Seeing as they’re a security company and give out SSL certificates, you’d think that the security of their own environment would come first above all else,” said Ursem.
But according to Ursem, he wasn’t the first person to find the exposed email address and password.

We reached out to Comodo for comment prior to publication. A spokesperson said the account was an “automated account used for marketing and transactional purposes,” adding: “The data accessed was not manipulated in any way and within hours of being notified by the researcher, the account was locked down.”
Click to expand...

guest · Jul 28, 2019

And people trust Comodo for security looool

Log in or Sign up

A mistakenly exposed password let a hacker access internal Comodo files

guest Guest

guest Guest

Log in or Sign up

A mistakenly exposed password let a hacker access internal Comodo files

guest Guest

guest Guest

Useful Searches