Cyber researcher claims a Department of Defense email server was open for the public to peruse -
Mr. Sen said the Microsoft Azure server contained approximately three terabytes of data, and he shared some of the information with The Washington Times, including emails involving U.S. Special Operations Command.“The server … was left exposed without any authentication likely due to misconfiguration. This happens most likely due to human error,” Mr. Sen said.
SOCOM declined to comment on Tuesday and referred questions to U.S. Cyber Command, which did not immediately answer. Mr. Sen previously collaborated with TechCrunch’s Zack Whittaker, who reported Tuesday that Mr. Sen was a “good-faith security researcher.” Emsisoft threat analyst Brett Callow said server misconfigurations can enable the exposure of sensitive information that could be used for several purposes. One potential scam enabled by misconfigurations is spearphishing, which involves using electronic communications such as email to trick someone into giving improper access or sensitive information.
France Dernières Nouvelles, France Actualités
Similar News:Vous pouvez également lire des articles d'actualité similaires à celui-ci que nous avons collectés auprès d'autres sources d'information.
Pentagon investigating leak of emails from Defense Department serverThe military’s Special Operations Command is investigating claims that it leaked sensitive data. Anyone who knew the IP address of the server could access the data without a password until Monday, when personnel secured it.
Lire la suite »
Cybersecurity Defenders Are Expanding Their AI ToolboxScientists have taken a key step toward harnessing a form of AI known as deep reinforcement learning, or DRL, to protect computer networks.
Lire la suite »
Cybersecurity firm Darktrace hires EY to review financial processes after damning short seller reportDarktrace's board chair said the decision to launch a third-party review was a sign of its confidence in the robustness of the company's financial processes.
Lire la suite »
AT&T seeks to shed cybersecurity division, sources tell ReutersAT&T Inc, the second-biggest U.S. wireless carrier, is exploring a sale of its cybersecurity division, potentially undoing an acquisition it completed five years ago.
Lire la suite »
AT&T seeks to shed cybersecurity division -sourcesAT&T Inc , the second-biggest U.S. wireless carrier, is exploring a sale of its cybersecurity division, potentially undoing an acquisition it completed five years ago, according to people familiar with the matter.
Lire la suite »
Analysis | Paid security features at Twitter and Meta spark cybersecurity concernsAnalysis: Cyber pros have questions about paid security features at Twitter and Meta
Lire la suite »