Featured Articles

Nvidia Shield 2 shows up in AnTuTu

Nvidia Shield 2 shows up in AnTuTu

Nvidia’s original Shield console launched last summer to mixed reviews. It went on sale in the US and so far Nvidia…

More...
AMD CSO John Byrne talks ARM

AMD CSO John Byrne talks ARM

We had a chance to talk about AMD’s upcoming products with John Byrne, Chief Sales Officer, AMD. We covered a number…

More...
AMD Chief Sales Officer thinks GPU leadership is critical

AMD Chief Sales Officer thinks GPU leadership is critical

We had a chance to talk to John Byrne who spent the last two years as Senior Vice President and Chief…

More...
OpenPlus One $299 5.5-inch Full HD phone

OpenPlus One $299 5.5-inch Full HD phone

OnePlus is one of the few small companies that might disrupt the Android phone market, dominated by giant outfits like Samsung.…

More...
KFA2 GTX 780 Ti Hall Of Fame reviewed

KFA2 GTX 780 Ti Hall Of Fame reviewed

KFA2 gained a lot of overclocking experience with the GTX 780 Hall of Fame (HOF), which we had a chance to…

More...
Frontpage Slideshow | Copyright © 2006-2010 orks, a business unit of Nuevvo Webware Ltd.
Tuesday, 07 August 2012 09:57

Reuters hacked

Written by Nick Farrell

hackers

Software out of date

News agency Reuters admitted that its blogging platform has been hacked twice. The latest attack came just 48 hours after a computer intruder was able to post fake news stories on its web site.

In Sunday's attack, a small Reuters Twitter feed - @ReutersTech, with 17,000 followers - was briefly controlled by hackers. The attacks appear to have come from Pro-Syran hackers who are desperate to tell a different story from the one which usually accuses them of massacring people.

But it seems that Reuters bought the attack on itself by not updating its CMS. Marcus Carey at vulnerability management and penetration testing company Rapid7 said that the attack was not particularly surprising, as it seems they were on version 3.1.1 of Wordpress, which could have been patched as early as July 2011. He said that Wordpress was  currently up to version 3.4.1 and it looks like there are twenty different vulnerabilities that have been reported for the older version that Reuters is using.  

Carey pointed out that Wordpress and its plug-ins are often targeted by attackers as the wide proliferation of the software makes it a target that provides a lot of bang for the buck for exploit developers. He said that it was plausible the attackers gained access through one of the known vulnerabilities associated with version 3.1.1 of Wordpress, and then reused the credentials they gained to hack Reuters’ Twitter account.

“We see so many breaches resulting from poor patching practices and organisations really need to take this seriously. Updating the software you use is a basic step in improving your security posture, yet too often we see evidence of a lack of execution in this area,” Carey said.


Nick Farrell

E-mail: This e-mail address is being protected from spambots. You need JavaScript enabled to view it
blog comments powered by Disqus

To be able to post comments please log-in with Disqus

 

Facebook activity

Latest Commented Articles

Recent Comments