Author Archives: David Bisson

Unprotected MongoDB Databases Wiped and Held for Ransom by Attacker

Posted on by

An attacker is obtaining access to unprotected MongoDB databases, stealing and erasing their content, and holding them for ransom. On 27 December, security researcher Victor Gevers came across a MongoDB server that was open to external connections and that lacked a password on its admin account. This database didn’t contain a lot of information. In […]… Read More

The post Unprotected MongoDB Databases Wiped and Held for Ransom by Attacker appeared first on The State of Security.

Continue reading Unprotected MongoDB Databases Wiped and Held for Ransom by Attacker→

Divining Infosec: Security Experts’ Predictions for 2017

Posted on by

We saw a lot happen in information security over the course of 2016. Some of these events, like the distributed denial-of-service (DDoS) attacks that struck Dyn and Russia’s hacking of the DNC, made the public care about digital security as never before. Those incidents changed the national discourse on information security. As such, they shifted […]… Read More

The post Divining Infosec: Security Experts’ Predictions for 2017 appeared first on The State of Security.

Continue reading Divining Infosec: Security Experts’ Predictions for 2017→

Instant Verification lets mobile users authenticate themselves without an SMS

Posted on by

Facebook has created a new feature called Instant Verification that is designed to help Android users login to online accounts and services without all the fuss of confirming their email address or dealing with a verification code sent by SMS.
David Bi… Continue reading Instant Verification lets mobile users authenticate themselves without an SMS→