Forgot your password?
typodupeerror
Security

+ - Hacker Grabs 150k Adobe User Accounts via SQL Injection->

Submitted by
CowboyRobot
CowboyRobot writes "Adobe today confirmed that one of its databases has been breached by a hacker and that it had temporarily taken offline the affected Connectusers.com website. The hacker, who also goes by Adam Hima, told Dark Reading that the server he attacked was the Connectusers.com Web server, and that he exploited a SQL injection flaw to execute the attack. "It was an SQL Injection vulnerability, somehow I was able to dump the database in less requests than normal people do," he says. Users passwords for the Adobe Connectusers site were stored and hashed with MD5, he says, which made them "easy to crack" with freely available tools. And Adobe wasn't using WAFs on the servers, he notes. Tal Beery, a security researcher at Imperva, analyzed the data dump in the Connectusers Pastebin post and found that the list appears to be valid and that the hacked database was relatively old."
Link to Original Source
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Hacker Grabs 150k Adobe User Accounts via SQL Injection

Comments Filter:

After an instrument has been assembled, extra components will be found on the bench.

Working...