Newsletters
News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Click for more information, or
Home Enterprise I.T. Cloud Computing Applications Hardware More Topics...
Eliminate costly downtime!
Find out how with Free White Paper
& enter to win a Samsung Galaxy Note

www.apc.com
Enterprise I.T.
24/7/365 Network Uptime!
Average Rating:
Rate this article:  
Did Reuters Fail to Use Twitter Authentication?
Did Reuters Fail to Use Twitter Authentication?

By Jennifer LeClaire
July 30, 2013 11:04AM

    Bookmark and Share
In March, Twitter beefed up security with a voluntary, opt-in two-step authentication system in hopes of putting an end to much of the hacking drama associated with its brand name. But companies have to use it in order to benefit from it. Reuters has not publicly commented on whether it has used the authentication.
 



The Syrian Electronic Army (SEA) is at it again. Reuters is the latest victim of the hactivist group that has been terrorizing social media accounts of news organizations that report news it doesn't like. On Monday, Reuters' official Twitter account was hacked and used as a propaganda tool for proponents of Bashar al-Assad, Syria's president.

Just last week, the SEA targeted the Tango messaging app. Other victims have included the Associated Press, the Financial Times, and The Guardian. Hacks of high-profile news organizations' Twitter accounts have become so common that the micro-blogging site has sent a memo to them that warns it expects still more, and outlines several steps the organizations should take to deter the hacks.

"Earlier today @thomsonreuters was hacked," a spokesman for the news organization told the Wall Street Journal. "In this time, unauthorized individuals have posted fabricated tweets of which Thomson Reuters is not the source. The account has been suspended and is currently under investigation."

Easily Preventable?

We asked Kevin O'Brien, an enterprise solution architect at CloudLock, for his thoughts on the latest SEA attack. He told us we are seeing a continuation of the trend of criminals gaining access to "soft" targets -- Twitter accounts, unsecured web services, databases, and so on -- that represent a platform for espousing political and social viewpoints.

"Organizations need to apply the same rigor to reputation risk that they do to data risk," he said. "Employees must be informed of how and why these types of attacks occur, and put a response strategy in place now -- not after they are hacked and embarrassed."

Ken Pickering, director of Engineering at CORE Security, told us his best guess is that Reuters wasn't taking advantage of Twitter's new two-factor authentication.

"The SEA is good at simple attacks, but two-factor would have made the account much harder to crack," Pickering said. "With two-factor, a successful attacker would need to access the account holder's password and cell phone instead of using basic password cracking software."

Twitter Urges Authentication

In March, Twitter beefed up security with a voluntary, opt-in two-step authentication system in hopes of putting an end to much of the hacking drama associated with its brand name. But companies have to use it in order to benefit from it. Reuters has not publicly commented on whether it has used the authentication.

"Every day, a growing number of people log in to Twitter," said Jim O'Leary, a member of the product security team at Twitter, when the company announced its new authentication scheme. "Usually these login attempts come from the genuine account owners, but we occasionally hear from people whose accounts have been compromised by email phishing schemes or a breach of password data elsewhere on the web."

O'Leary stressed that even with this new security option turned on, it's still important for Twitter users to select a strong password and follow the rest of the micro-blogging service's advice for keeping accounts secure.
 

Tell Us What You Think
Comment:

Name:

Elle Morgan:

Posted: 2013-07-31 @ 9:43am PT
Authenticating your applications both on the cloud and network as well as on mobile devices has become a major challenge for large corporations and companies expanding into the mobile market. Two-Factor Authentication is one of the most secure methods to protect identities on the web but choosing the right company can be difficult. Check out how we revolutionized the industry with device-fingerprinting and SSO to mobile applications here-http://www.secureauth.com!



Neustar, Inc. (NYSE: NSR) is a trusted, neutral provider of real-time information and analysis to the Internet, telecommunications, information services, financial services, retail, media and advertising sectors. Neustar applies its advanced, secure technologies in location, identification, and evaluation to help its customers promote and protect their businesses. More information is available at www.neustar.biz.


 Enterprise I.T.
1.   Windows 7 Ends Mainstream Support
2.   Another IE-Focused Patch Tuesday
3.   BlackBerry's Hip To Be Square
4.   Gartner Rates IT Security Companies
5.   Google I/O Brings a Lot for Biz Users


advertisement
Windows 7 Ends Mainstream Support
But extended support still available.
Average Rating:
Another IE-Focused Patch Tuesday
One critical for Internet Explorer.
Average Rating:
Gartner Rates IT Security Companies
IBM, HP, McAfee, Splunk ranked well.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Report: Chinese Hackers Hit U.S. Personnel Networks
Hackers from China broke into the computer networks of the U.S. Office of Personnel Management earlier this year with the intention of accessing the files of tens of thousands of federal employees.
 
Charges: Russian Stole Data from U.S. Restaurants, Zoo
A Russian man arrested on bank fraud and other charges hacked into computers at restaurants in Washington, hundreds of other retail businesses, and even the Phoenix Zoo, authorities say.
 
Another Month, Another IE-Focused Patch Tuesday
Microsoft rolled out 59 vulnerabilities for Internet Explorer in June. But the IE-patching party is not over yet. Redmond published six new security bulletins on Tuesday; two, critical; three, important.
 

Enterprise Hardware Spotlight
Another Day, Another Internet of Things Consortium Is Born
In the emerging Internet of Things, zillions of devices will be talking to each other. Samsung, Intel and Dell just formed a consortium to ensure each thing can understand what others are saying.
 
Gartner Sales Study Sees Tablets Up, PCs Down but Recovering
Are PCs on the comeback trail? That depends on how you define "comeback." While tablet sales remain strong, Gartner's latest study found PC shipments aren't dropping as fast as they did last year.
 
Review: Warming Up to Tablets with Keyboard Covers
If you've ever thought tablets with keyboard covers were just a poor excuse for a laptop, think again. Nokia's Lumia 2520 comes with an optional keyboard cover that just may change your mind.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud Computing | Applications | Hardware | Mobile Tech | Big Data | Communications
World Wide Web | Network Security | Data Storage | Small Business | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech
Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters | XML/RSS Feed

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.