Newsletters
News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Click for more information, or
Home Enterprise I.T. Cloud Computing Applications Hardware More Topics...
Eliminate costly downtime!
Find out how with Free White Paper
& enter to win a Samsung Galaxy Note

www.apc.com
Enterprise I.T.
Next Generation Data Center Is Here!
Average Rating:
Rate this article:  
Did Reuters Fail to Use Twitter Authentication?
Did Reuters Fail to Use Twitter Authentication?

By Jennifer LeClaire
July 30, 2013 11:04AM

    Bookmark and Share
In March, Twitter beefed up security with a voluntary, opt-in two-step authentication system in hopes of putting an end to much of the hacking drama associated with its brand name. But companies have to use it in order to benefit from it. Reuters has not publicly commented on whether it has used the authentication.
 



The Syrian Electronic Army (SEA) is at it again. Reuters is the latest victim of the hactivist group that has been terrorizing social media accounts of news organizations that report news it doesn't like. On Monday, Reuters' official Twitter account was hacked and used as a propaganda tool for proponents of Bashar al-Assad, Syria's president.

Just last week, the SEA targeted the Tango messaging app. Other victims have included the Associated Press, the Financial Times, and The Guardian. Hacks of high-profile news organizations' Twitter accounts have become so common that the micro-blogging site has sent a memo to them that warns it expects still more, and outlines several steps the organizations should take to deter the hacks.

"Earlier today @thomsonreuters was hacked," a spokesman for the news organization told the Wall Street Journal. "In this time, unauthorized individuals have posted fabricated tweets of which Thomson Reuters is not the source. The account has been suspended and is currently under investigation."

Easily Preventable?

We asked Kevin O'Brien, an enterprise solution architect at CloudLock, for his thoughts on the latest SEA attack. He told us we are seeing a continuation of the trend of criminals gaining access to "soft" targets -- Twitter accounts, unsecured web services, databases, and so on -- that represent a platform for espousing political and social viewpoints.

"Organizations need to apply the same rigor to reputation risk that they do to data risk," he said. "Employees must be informed of how and why these types of attacks occur, and put a response strategy in place now -- not after they are hacked and embarrassed."

Ken Pickering, director of Engineering at CORE Security, told us his best guess is that Reuters wasn't taking advantage of Twitter's new two-factor authentication.

"The SEA is good at simple attacks, but two-factor would have made the account much harder to crack," Pickering said. "With two-factor, a successful attacker would need to access the account holder's password and cell phone instead of using basic password cracking software."

Twitter Urges Authentication

In March, Twitter beefed up security with a voluntary, opt-in two-step authentication system in hopes of putting an end to much of the hacking drama associated with its brand name. But companies have to use it in order to benefit from it. Reuters has not publicly commented on whether it has used the authentication.

"Every day, a growing number of people log in to Twitter," said Jim O'Leary, a member of the product security team at Twitter, when the company announced its new authentication scheme. "Usually these login attempts come from the genuine account owners, but we occasionally hear from people whose accounts have been compromised by email phishing schemes or a breach of password data elsewhere on the web."

O'Leary stressed that even with this new security option turned on, it's still important for Twitter users to select a strong password and follow the rest of the micro-blogging service's advice for keeping accounts secure.
 

Tell Us What You Think
Comment:

Name:

Elle Morgan:

Posted: 2013-07-31 @ 9:43am PT
Authenticating your applications both on the cloud and network as well as on mobile devices has become a major challenge for large corporations and companies expanding into the mobile market. Two-Factor Authentication is one of the most secure methods to protect identities on the web but choosing the right company can be difficult. Check out how we revolutionized the industry with device-fingerprinting and SSO to mobile applications here-http://www.secureauth.com!



APC has an established a reputation for solid products that virtually pay for themselves upon installation. Who has time to spend worrying about system downtime? APC makes it easy for you to focus on business growth instead of business downtime with reliable data center systems and IT solutions. Learn more here.


 Enterprise I.T.
1.   SAP Taps Apigee for API Management
2.   IBM Beefs Up Identity Intelligence
3.   USB Security Flaw Uncovered
4.   AMD Debuts 64-Bit ARM Server Chips
5.   Asana Revamps Mobile App


advertisement
IBM Beefs Up Identity Intelligence
To offer biz better security products.
Average Rating:
AMD Debuts 64-Bit ARM Server Chips
New Opterons target data center needs.
Average Rating:
Dell, BlackBerry Downplay Threat
Say Apple-IBM alliance can't hurt them.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
New 'Backoff' Malware Slips Undetected into Retail Systems
'Malicious actors' are using a new variety of malware to access consumer payment data remotely through point-of-sale systems, according to a report from the Department of Homeland Security.
 
IBM Beefs Up Identity Intelligence Security Solutions
Big Blue is betting big on identity intelligence. IBM just acquired a private firm with security software to govern user access to apps and data across cloud and on-premise environments.
 
USB Security Flaw Lets Hackers Hijack PCs
Hackers can use the firmware that controls USB functions to take control of computers, say security experts. That means there may be a new class of attack for which there are no defenses.
 

Enterprise Hardware Spotlight
AMD's ARM-Based Opteron Out in $3K Dev Kit
It's dubbed "Seattle" and it's AMD's first 64-bit ARM-based Opteron processor. The low-power chip is being released as part of AMD’s Opteron A1100-series developer kit, and aimed at high-end data center needs.
 
Apple Updates MacBook Pros, Cuts Prices Up to $100
The popular MacBook Pro laptop line just got an update and a price cut of as much as $100. The MacBook Pro with Retina display now includes faster processors and double the memory.
 
Dell, BlackBerry Not Sweating Apple-IBM Alliance
IBM's recent move to partner with Apple to sell iPhones and iPads loaded with corporate applications has excited investors in both companies, but two rivals say they are unperturbed for now.
 

Mobile Technology Spotlight
BlackBerry Messenger Now Available on Windows Phone
BlackBerry's free Messenger chatting and voice app is out of beta and widely available for Windows Phone users, the company said. BBM offers secure messaging, Groups, Voice, Channels and more.
 
Virgin Mobile Offers Custom Smartphone Plans
As the wireless carrier wars continue heating up, Virgin Mobile just threw the customization coal onto the fire. The firm has debuted a no-annual-contract plan with rates based on individual use.
 
Collaboration Provider Asana Revamps Mobile App
Asana, a collaboration software provider started by a Facebook founder, is now out with a rebuilt native iOS mobile app. It replaces one that even the company admits was not up to par.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud Computing | Applications | Hardware | Mobile Tech | Big Data | Communications
World Wide Web | Network Security | Data Storage | CRM Systems | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech
Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.