Attacks/Breaches

8/4/2017
11:15 AM
50%
50%

HBO Breach Did Not Compromise Full Email System: CEO

HBO's recent security breach likely did not compromise its entire email system as hacker(s) allegedly threaten to expose stolen data.

HBO CEO Richard Plepler does not believe the company's entire email system was compromised in a recent large-scale security breach, CNN Tech reports. The company is investigating the breach with outside security firms and law enforcement to determine the extent of the attack and players involved.

The unknown hacker(s) behind the breach claim to possess 1.5 terabytes of data, the report continues. If true, this would make the HBO incident significantly bigger than the 2014 Sony hack in which attackers leaked 200GB of information.

HBO has confirmed few details on the breach. But Roderick Jones, security expert and founder of Rubica, theorizes the hack was possible because HBO stores its content using outdated technology. Windows in particular has been used among hackers, including those behind the Sony breach, to target the entertainment industry with cyberattacks.

"The WannaCry attack … That was targeted at an old Windows system," says Jones in a statement to Digital Trends. "That has created a vulnerability for HBO. I would say that's probably a certainty, because that's where the weaknesses are." Alternatively, Jones continues, hackers may have targeted individual employees to steal personal information.

The Hollywood Reporter obtained an email from the alleged hacker, who calls himself Kind Mr. Smith and claims he will release evidence of his access to HBO emails on Sunday. He also says the breach is "about money," an indication he demanded ransom from the company.

Read more details here.  

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
8/7/2017 | 7:27:38 AM
Sunday's Release
As a follow-up, has any further data been released based on the Kind Mr. Smith's claim?
Google Engineering Lead on Lessons Learned From Chrome's HTTPS Push
Kelly Sheridan, Staff Editor, Dark Reading,  8/8/2018
White Hat to Black Hat: What Motivates the Switch to Cybercrime
Kelly Sheridan, Staff Editor, Dark Reading,  8/8/2018
PGA of America Struck By Ransomware
Dark Reading Staff 8/9/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Now about that mortgage refinance offer from Wells Fargo .....
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-6970
PUBLISHED: 2018-08-13
VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from a privil...
CVE-2018-14781
PUBLISHED: 2018-08-13
Medtronic MMT 508 MiniMed insulin pump, 522 / MMT - 722 Paradigm REAL-TIME, 523 / MMT - 723 Paradigm Revel, 523K / MMT - 723K Paradigm Revel, and 551 / MMT - 751 MiniMed 530G The models identified above, when paired with a remote controller and having the "easy bolus" and "remote bolu...
CVE-2018-15123
PUBLISHED: 2018-08-13
Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows remote attacker perform new attack vectors and take under control device and smart home.
CVE-2018-15124
PUBLISHED: 2018-08-13
Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device.
CVE-2018-15125
PUBLISHED: 2018-08-13
Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface.