Endpoint //

Privacy

3/23/2018
12:03 PM
50%
50%

Winners and Losers in Password 'Bracketology'

A recent study shows that there's a clear winner in the 'most used sports mascot' password competition.

Everyone knows you shouldn't use words like "password" as part of your secure password, but what about other words? What about sports team mascots? Keeper Security ran an analysis they've called "Password Madness" to check on which mascots win the most-used prize and the brackets have been filled.

Keeper Security ran their analysis on the massive database of 1.4 billion clear-text credentials 4iQ found on the dark web. What they found was a clear winner and loser.

According to a statement from Keeper Security, of all the passwords looked at, those containing "Tiger" and its variations (such as "T1ger", "T1g3r", etc.) appeared 187 percent more often than passwords containing variations of "Eagle," the second-most common password set found, and nearly 850 percent more than the least common password, which was "Bluejay" and its variations.

Since many people re-use the same password on nearly every online account, patterns such as this open up hundreds of thousands of credentials to speedy hacking. Keeper Security recommends that users find other, less risky, ways of honoring their favorite sports teams.

For more, read here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
6 Security Trends for 2018/2019
Curtis Franklin Jr., Senior Editor at Dark Reading,  10/15/2018
6 Reasons Why Employees Violate Security Policies
Ericka Chickowski, Contributing Writer, Dark Reading,  10/16/2018
Getting Up to Speed with "Always-On SSL"
Tim Callan, Senior Fellow, Comodo CA,  10/18/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Latest Comment: Too funny!
Current Issue
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-10839
PUBLISHED: 2018-10-16
Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
CVE-2018-13399
PUBLISHED: 2018-10-16
The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.
CVE-2018-18381
PUBLISHED: 2018-10-16
Z-BlogPHP 1.5.2.1935 (Zero) has a stored XSS Vulnerability in zb_system/function/c_system_admin.php via the Content-Type header during the uploading of image attachments.
CVE-2018-18382
PUBLISHED: 2018-10-16
Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile" "Change Picture" (aka user/edit-profile) action.
CVE-2018-18374
PUBLISHED: 2018-10-16
XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter.