The Register
1 month, 2 weeks ago
Password manager Dashlane suspends customer accounts amid brute-force attacks
Engineers' weekends ruined as Dashlane's automatic protections kicked in
Security news aggregator
Latest coverage for Brute Force
Stay updated on brute force attacks, prevention strategies, and the latest news in cybersecurity to safeguard your digital information effectively.
11
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Brute force is an attack method that tries every possible combination of passwords, encryption keys, or authentication tokens to gain unauthorized access. Attackers automate this process to rapidly test large numbers of guesses against login systems, encrypted files, or protected accounts. This technique depends on computational effort and time rather than exploiting software vulnerabilities or logic errors.
Brute force attacks mainly threaten systems with weak or short credentials, increasing the risk of unauthorized access or data exposure. Effective defenses include enforcing strong, complex passwords, implementing account lockouts or request throttling after multiple failed attempts, and deploying multi-factor authentication to reduce reliance on passwords alone. Monitoring for unusual login patterns and applying rate limiting are also critical to detecting and mitigating brute force attempts early in the attack lifecycle.
Volume over time
Weekly headline count for the current query.
Showing 11 most recent headlines
Filtered view
The Register
11 months ago
Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts
If there's smoke? Fortinet warned customers about a critical FortiSIEM bug that could allow an unauthenticated attacker to execute unauthorized commands, and said working exploit code for the flaw has been found in the wild.…
The Register
1 year, 1 month ago
Sitecore CMS flaw let attackers brute-force 'b' for backdoor
Hardcoded passwords and path traversals keeping bug hunters in work Security researchers have issued a warning about a pre-authentication exploit chain affecting a CMS used by some of the biggest companies in the world.…
The Register
1 year, 1 month ago
Cloud brute-force attack cracks Google users' phone numbers in minutes
Chocolate Factory fixes issue, pays only $5K A researcher has exposed a flaw in Google's authentication systems, opening it to a brute-force attack that left users' mobile numbers up for grabs.…
The Register
1 year, 7 months ago
Are your Prometheus servers and exporters secure? Probably not
Plus: Netscaler brute force barrage; BeyondTrust API key stolen; and more Infosec in brief There's a problem of titanic proportions brewing for users of the Prometheus open source monitoring toolkit: hundreds of thousands of servers and exporters are exposed to the internet, creating significant security risks and leaving organizations vulnerable to attack.…
The Register
1 year, 8 months ago
Emergency patch: Cisco fixes bug under exploit in brute-force attacks
Who doesn't love abusing buggy appliances, really? Cisco has patched an already exploited security hole in its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software that miscreants have been brute-forcing in attempted denial of service attacks.…
The Register
2 years, 3 months ago
Fire in the Cisco! Networking giant's Duo MFA leaks message logs
Also warns of brute force attacks targeting its own VPNs, Check Point, Fortinet, SonicWall and more Cisco is fighting fires on a couple fronts this week after security incidents involving its Duo multi-factor authentication (MFA) service and its remote-access VPN services.…
The Register
2 years, 6 months ago
Mandiant's brute-forced X account exposes perils of skimping on 2FA
Speculation builds over whether a nearly year-old policy change was to blame Google-owned security house Mandiant's investigation into how its X account was taken over to push cryptocurrency scams concludes the "likely" cause was a successful brute-force password attack.…
The Register
3 years, 4 months ago
Suspected Russian NLBrute malware boss extradited to US
Dariy Pankov accused of infiltrating systems, selling tool and passwords to other miscreants A Russian national accused of developing the NLBrute brute-force hacking tool has made his first court appearance this week in Florida over accusations that he used the tool to spawn a criminal empire.…
The Register
3 years, 5 months ago
Hyundai and Kia issue software upgrades to thwart killer TikTok car theft hack
Gone in 60 seconds using a USB-A plug and brute force instead of a key Korean car-makers Hyundai and Kia will issue software updates to some of their models after a method of stealing them circulated on TikTok, leading to many thefts and even some deaths.…
The Register
4 years, 1 month ago
Australian digital driving licenses can be defaced in minutes
Brute force attack leaves the license wide open for undetectable alteration, but back end data remains unchanged An Australian digital driver's license (DDL) implementation that officials claimed is more secure than a physical license has been shown to easily defaced, but authorities insist the credential remains secure.…