Industry News: ESG5

The Target: Twitter, a U.S based social media platform.

The Take: Exposure of 235 Million records of Personally Identifiable Information including: email addresses, usernames, and phone numbers.

The Vector: A zero-day exploit was used which allowed the attacker to scrape Twitter user profiles for the stolen information. This vulnerability circumvented Twitter’s privacy option which should prevent searching am account by it’s associated phone number/email.

This breach is critical reminder that zero-day exploits do happen, and furthermore that patching software in a timely, effective manner is a key component of ensuring customer data is protected.

Read more...