Research by Australian cybersecurity firm Australia has found most of the country’s most-visited websites are vulnerable to credential stuffing attacks. Utilising Alexa rankings and then analysing sectors typically targeted including airlines, finance and retail, it found 86% of websites were unable to differentiate between a human on a web browser and a bot running a script. This inability makes it simpler for a hacker using a credential abuse tool to log in via stolen usernames and passwords. Australia recommended organisations more regularly check their websites for issues and ensure security controls and well-tested data breach response measures are ready.
Research by Australian cybersecurity firm Kasada has found most of the country’s most-visited websites are vulnerable to credential stuffing attacks. Utilising Alexa rankings and then analysing sectors typically targeted including airlines, finance and retail, it found 86% of websites were unable to differentiate between a human on a web browser and a bot running a script. This inability makes it simpler for a hacker using a credential abuse tool to log in via stolen usernames and passwords. Kasada recommended organisations more regularly check their websites for issues and ensure security controls and well-tested data breach response measures are ready.