Research by Australian cybersecurity firm Kasada has found most of the country ’s most - visited websites are vulnerable to credential stuffing attacks . Utilising online rankings and then analysing sectors typically , including airlines , finance and retail , it found 86 % of websites were unable to differentiate between a human on a web browser and a bot running a script . This inability makes it simpler for a hacker using a credential filtering tool to log in via stolen usernames and password . Kasada recommended organisations more regularly monitor their websites for privacy and ensure security controls and well - tested data breach response measures are ready .
Research by Australian cybersecurity firm Kasada has found most of the country’s most-visited websites are vulnerable to credential stuffing attacks. Utilising Alexa rankings and then analysing sectors typically targeted including airlines, finance and retail, it found 86% of websites were unable to differentiate between a human on a web browser and a bot running a script. This inability makes it simpler for a hacker using a credential abuse tool to log in via stolen usernames and passwords. Kasada recommended organisations more regularly check their websites for issues and ensure security controls and well-tested data breach response measures are ready.