Monster and Website Passwords issues further explained by Sophos

Graham Cluley, a Security Expert and blogger from Sophos got in contact after reading my recent posts on the latest Monster jobsite breach and the problem website passwords.

Graham had also highlighted the same issues with website passwords on his blog, and has put together nice little video explaining the issue, which he has kindly allowed me share below.


What the Monster.com security breach teaches us about passwords from Sophos Labs on Vimeo.

Share this article

LinkedIn X Facebook Email

Comments

Anonymous said…
Glad you find the video helpful!

Anytime you (or indeed anyone else) wants to embed one of our videos that's absolutely fine.

They're designed to educate people on the threats (hopefully with some humour) rather than be a cheesy sales pitch, and hopefully they succeed at that.
11:02 am, January 30, 2009
writingbee said…
Great post! Thanks a lot for it.
11:23 am, March 06, 2012
Anonymous said…
Hello, I do think your website might be having internet browser compatibility problems.
Whenn I look at your website in Safari, iit looks fine however when opening iin Internet Explorer, it's got some
overlapping issues. I simply wanted tto
provide youu with a quick heads up! Apart from that, wonderful blog!


Feel free to surf to my weblog :: video games are fun
10:32 pm, June 19, 2014
Post a Comment

Popular posts from this blog

UK Cybersecurity Weekly News Roundup - 31 March 2025

UK Cybersecurity Weekly News Roundup - 31 March 2025 Welcome to this week's edition of our cybersecurity news roundup, bringing you the latest developments and insights from the UK and beyond. UK Warned of Inadequate Readiness Against State-Backed Cyberattacks Cybersecurity experts have sounded the alarm over the UK's growing vulnerability to state-sponsored cyber threats. A recent report by the National Cyber Security Centre (NCSC) shows a 16% increase in severe cyber incidents affecting national infrastructure in 2024. A worrying 64% of public sector IT leaders said they are unsure about best practices, with legacy systems worsening the risk. As digital transformation accelerates, public infrastructure like energy and healthcare face increasing exposure to ransomware and espionage. Read more NCSC Publishes Roadmap for Post-Quantum Cryptography Migration The NCSC has published official guidance on migrating to post-quantum cryptography (PQC) to protect against futur...
Read more

Payment Security: Understanding the Four Corner Model

Image
Introduction Online shopping digital payment transactions may seem quite simple, but in reality, just one single transaction sets off multiple, long-chain reactions. The Payment Card Industry comprises debit cards, credit cards, prepaid, e-purse/e-wallet, and POS payment transactions that enable easy payment transactions for consumers. However, the card scheme is a popular payment transaction process which is also a central payment network that uses credit and debit cards to process payments.  The card scheme comes in two variants namely the Three-Party Scheme and the Four Party Scheme payment model. The Four Corner Model also popularly known as Four-Party Scheme is the model under which most of the payment systems in the world operate. It is used in almost all standard card payment systems around the globe. So, explaining in detail the payment model, we have shared details on how the Four Corner Model works while also explain the role of every entity involved in it The Payment Ne...
Read more

UK Cybersecurity Weekly News Roundup - 23 March 2025

Welcome to this week's edition of our cybersecurity news roundup, bringing you the latest developments and insights from the UK and beyond. NHS Scotland Confirms Cyberattack Disruption On 20 March 2025, NHS Scotland reported a major cyber incident that caused network outages across multiple health boards. The cyberattack disrupted clinical systems and led to delayed patient care, with staff reverting to paper-based processes. The incident has been linked to a suspected ransomware group, although official attribution is still pending. Investigations are ongoing with support from the National Cyber Security Centre (NCSC). Further coverage from The Register confirmed that some systems were taken offline to prevent further spread, while emergency care remained operational. The affected regions included NHS Dumfries and Galloway, which issued a statement urging patients to only attend if absolutely necessary. ( Read more on The Register ) NCSC Weekly Threat Report – 22 March 202...
Read more