Security researchers have found another publicly accessible Amazon S3 server that in this case hosted about 100MB of Verizon Wireless data that was allegedly operated by a Verizon employee.
Hackers breached the U.S. Securities and Exchange Commission's EDGAR document filing system and may have used nonpublic information stored on the database to profit from insider trading, the regulatory body disclosed on Wednesday.
The hackers, who exploited a vulnerability in Apache Struts, reportedly accessed the Equifax network by obtaining a user name after typing the "Whoami" command on one of the company's servers.
Equifax continues to catch flak over its failure to quickly and completely patch the Apache Struts vulnerability that led to not one but two breaches and now for redirecting consumers affected by the latest breach to a bogus site.
A mishandling of Viacom's master AWS key has left the credentials of hundreds of digital properties including Comedy Central, Paramount, MTV and other entertainment companies exposed.
