News | Hold Security

Mega Breaches Highlight Password Re-use Problems

Recent releases of data from old breaches of the major social media companies like LinkedIn and MySpace should not be as harmful if not for a rampant re-use of the passwords. Alex Holden comments to The Wall Street Journal on recent revelations based on supposed Twitter data.

Jun 29 2016

Inside Hold Security - NBC - TMJ4 Interview

NBC affiliate - Milwaukee’s TMJ4 takes an inside view of Hold Security’s Threat Intelligence operation. From identity theft to complex APTs, this behind the scenes look gives a glimpse into our day-to-day operations. In many cases we get the most valuable intelligence without using special tools and technologies but by using our communication skills and human intelligence. Watch the Video.

Jun 2 2016

Hold Security Recovers 272 Million Stolen Credentials From A Collector

Reuters story highlights more details about our discovery. The business of recovering stolen credentials is not as simple as it would seem. We have set records before, initially with the Adobe user database including 153 million records, then with 360 million recovered in February 2014, and finally with 1.2 billion credentials in the most substantial breach known to-date. Today, large amounts of stolen credentials may not grab headlines, but they never lose their potency, especially when they are recovered by the good guys and returned to the rightful owners.

May 4 2016

Hackers breach thousands of websites installing web shells

On a daily basis hackers use known security weaknesses to do bulk exploitation of thousands of websites. Usually, we see anywhere between one and three thousand sites breached every day. Once exploited, they install a backdoor (web shell) allowing them to take control of the site.

Feb 26 2016