Lumension® Endpoint Intelligence Center

Intelligence Center » News Archive » Brute-forcing URL shorteners can expose sensitive corporate information

Brute-forcing URL shorteners can expose sensitive corporate information

2015/09/23

Softpedia - (International) Security researchers and social engineers discovered that brute-force attacks could be used to uncover active short links by services running Bit.ly Uniform Resource Locator (URL) shorteners, potentially accessing sensitive or private documents passed through a company's shortener, and that attackers could bypass rate limits with the use of proxies.

Source: http://news.softpedia.com/news/brute-forcing-url-shorteners-can-expose-sensitive-corporate-information-492442.shtml

Note: This news synopsis is taken from the DHS Daily Open Source Infrastructure Report, a daily [Monday through Friday, except US Federal holidays] summary of open-source published information concerning significant critical infrastructure issues; a 10-day archive of the DOSIR can be found at: http://www.dhs.gov/dhs-daily-open-source-infrastructure-report.


Last Updated: 27 May 2016 10:25:19