Adrian Johnson
TLDR:
- Construction sector targeted by brute-force attacks on Foundation accounting software
- Weak passwords and default credentials increase risk of compromise
Organizations in the HVAC, plumbing, concrete, and other sub-industries of the construction sector have been targeted through brute-force attacks against internet-exposed instances of the Foundation accounting software. Researchers found almost 35,000 brute-force attempts conducted by threat actors against a single host’s Microsoft SQL Server, with 33 of the almost 500 hosts using default credentials. Huntress has warned entities of the risk and advised on precautionary measures.
Key Points:
According to The Record, a news site by cybersecurity firm Recorded Future, organizations in the construction sector have been targeted by brute-force attacks on the Foundation accounting software.
Researchers from Huntress found almost 35,000 brute-force attempts against a single host’s Microsoft SQL Server, with 33 hosts using default credentials, increasing the risk of compromise in these organizations.
Huntress has issued warnings and precautionary measures to entities using the Foundation software to prevent further intrusions and data breaches.
Weak passwords and default credentials in the implementations of the software have made these organizations more vulnerable to cyberattacks.
Related Topics:
Other related topics in cybersecurity discussed in the article include vulnerable API attacks, ransomware prevention strategies, cloud security threats, and key trends in application security.
These topics highlight the importance of cybersecurity measures in protecting organizations from various cyber threats and attacks.
