COMODO - Cyber Security Solution has been Hacked

COMODO - Global Leader in Cyber Security Solution

1. The biggest company providing Cyber Security Solution to all the big business companies with a tag line:
"Breach Proof Your Business with Our Zero Trust Platform",
suffer from Security flaws.

2. A hacker gains access into the internal files and documents which belong to COMODO security company with the help of email address and password mistakenly exposed in public GITHUB repository of software owned by comodo software developer.

3. The hacker with that email and password logged In into Microsoft-hosted cloud services which were not protected by two-factor authentication.

4. Jelle Ursem is a security researcher found this leak in COMODO Security Company informed the vice president Raaswi Das through WhatsApp.

5. Use told TechCrunch that the account allowed him to access internal Comodo files and documents, including sales documents and spreadsheets in the company’s OneDrive — and the company’s organization graph on SharePoint, allowing him to see the team’s biographies, contact information (including phone numbers and email addresses), photos, customer documents, calendars and more..

6.“Seeing as they’re a security company and give out SSL certificates, you’d think that the security of their own environment would come first above all else,” said Ursem.

7.“This account has already been hacked by somebody else, who has been sending out spam,” he told TechCrunch. He shared a screenshot of a spam email sent out, purporting to offer tax refunds from the French finance ministry.

To Read the complete article: Click Here