Hackers are gaining access to more online accounts than they were previously due to people not using strong passwords, a report has found.
Despite multiple warnings regarding the weakness of many passwords, research from security firm Trustwave found that over half of passwords tested could be cracked in less than 24 hours.
Overall, the firm’s study, which examined 499,556 hashed passwords gathered during thousands of penetration tests performed throughout last year, found that 51 percent of those could be cracked within 24 hours and 88 percent within two weeks.
The company is recommending lengthier passwords, noting that the estimated time it takes to crack a ten-character password is 591 days.
These weak passwords were also a major factor towards many of last year’s security breaches, as hackers took advantage of poor controls to hack into company networks.
Trustwave’s report found that 28 percent of breaches investigated were as a result of weak passwords, and were a contributing factor, along with weak remote access security, in 94 percent of POS (point of sale) breaches.
The report follows several major security news stories in recent weeks, most notably the hack of password storing site Lastpass earlier this week.
The site, used by customers to securely store multiple passwords, confirmed that attackers had compromised its systems, with data stolen that could allow hackers to guess weak master passwords.
It is thought the attack was helped by attackers gaining access to low-cost cloud computing resources capable of performing powerful attacks on such security measures.
Are you a security pro? Try our quiz!
Thoma Bravo agrees to acquire Darktrace for $5.32 billion in cash, delivering some welcome news…
Customer adoption of AI services embedded in cloud services continues to deliver results for Microsoft,…
TikTok's 'secret source' algorithm is so core to ByteDance, it would rather shut down US…
After relocating from California to Texas in 2020, Oracle's Larry Ellison now reveals plan to…
Share price hit after Meta admits heavy AI spending plans, after posting strong first quarter…
For third time Google delays phase-out of third-party Chrome cookies after pushback from industry and…