Over 3.6 million MySQL servers found exposed on the Internet

By Bill Toulas, Bleeping Computer

​Over 3.6 million MySQL servers are publicly exposed on the Internet and responding to queries, making them an attractive target to hackers and extortionists.

Of these accessible MySQL servers, 2.3 million are connected over IPv4, with 1.3 million devices over IPv6.

While it is common for web services and applications to connect to remote databases, these instances should be locked down so only authorized devices can connect to them.

Furthermore, public server exposure should always be accompanied by strict user policies, changing the default access port (3306), enabling binary logging, monitoring all queries closely, and enforcing encryption.


Comments

Post a Comment

Popular posts from this blog

Ukraine targeted by DDoS attacks from compromised WordPress sites

Image
By Bill Toulas, Bleeping Computer Ukraine's computer emergency response team (CERT-UA) has published an announcement warning of ongoing DDoS (distributed denial of service) attacks targeting pro-Ukraine sites and the government web portal. The threat actors, who at this time remain unknown, are compromising WordPress sites and injecting malicious JavaScript code to perform the attacks. These scripts are placed in the HTML structure of the main files of the website and are base64-encoded to evade detection. The code runs on the website visitor's computer and directs their available computational resources to generate an abnormal number of requests to attack objects (URLs) defined in the code. The result is that some of the target websites are overwhelmed by the requests and, as a result, rendered inaccessible to their regular visitors. This all happens without the owners or the visitors of the compromised sites ever realizing it, except for maybe some barely noticeable performan...
Read more

How to Downgrade From Windows 11 to Windows 10

Image
Not a fan of Microsoft's newest operating system? You can go back to Windows 10, but you only have a certain number of days to revert your OS. By Lance Whitney, PC Mag You’ve upgraded from Windows 10 to Windows 11 and now realize you’re not that crazy about Microsoft's newest operating system. Maybe you don’t like the new Start menu or taskbar. Perhaps you miss certain built-in apps or features. Or maybe you just miss the familiarity of Windows 10. Whatever the reason, you can jump back to the older OS. Microsoft gives you 10 days to revert from Windows 11 to 10. However, there is a way to extend that deadline. Here's how to return to the comfort of Windows 10. Downgrade Within 10 Days Let’s say you upgraded to Windows 11 fewer than 10 days ago and want to go back to Windows 10. That’s easy enough. Go to Settings > System > Recovery . In the Recovery options section, you should see Go back: If this version isn't working, try going back to Windows 10 . Before you m...
Read more

Thwarting attacks from the charging socket: Team explores protecting mobile device touchscreens from 'ghost touch'

By Silke Paradowski,  TechXplore Touch screens on mobile devices can be attacked and manipulated via charging cables and power supply units. This is what researchers at the System Security Lab at TU Darmstadt have discovered together with a Chinese research team. Several smartphones and standalone touchscreen panels could be compromised in practical tests by simulated touches, the "ghost touches." The results were presented at this year's IEEE Symposium on Security and Privacy. The researchers from TU Darmstadt and Zhejiang University in Hangzhou carried out attacks on capacitive touchscreens via charging cables and power adapters, revealing a new way to attack mobile devices. Similar to their previous research project, "GhostTouch," the researchers were able to create false touches, called "Ghost Touches," on multiple touchscreens and manipulate the device via them. The international research team had to overcome two main challenges. The first was to ...
Read more