逾500万名大企业员工电邮和密码泄露.docx

逾500万名大企业员工电邮和密码泄露Personal details of 5.5m employees from the worlds1,000 biggest public companies have beendiscovered online by a British cyber security firm that searched through data compromised byrecent breaches of popular websites.英国一家网络安全公司对近期几个高人气网站泄露的数据实施了搜索，从而在网上发现了全球1000家最大公开上市公司550万名员工的个人细节信息。Digital Shadows found details including corporate email addresses and passwords from 97 percent of the 1,000 companies. It did not name the individual companies concerned.这家名为Digital Shadows的公司发现的细节信息，包括来自这1000家企业的97%的员工的企业电子邮件地址及密码。该公司并未点明涉事企业的名称。The UK firm trawled through data leaked from popular services such as LinkedIn, Dropbox andMySpace, looking for users who had signed up using their work email accounts. Many of themhad reused their work passwords.这家英国公司查询了领英(LinkedIn)、Dropbox和MySpace等高人气服务网站泄露的数据，寻找那些曾用其工作电邮账号注册的用户。他们中许多人重复使用了他们在工作场合使用的密码。Nearly 300,000 peoples details had been stolen from dating websites, including Ashley Madisonand Adult Friend Finder;Ashley Madison alone yielded corporate emails and passwords of morethan 200,000 people working for big companies.近30万人的细节信息从Ashley Madison和Adult Friend Finder等约会网站被盗。其中，仅Ashley Madison网站就泄露了为大企业工作的逾20万人的公司电邮和密码信息。The cost of a single data breach can be enormous an IBM study found that the averagetotal cost to a company is $4m. High-profile victim TalkTalk lost 101,000 customers, spent60m and faced a parliamentary inquiry. Last year, data breaches cost British businessesabout 34bn.仅仅一次数据泄露就可能造成巨大损失。IBM开展的一项研究发现，数据泄露为每家企业带来的平均总损失是400万美元。备受关注的数据泄露受害者TalkTalk损失了10.1万名客户，花费了6000万英镑，还面临议会的调查。去年，数据泄露为英国企业带来的损失约为340亿英镑。Much of the data uncovered by Digital Shadows had not been previously leaked 90 percent of the 5.5m usernames and passwords were newly available online.Digital Shadows发现的数据大部分此前未曾披露过：550万用户名和密码中90%都是新出现在网上。“We were analysing leaks going back to 2012, so I thought we would see a lot of duplicates, butonly 10 per cent of credentials had been in previous leaks,” said Rick Holland, vice-president forstrategy at Digital Shadows. “Whenever a breach becomes public, the first thing our clientsask is: Are these details new or repackaged? So this is bad news.”Digital Shadows战略部门副总裁里克霍兰(Rick Holland)表示：“我们正在分析远至2012年的泄露数据，因此我以为我们会看到许多重复的数据，然而只有10%的凭据信息在此前的数据泄露中出现过。每当一批泄露数据公开时，我们的客户问的第一件事就是：这些细节信息是新的，还是旧信息的重新打包？因此，这是个坏消息。”Studies have found that more than 60 per cent of people reuse passwords and compromisedcredentials can also be used for phishing attacks and extortion attempts.研究发现，逾60%的人会重复使用密码。而且，被泄露的凭据信息也可能被用于钓鱼式攻击(phishingattack)和敲诈企图。Combining stolen information can allow cyber criminals to piece together comprehensive useridentities, cyber security experts said.网络安全专家表示，将被窃取的信息结合起来，令网络犯罪者能够拼凑出完整的用户身份信息。Cyber security consultants advise companies to require employees to change passwords everyeight weeks and use additional security, such as requiring authentication through a mobilephone, for new sign ons. “Rolling out multi-factor authentication is really important to minimisethat risk,” Mr Holland said.网络安全咨询师建议各企业要求员工每八周更新一次密码，并使用额外的安全手段，比如新登录时要求通过手机认证。霍兰表示：“实施多种类型的认证对于降低这种风险特别重要。”Donald Trump has upset Sir Cameron Mackintosh and co-creators of the stage musical LesMisrables for playing one of their songs at his Miami rally.唐纳德特朗普在迈阿密的竞选集会上播放了音乐剧悲惨世界中的一首插曲，引起了制作者卡麦隆麦金托什和其它音乐剧主创的不满。Mackintosh, a leading British theatre impresario, is to make his objection felt in a jointstatement with Alain Boublil, the musicals librettist and others who own the copyright.麦金托什是英国著名戏剧经理人，他将同剧作者阿兰布比尔等其它版权人一起发布联合声明提出抗议。A copy released to the Guardian said: “The authors of Les Misrables were not asked forpermission and did not authorise or endorse usage of Do You Hear the People Sing? at lastweeks Trump rally in Miami, and have never done so for any of the songs from the musical forthis or any other political event.”刊登在卫报上的声明写道：“悲惨世界的作者们没有收到许可申请，也没有授权或允许特朗普在上周迈阿密集会上使用Do You Hear the People Sing?，歌剧中的任何一首歌曲从未被允许在这次或任何其他的政治活动中使用。”Les Misrables has broken box office records worldwide, seen by more than 70 million people in44 countries. It is a story of “broken dreams and unrequited love, passion, sacrifice andredemption”, with songs that include I Dreamed A Dream. In Miami, the Republican presidentialnominee took the stage as Do You Hear the People Sing? blasted through the loudspeakers.悲惨世界已在44个国家演出，观看人次达七千多万，打破了全球票房纪录。它讲述了一个关于“破碎的梦和暗恋、热烈的情欲、牺牲和救赎”的故事。I Dreamed A Dream也是歌曲之一。在迈阿密，集会上的扩音喇叭高声唱着Do You Hear the People Sing?，共和党总统候选人在一片音乐声中登台亮相。Mackintoshs statement said: “As the musicals popularity and universal message have beenpart of international popular culture for more than 30 years now, countless political and socialmovements around the world, including the first Bill Clinton and Obama campaigns, haveindependently embraced songs from the musical as a rallying cry for their own cause.”麦金托什的声明中说道：“因悲惨世界的知名度和辨识度，这部歌剧在30多年来已成为国际流行文化的组成部分。全球无数政治和社会运动，包括比尔克林顿和奥巴马的首次竞选活动，都各自使用了音乐剧中的歌曲作为个人竞选的战斗口号。”Trump has upset musicians before. In May, he faced demands by the Rolling Stones to stopplaying their music at his campaign events. Earlier, he faced criticism from Neil Young for usinghis Rockin in the Free World. Whether Mackintosh takes legal action remains to be seen.特朗普的侵权行为早有先例。五月份，滚石乐队曾向特朗普提出停止在竞选活动中播放其音乐的要求。更早时候，尼尔杨批评特朗普使用了他的歌曲Rockin in the Free World。麦金托什是否就此采取法律行动仍有待观察。The intellectual property lawyer Mark Stephens of Howard Kennedy, said politicians weresupposed to clear the use of songs. Sometimes permission was obtained without disclosing itwas for a political purpose and there could be a question about whether Trumps campaignsaid it would be used at a rally.霍华德肯尼迪律师事务所的著作权律师马克斯蒂芬森表示，政客们应该澄清对歌曲的使用情况。他补充说，有时出于政治目的会对获得的使用权进行保密，但特朗普的竞选团队有无说明歌曲将在集会上使用还有疑问。Asked whether Mackintosh could potentially have a legal case against Trump, he said: “Assuming that there wasnt a fully disclosed, informed consent given, then he can sue forinfringement of copyright.”当被问道麦金托什是否可能起诉特朗普时，斯蒂芬森说：“假如歌曲使用没有经过完全公开、知情的同意，他可以因著作权受到侵犯而起诉。”The Trump campaign did not respond to a request for comment.特朗普的竞选团队未对评论请求作出回应。Trump is among numerous politi