Study Publisher: Trustwave
Study Date: February 9 2012
Study URL: https://www.trustwave.com/Resources/Library/Documents/2012-Trustwave-Global-Security-Report/?dl=1

Study Overview:
"The Trustwave 2012 Global Security Report is founded on data from real-world investigations and research performed by Trustwave SpiderLabs in 2011. Data from more than 2 million network and application vulnerability scans. Usage and weakness trends of more than 2 million (2,521,248) real world passwords used within corporate information systems. Standardized tools were used to record data and other relevant details for each case or test."

Statistics From This Study:

• Common keywords found in cracked corporate passwords (2012)
• How often servers and network devices have default credentials
• Once an intrusion is successful this is how hackers spread their control
• Typical lengths of corporate user passwords (2012)
• User passwords found around workstations during physical security reviews
• What are the common characters used in corporate passwords? (2012)