Corrupted Microsoft Office Documents Used In Phishing Campaign

US Senators Propose Law To Require Bare Minimum Security Standards

Put Your Username And Passwords In Your Will, Advises Japan's Government

Will Passkeys Ever Replace Passwords? Can They?

Google Cloud Rolling Out Mandatory MFA for All Users

Thousands Of Hacked TP-Link Routers Used In Yearslong Account Takeovers

Why The Long Name? Okta Discloses Auth Bypass Bug Affecting 52-Character Usernames

EmeraldWhale Steals 15,000 Credentials From Exposed Git Configurations

Colorado Scrambles To Change Voting System Passwords

Windows Themes 0-Day Bug Exposes Users To NTLM Credential Theft

Russian Spies Use RDP Files In Unusual Mass Phishing Drive

AWS Cloud Development Kit Flaw Exposed Accounts To Full Takeover

Millions At Risk From Hardcoded Creds In Popular iOS And Android Apps

Detective Charged With Purchasing Stolen Credentials

Internet Archive Exposed Again – This Time Through Zendesk

The Crusade To Replace Passwords With Passkeys Just Intensified

Internet Archive Leaks User Info And Succumbs To DDoS

Okta Classic Customers Told To Check Logs For Sign-On Bypass

EU Privacy Regulator Fines Meta 91 Million Euros Over Password Storage

Ransomware Gang Using Stolen MS Entra ID Creds To Bust Into Cloud

NIST Proposes Barring Some Of The Most Nonsensical Password Rules

COLDRIVER Crooks Take Pro Democracy NGOs For A Phishy Ride

Infineon's Cryptographic Library Suffers From An ECDSA Private Key Recovery Vulnerability

Intel Claps Back At Report Of SGX Key Theft

Hackers Infect ISPs With Malware That Steals Customer Credentials

SolarWinds Leaks Credentials In Hotfix

Hackers Leak Their Own Operations Through Exposed Telegram Bot API Tokens

FlightAware Admits Passwords, SSNs Exposed For Years

Russian Sells Almost 3,000 Logins, Gets 40 Months In Jail

Are Your GitHub Artifacts Leaking Tokens?

Russia Launching More Sophisticated Phishing Attacks, New Report Finds

Millions Of Websites Susceptible To XSS Attack Via OAuth Implementation Flaw

Vulnerability In Cisco Smart Software Manager Lets Attacker Change Any User Password

Hacker Stole Secrets From OpenAI

Crypto Hacking Thefts Double To 1.4 Billion In First Half Of 2024

Amtrak Confirms Crooks Are Breaking Into User Accounts, Derailing Email Addresses

Prevalence And Impact Of Password Exposure Vulns In ICS/OT

Why Passwords Still Matter In The Age Of AI

TikTok Hackers Target Paris Hilton, CNN, And Other High Profile Users

Secrets Exposed In Hugging Face Attack

Okta Says Customer Identity Cloud Prone To Credential Stuffing Attacks

Researchers Crack 11-Year-Old Password, Recover $3 Million In Bitcoin

BreachForums Returns Just Weeks After FBI-Led Takedown

400,000 Linux Servers Hit By Ebury Botnet

AWS CloudQuarry: Digging For Secrets In Public AMIs

Microsoft, Google Do A Victory Lap Around Passkeys

UK Outlaws Awful Default Passwords On Connected Devices

Okta Warns Of Credential Stuffing Attacks Using Tor, Residential Proxies

Scammers Offer Cash To Phone Carrier Staff To Swap SIM Cards

Attackers Are Pummeling Networks Around The World With Millions Of Login Attempts

Roku Makes 2FA Mandatory For All After Nearly 600k Accounts Pwned

More Legal Acrimony For Truth Social, As Executive Says He Was Hacked

WordPress LayerSlide Plugin Bug Risks Password Hash Extraction

Vulnerability Allowed One-Click Takeover Of AWS Service Accounts

RedLine Malware Top Credential Stealer Of Last 6 Months

ChatGPT Credentials Snagged By Infostealers On 225k Infected Devices

Meta Patches Facebook Account Takeover Vulnerability

Ex-Employee's Admin Credentials Used In US Gov Agency hack

Hackers Got Nearly 7 Million People's Data From 23andMe

Cybercriminals Are Stealing Face ID Scans To Break Into Bank Accounts