A record 10 billion passwords were just posted to a popular hacking forum
Hackers can do a lot of damage with this database
Apple set to launch Passwords app, taking on LastPass and 1Password
Powered by iCloud Keychain
Google says passkeys are now used by over 400 million accounts, and over a billion sign-ins
Passkeys are more popular and feature-rich than ever
Nvidia RTX 4090 can crack complex 8-character passwords in minutes
The Nvidia A100 can do it even faster
UK becomes first country to outlaw easily guessable default passwords on connected devices
Companies that ignore the law face a $12.5 million fine
Vision Pro users are angry the device has no reset or recovery measures for password loss
A day-one password bug locks users out of the headset, and a trip to the store is the only remedy
Mercedes-Benz accidentally shared its source code and business secrets with the whole world
A perplexing human error put the German carmaker's IT security at risk
23andMe confirms last year's massive data breach went unnoticed for five months, hackers stole raw genotype data
The company previously blamed customers for reusing passwords
Russian hackers accessed Microsoft's corporate network for a month
Poor secure configuration exposed the software and AI giant to information exfiltration
Facepalm: Even though they can now choose from a remarkably long list of attacks against corporate networks, cybercriminals often resort to "simpler" methods like brute-force password guessing. No one is safe from insecure email accounts, after all.
Massive data dump containing millions of passwords sparks security alert: Is your data safe?
The dataset contains 71 million credentials and 25 million never-before-seen passwords
Tech manufacturers must eliminate default passwords, says cyberdefense agency CISA
Cybersecurity best practices can't rely on decisions by single users or organizations
Utah Supreme Court says suspects can refuse to hand over phone passwords to the police
Other state Supreme Courts disagree and the case would wind up before the US Supreme Court
This AI can pick up passwords from the sound of your keystrokes
Your keyboard clatter could be giving away secrets
Your favorite password manager could be exposing your credentials
AutoSpill is a security nightmare that affects even up-to-date Android devices
The worst passwords of 2023 are also the most common, "123456" comes in first
Last year's most common password: "password" falls to 7th place
1Password now supports passkeys on desktop browsers and iOS
1Password will now allow users to register and sign in with passkeys in your desktop browser and on iOS 17. Use passkeys to sign in to compatible websites, including Amazon, Google, Microsoft and more.
Windows 11 preview adds biometric logins for apps and websites
Windows 11 enables FIDO passkeys for passwordless authentication
Netflix will start charging US customers for sharing account passwords
The crackdown has arrived
A hot potato: The time that many of us have been dreading is here: the days of being able to share your Netflix password with friends and family freely are over. The streaming giant is informing customers in the US that they will either have to stop others from using their account or pay $7.99 per month for an additional membership for someone outside the main household.
Google adds support for passkeys to protect your account
A better way to secure your Google account
Proton Mail's new product is a secure password manager
Let's hope the service doesn't turn into another LastPass-style security disaster
Bitwarden's password manager browser extension has a known exploit it hasn't addressed in five years (Update: fix coming)
PSA: Hackers can steal your username and password for a website using an embedded iframe. It's a weakness for all password managers, and most have addressed the flaw in various ways, including issuing warnings when users are on a login page with an iframe or not trusting subdomains. Bitwarden is the sole exception, having determined in 2018 that the threat was not significant enough to address.
LastPass says employee's home computer was hacked to steal a decrypted vault
Reportedly via Plex
In brief: Password manager LastPass has revealed details of a breach last year that resulted in partially encrypted user login data being stolen. The company confirmed that the incident stemmed from a previous hack in August that enabled the hacker to steal credentials from a DevOps engineer's home computer and obtain a decrypted vault.
Two-Factor Authentication: Methods and Myths
When I mentioned to a few friends that I was writing a feature about two-step authentication, the typical response was an eye-roll and "Oh, that annoying thing?..." But wait. There's more to it.
How to Find Your Wi-Fi Passwords in Windows
Need to give someone your Wi-Fi password but can't find the key on the router? Use your Windows PC and our handy guide to uncover the hidden treasure.
