LastPass Hack Update: user vault data and information stolen
Password management service LastPass announced today that the disclosed password breach of August 2022 was more serious than it thought initially.
Security - Latest Posts
-
-
It looks like Microsoft Excel has a new Macro-like vulnerability
Microsoft started blocking certain macros in Word, Excel, and PowerPoint back in July, in an attempt to protect against cyberattacks targeting users across the
-
Create encrypted messages, images, files as HTML with Portable Secret
Portable Secret is an open source tool that is designed to encrypt messages, images or files and save them as HTML files.
-
NVIDIA releases security update for out-of-support graphics cards
NVIDIA released a display driver security update for some of its graphics cards that it no longer supports with regular driver updates.
-
Some Android app APIs have been putting users at risk
Rather worryingly, an analysis of 600 Android apps, which are available on the Google Play Store has found that around 50% of all the apps examined were leaking
-
Microsoft Authenticator for watchOS is being discontinued
The Microsoft Authenticator app for watchOS is being discontinued.
-
Tricking antivirus solutions into deleting the wrong files on Windows
Security research Or Yair discovered a method to trick antivirus and endpoint security solutions into deleting legitimate files on Windows systems.
-
Bitwarden's passwordless authentication method lets you log into your web vault using the mobile app
Bitwarden has introduced a passwordless authentication method.
-
Dropbox acquires cloud encryption service Boxcryptor
The founders of the cloud encryption service BoxCryptor announced this week that Dropbox has acquired the company's intellectual product.
-
LastPass suffers another data breach, says customer data was stolen
LastPass has been breached for a second time this year.
-
Massive Fake Website Campaign Spreading Malware detected
Security researchers have detected a big malware campaign that is using fake websites to impersonate popular products and brands to spread malware.
-
Microsoft adds RSS feed support to its Security Update Guide service
Microsoft's Security Update Guide site is a core service when it comes to information about security information and updates that Microsoft releases.
-
Mullvad: Android may leak information when connected to a VPN
Secure and private VPN provider Mullvad discovered that Android devices may leak information when connected to VPN services, which can't be prevented.
-
OneDrive DLL Sideloading vulnerability exploited in the wild
Security services provider BitDefender published information about a DLL sideloading vulnerability of OneDrive that is exploited in the wild.
-
Maigret: create user dossiers based on username searches on thousands of sites
Maigret is an open source cross-platform tool to create profiles on users using just username searches.
-
LastPass provides details on August 2022 hack
LastPass informed customers about a security breach on the company's official blog in August 2022.
-
Microsoft Teams is storing authentication tokens in cleartext
A security vulnerability has been discovered in Microsoft Teams.
-
Bitwarden password manager adds Fastmail email forwarding support
Bitwarden is a popular choice when it comes to password managers.
-
HP Support Assistant has a DLL Hijacking Vulnerability
HP Support Assistant is a software program that is included on HP computers and notebooks.
-
Windows Defender notifications about Win32/Hive.ZY virus were false positives
Many users have reported that Windows Defender had notified them about a Win32/Hive.
-
LastPass discloses August 2022 security breach
LastPass, maker of the popular password management solution, disclosed a security breach on the company blog.
-
Plex warns users to change their passwords after a data breach
The streaming media platform, Plex, has revealed that it has been impacted by a data breach.
-
Security vulnerabilities found in Intel and AMD processors
Security researchers have discovered vulnerabilities in Intel and AMD processors that may lead to information disclosure.
-
Your next Phishing email may come straight from PayPal
Malicious actors have started to exploit a loophole in the defenses of many home users, organizations, email and security services, to send out phishing emails
-
Another phishing attack that bypasses multi-factor authentication targets Microsoft email users
Cybersecurity research analysts at Zscaler have uncovered a new large-scale phishing campaign targeting Microsoft email users.
-
Nvidia releases security update for unsupported Windows 7 and 8.1 systems
Nvidia ended support for Microsoft's Windows 7 and 8.
-
LibreOffice security update fixes macro execution bypass and potential password leaking
The developers of LibreOffice have released updates for the open source Office suite to patch three security issues.
-
Mullvad VPN codes are now available on Amazon
Swedish VPN provider Mullvad has expanded the accepted payment methods to include Mullvad VPN codes bought on Amazon to the list.
-
RememBear password manager is shutting down in July 2023
RememBear is shutting down in July 2023.
-
OpenDocument text files (.odt) malware campaign discovered
Security researchers at HP Wolf Security managed to isolate a malware campaign that used OpenDocument text files for distribution.
-
Office Phishing Attack circumvents multi-factor authentication
Microsoft security researchers and engineers discovered a massive phishing attack that has been targeting more than 10,000 organizations since September 2021.
-
Patches for new Retbleed AMD and Intel microprocessor vulnerability may have significant overhead
Certain microprocessors from Intel and AMD are vulnerable to a new speculative execution attack related to Spectre Variant 2.
-
Bitwarden to add support for passwordless login to vault, autofill for other desktop apps
The Bitwarden roadmap for 2022 has been updated, the company plans to implement some interesting features in its password manager.
-
New Windows Phishing Method gives attackers access to cookies and more
The rise of two-factor authentication added a new layer of security to the authentication process on the Internet.
-
Report: Adobe Reader is blocking antivirus tools from scanning loaded PDF documents
Adobe is blocking several antivirus tools actively from scanning PDF documents loaded by its Adobe Acrobat Reader application, according to a security report pu
-
Mullvad VPN drops option to create new recurring payments
Swedish VPN service Mullvad announced that it will no longer accept new recurring payments using PayPal or credit card payments.
-
NordVPN Meshnet: virtual LAN, file sharing and Internet traffic routing
NordVPN launched Meshnet today, a new option baked into the company's NordVPN application.
-
Rapid7 research reveals which data ransomware groups seek and use for leverage
When it comes to ransomware attacks, some data is more precious to ransomware groups as others.
-
Microsoft Defender for Android, Apple iOS and macOS, and Windows now available
Microsoft Defender, the default security application on Windows, is now available as a standalone solution for the mobile operating systems Android and iOS, for
-
Intel Firmware updates for Memory Mapped I/O security vulnerabilities
Intel released new firmware updates to address Memory Mapped I/O security vulnerabilities.
