Is your web app vulnerable? Here's how to solve the top 10 security issues
Developing or using web-based software requires critical consideration of web application security due to the increasing number of online threats. Therefore, it is more crucial than ever to ensure that web applications […]
Is your device at risk? North Korean group launches new attack with Remote Access Trojan
Infamous North-Korean threat group APT37 has upgraded its arsenal of attacks with a new Remote Access Trojan, that is attacking targets on Windows and mobile devices. The group, known for malicious attacks […]
Tor network experiencing massive ongoing DDoS attacks
In the past seven months, users of the Tor network may have experienced issues connecting to sites through the network. Issues may have included slow connections while connected to Tor, but also […]
A Closer Look at KeePass: Why Its Reputation as a Safe Password Manager is Being Questioned
With the recent security breaches involving LastPass and Norton Password Manager, it's understandable that people are wary about keeping their passwords in the cloud. That's why there's been a rise in the […]
Should You Use Google Password Manager?
I don't know about you, but when it comes to creating a password, I like for it to be strong, secure, and unique. For years I used the same password for everything […]
1Password plans to become the first password manager without passwords
Password manager 1Password plans to become the first major password management service that does not require passwords for unlocking user password databases. The company's answer to passwords is passkey, a technology that […]
Reddit discloses security breach: what you need to know
Reddit disclosed a security breach today on the site stating that a malicious actor managed to gain access to internal servers. The company became aware of a phishing campaign that targeted Reddit […]
KeePass 2.53.1 password manager resolves vulnerability controversy
KeePass 2.53.1 is a new update for the password manager that addresses a potential vulnerability in the application. Last week, word about a vulnerability in the password manager spread online. Reported by […]
Bitwarden's web vault suffers an outage; apps and extensions are safe and unaffected
Bitwarden's web vault suffered an outage today. The issue affected all users that use the web service, though the password manager service's apps and extensions were unaffected and are completely safe Bitwarden's […]
Protect Your Passwords Like Never Before with Dashlane's Mobile Apps Source Code Release
Dashlane Password Manager has released the source code of its iOS and Android apps. Interested users and developers may check the code that are now available on GitHub. Dashane Password open sources […]
Improve KeePass security with this simple configuration change
KeePass, like many other password managers, relies on a primary password that protects the entire database of passwords and information. If an attacker manages to obtain that single password, all other passwords […]
Bitwarden Password Manager will add support for Argon2 KDF soon
The LastPass data breach caused uproar amongst its users and the tech community, but there are several good things that happened in the aftermath of the incident. It actually taught users a […]
United States Senator demands TikTok app store ban
In a letter sent to the CEOs of Google and Apple, United States senator Michael Bennet, a member of the Senate Intelligence Committee, demanded that the companies ban the China-based TikTok application […]
LastPass Hack-Proof: How to Up Your Security Game Instantly
It has been a couple of months since LastPass suffered what is arguably the worst data breach to ever affect the password manager industry. The way the entire scenario was handled by […]
Bitwarden's Latest Update Takes Security to the Next Level
The recent security breach that affected LastPass has caused ripples across the industry. Norton Password Manager suffered a password stuffing attack, while Bitwarden users have been targeted by phishing ads. Many users […]
Key Firefox and Android updates you need to be aware of
The new year has brought with it a host of new software updates across a variety of different apps and programs. While many of these updates are routine, with some offering basic […]
Anker Confirms Eufy Cameras Not Fully Encrypted, Raising Concerns
Anker has finally admitted that its Eufy security cameras were not using end-to-end encryption to protect users' data. Here's what led to the confession. Security researchers discover flaws in Eufy cameras The […]
KeePass Password Manager Vulnerability: Is Your Data at Risk?
KeePass Password Safe is an open source local password manager for Windows. It is a well designed application that supports plugins and there are numerous forks available for other platforms. The Federal […]
The Hidden Threat: 1Password Password Manager Phishing Ads on Google
The popular 1Password service is the latest cloud-based password manager that is being targeted by scammers. Like the recently reported Bitwarden scam, new and existing users of 1Password are targeted through malicious […]
The Hidden Threat: Bitwarden Password Manager Targeted by Phishing Scams
Scammers are targeting users of cloud-based password managers, including Bitwarden, with phishing attacks. And the mode of attack was malicious ads. Users have reported that they have seen fake advertisements for Bitwarden […]
NortonLifeLock says some Norton Password Manager accounts were compromised
A month ago, LastPass suffered one of the biggest security breaches we have seen in the world of password managers. And now, NortonLifeLock has revealed that some of its user accounts have […]
Another password manager is moving beyond passwords
Passwords have been keeping us safe online for years but, according to tech industry big wigs, they are not safe enough. For a while now a group calling themselves the FIDO Alliance, […]
It looks like even Ransomware gangs have limits
As the world continues to grapple with the threat of ransomware attacks, it appears that even the perpetrators of these malicious acts have their limits. The LockBit ransomware gang, which offers Ransomware […]
Security experts blast LastPass for misleading users about stolen password vaults and data
LastPass suffered two data breaches in a span of 3 months. The first hack occurred in August, while the 2nd one happened sometime later. Martin's write-up explains what LastPass' statement had to […]
Should you back up important Windows folders to OneDrive?
OneDrive on Windows has a back up feature that many users of the operating system may be unaware of. It requires a OneDrive account, free or paid works, and may be used […]
Bitwarden Unified: easier self-hosting of the password manager
Bitwarden Unified is a new solution for the Bitwarden password manager to host, manage and control the password management infrastructure. It is currently in Beta and developed by Bitwarden itself. The service […]
LastPass Hack Update: user vault data and information stolen
Password management service LastPass announced today that the disclosed password breach of August 2022 was more serious than it thought initially. The update confirms that user vault data and personal information was […]
Create encrypted messages, images, files as HTML with Portable Secret
Portable Secret is an open source tool that is designed to encrypt messages, images or files and save them as HTML files. These files may then be shared, opened in any browser, […]
NVIDIA releases security update for out-of-support graphics cards
NVIDIA released a display driver security update for some of its graphics cards that it no longer supports with regular driver updates. The security update addresses major security issues in the NVIDIA […]
Microsoft Authenticator for watchOS is being discontinued
The Microsoft Authenticator app for watchOS is being discontinued. The company claims that the app is not compatible with some security features. Microsoft Authenticator for watchOS will stop working in January According […]
Tricking antivirus solutions into deleting the wrong files on Windows
Security research Or Yair discovered a method to trick antivirus and endpoint security solutions into deleting legitimate files on Windows systems. Yair found out that he could manipulate endpoint detection and response […]
Bitwarden's passwordless authentication method lets you log into your web vault using the mobile app
Bitwarden has introduced a passwordless authentication method. It lets you approve the login request from the mobile app, let's find out more about it. Bitwarden's passwordless authentication system I should mention this […]
LastPass suffers another data breach, says customer data was stolen
LastPass has been breached for a second time this year. The cloud-based password manager suffered a data breach in August 2022, which resulted in some source code and proprietary technical information being […]
Massive Fake Website Campaign Spreading Malware detected
Security researchers have detected a big malware campaign that is using fake websites to impersonate popular products and brands to spread malware. So-called typosquatting attacks register domain names that resemble the domain […]
Microsoft adds RSS feed support to its Security Update Guide service
Microsoft's Security Update Guide site is a core service when it comes to information about security information and updates that Microsoft releases. Up until now, users could sign-up using an account to […]
OneDrive DLL Sideloading vulnerability exploited in the wild
Security services provider BitDefender published information about a DLL sideloading vulnerability of OneDrive that is exploited in the wild. According to the information, malicious actors exploit the vulnerability to mine cryptocurrency on […]
Maigret: create user dossiers based on username searches on thousands of sites
Maigret is an open source cross-platform tool to create profiles on users using just username searches. The program is free to use and does not require any APIs or configuration. The command […]
LastPass provides details on August 2022 hack
LastPass informed customers about a security breach on the company's official blog in August 2022. This week, the company published additional information about the hack after its investigation. Back in August 2022, […]
Microsoft Teams is storing authentication tokens in cleartext
A security vulnerability has been discovered in Microsoft Teams. A report that was published by security firm Vectra, reveals that Microsoft Teams is storing authentication tokens in cleartext. Microsoft Teams security issue […]
Bitwarden password manager adds Fastmail email forwarding support
Bitwarden is a popular choice when it comes to password managers. A late entry to the niche, it is open source, free for personal use and does not restrict functionality artificially for […]