paypal fake phishing invoice

Your next Phishing email may come straight from PayPal

Malicious actors have started to exploit a loophole in the defenses of many home users, organizations, email and security services, to send out phishing emails from legitimate services. Threat actors have found […]

windows 11 brute force protection

Next Windows 11 delays brute force attacks by default

Microsoft plans to roll out new default settings in the next major Windows 11 release that delay brute force attacks against accounts on the system. Brute-force attacks are commonly used by threat […]

phishing site

Office Phishing Attack circumvents multi-factor authentication

Microsoft security researchers and engineers discovered a massive phishing attack that has been targeting more than 10,000 organizations since September 2021. The malicious actors used adversary-in-the-middle (AiTM) phishing sites to steal passwords […]

fake microsoft office sig in webview2 keylogger

New Windows Phishing Method gives attackers access to cookies and more

The rise of two-factor authentication added a new layer of security to the authentication process on the Internet. Attacks designed to steal user credentials are still common, but many fall short because […]

chrome cleartext passwords cookie data

Your browser stores passwords and sensitive data in clear text in memory

Your web browser may store sensitive data, including usernames, passwords and session cookies in clear text in memory according to CyberArk security researcher Zeev Ben Porat. Most Chromium-based web browsers appear to […]

LastPass introduces passwordless Vault access

LastPass, maker of the password management service, introduced support for accessing a customer's Vault using passwordless technology in June 2022. Passwordless account systems use other means of authentication to provide users with […]

Skiff Mail is a new end-to-end encrypted email service, but should you use it

Skiff Mail is a new end-to-end encrypted email service, but should you use it?

Skiff Mail has been launched to the public, it is a new end-to-end encrypted email service provider. The company says that it focuses on protecting the privacy of its users. The service […]

DottedSign is a powerful E-Signature solution for individuals and organizations

DottedSign is a versatile E-Signature solution for the web and mobile devices that is available for individuals and organizations alike.  It is a comprehensive E-Signature solution that enables home users and professionals […]

microsoft passwordless account

Google, Microsoft and Apple commit to passwordless sign-in standard

Google, Microsoft and Apple have announced support for expanding passwordless sign-in support across major operating systems and devices. The three companies announced plans on May 5, 2022 to support a passwordless sign-in […]

Ghacks Deals: Password Boss Premium: Lifetime Subscription (Unlimited Devices)

Password Boss is a cross-platform password manager, that has a strong focus on security. The premium version of the password manager allows one user to install the password manager on an unlimited […]

samsung internet browser 17 privacy

Samsung Internet 17.0 Browser released: anti-tracking and usability improvements

Samsung Electronics released Samsung Internet 17.0, the company's official mobile browser, on May 4, 2022. The new version of Samsung's browser blocks Internet tracking automatically and improves the usability in several meaningful […]

Minecraft requires a Microsoft Account from March 2022 onward

Minecraft users who play the Java version of the popular game will have to use a Microsoft Account from March 2022 onward to play the game. Microsoft, owner of Minecraft since 2014, […]

LastPass Logo

LastPass: some users report compromised accounts

Some users of the LastPass password manager revealed this week that they have received emails from LastPass stating that logins to their accounts using the account's master password were blocked. The first […]

microsoft authenticator additional context

New Microsoft Authenticator features for organizations

Microsoft announced four new features for the company's Microsoft Authenticator application for organizations. The new security features improve Microsoft Authenticator's capabilities in several meaningful ways. Two feature additions improve the sign-in experience. […]

windows 11 account sign-in turn off windows hello

How to sign-in to Windows 11 automatically

Some Windows users prefer to sign-in to the Windows operating system automatically. While not advised on multi-user systems or systems with confidential files, the automatic login into Windows can speed up the […]

google chrome 93

Here is what is new in Google Chrome 93

Google published Chrome 93, a new stable version of the company's desktop and mobile browser, on August 31, 2021. The new Chrome version is already available, and desktop users may select Menu […]

LastPass Password Manager review

Is LastPass Password Manager worth using?

Manage your passwords with LastPass: An in-depth review Have you ever struggled to remember a password for an account? It happens, we use a lot of accounts, and a different one for […]

google two-factor authentication mandatory

Google will soon enforce the use of two-step verification for Google accounts

Two-factor authentication, or as Google calls it two-step verification, is a popular security feature that adds another layer of security to the authentication process. Users who have configured two-factor authentication use a […]

Ghacks Deals: 1Password Families 50% off the first year

1Password is a popular password management and synchronizing service that is available for Windows, Mac OS and Linux, the mobile systems Chrome OS, Android and iOS, and as a web version. 1Password […]

firefox 87 release notes

Here is what is new and changed in Firefox 87.0

Mozilla plans to release released Firefox 87.0 Stable and Firefox 78.9 ESR to the public on March 23, 2021. The new versions of Firefox are available as automatic updates but also as direct […]

sidekick browser

Sidekick is a Chromium-based browser for work with interesting features

Sidekick is a web browser that is based on Chromium that is designed specifically for Internet workers. While it can be used by anyone, its feature-set has been designed with users in […]

Ghacks Black Week Deals: The Essential NordVPN & Password Manager 2-Year Subscription Bundle

A VPN is useful for a number of things: it may improve privacy and security, or provide access to regionally locked services and apps. Privacy is improved because the VPN's IP address […]

minecraft java microsoft accounts

Minecraft will require a Microsoft Account from 2021 onward

Minecraft users here? If you are using the Java version of Minecraft, then you will have to start using a Microsoft Account soon as Mojang announced this month that all versions of […]

firefox monitor mark resolved

Firefox Monitor gets resolve feature

Firefox Monitor is a service by Firefox maker Mozilla that allows anyone to check whether an email address or username has been part of a data breach. Mozilla launched Firefox Monitor back […]

7Caps on-screen indicator for Caps Lock and Num Lock

7Caps is a free tool with on-screen indicators that tell you if Caps Lock and Num Lock are enabled

Not every keyboard has a built-in Caps Lock or Num Lock LED indicator. My laptop for example, has lights to indicate the status of Caps Lock, Mute and Wi-Fi, but there's none […]

nordpass password manager

NordVPN launches password management solution NordPass

Disclosure: Ghacks may receive a referral fee if you click or buy any of the products featured here. VPN provider NordVPN launched its password management solution NordPass recently after a prolonged early […]

Criptext desktop app

Criptext is a free encrypted email service with open source apps for Windows, Linux, macOS, Android and iOS

Criptext is a free encrypted email service for Windows, Linux, macOS, Android and iOS. It has been around for a while, but I thought it may be worth looking into. Before we […]

onedrive personal vault

First look at OneDrive's Personal Vault feature

Microsoft revealed the new Personal Vault feature for its OneDrive storage solution in June 2019. The feature was made available to OneDrive users from Australia, New Zealand and Canada initially with the […]

WinOTP Authenticator is an open-source alternative for WinAuth

WinOTP Authenticator is an open-source alternative for WinAuth

Some days ago, we told you about Authenticator, an open-source 2-step verification app for iOS. The app generates codes for two-factor authentication use. Many web services support 2FA to add another layer […]

Authenticator is an open-source 2-step verification app for iOS

Authenticator is an open-source 2-step verification app for iOS

When it comes to iOS, open-source apps are something of a rarity but that doesn't mean they don't exist. If you're looking for an alternative for Google Authenticator, Microsoft Authenticator, LastPass Authenticator, […]

microsoft two-factor authentication

Microsoft: 2-factor authentication blocks 99.9% of account attacks effectively

What is the best protection against attacks on accounts? Microsoft believes that it is 2-factor authentication, and the company has stats to back it up. Microsoft says that 2-factor authentication, sometimes also […]

Strongbox Password Safe is a free, open-source KeePass client for iOS

Strongbox Password Safe is a free, open-source KeePass client for iOS

Many privacy/security conscious users, including myself, prefer to use KeePass. After all a free, actively supported, open-source application, that stores your logins in an encrypted database on your local storage is hard […]

microsoft account policy

Microsoft may close accounts after two-years of inactivity, unless..

Microsoft started to send out emails to all Microsoft Account users recently in which it informed its customers about upcoming services agreement changes. The changes are listed on a special page on […]

Microsoft updates Security Baseline: drops password expiration

Microsoft published a draft of the security baseline for Windows 10 version 1903, the May 2019 Update, and Windows Server 2019 (v1903). While you can download the draft and go through it […]

pwned passwords

Change your password day needs a counterpart

February 1 is change your password day; while not official, many tech sites advertise the day to their readers. Users are asked to change passwords on that day to improve security. While […]

disable webusb webbluetooth

Disable WebUSB and WebBluetooth in Google Chrome

Web browsers support an increasing number of APIs and features, and there does not seem to be an end in sight to that. Recent additions to Google Chrome, the WebUSB and WebBluetooth […]

phishing email subjects

Users fall for these Email Phishing subjects the most

Is phishing still a thing? KnowBe4, a security training company, released details on the top clicked phishing email subjects of the fourth quarter of 2018; in other words: the subject lines that […]

password generator

Most Internet users still prefer weak passwords over secure ones

If you are a reader of this blog you know that it is essential to use unique and strong passwords for any online or offline service that you use. Most use a […]

change pim veracrypt

How to change the PIM of a VeraCrypt volume

The developers of VeraCrypt introduced Personal Iterations Multiplier (PIM) functionality in the encryption program in version 1.12. PIM stands for "Personal Iterations Multiplier". It is a parameter that was introduced in VeraCrypt […]

Google reCAPTCHA v3 without user interaction launches

Google unveiled a new version of the company's reCAPTCHA service yesterday that aims to make the service more user friendly and provide webmasters with better options when it comes to dealing with […]