Security News

Google Chrome will check for breached credentials every time you sign in anywhere
2019-12-11 13:30

Double-encrypted. That said, if you're worried about over-sharing, what are you doing on Chrome? A new feature in Google's Chrome browser will warn you if your username and password matches a...

Hardware-based Password Managers Store Credentials in Plaintext
2019-12-09 18:58

A security researcher has analyzed three hardware-based password vaults and discovered that credentials are stored in plaintext and survive hardware resets.  read more

Cloud Security Alliance launches credentials for auditing cloud computing systems
2019-12-06 04:15

The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, announced the...

SMS company exposes millions of text messages, credentials online
2019-12-03 11:55

Researchers at VpnMentor claim that the TrueDialog data leak exposure could have compromised tens of millions of people.

Prevent credential stuffing and account takeover attacks with these expert tips
2019-12-03 06:25

Account takeover and credential stuffing attacks are two security threats that often go hand in hand. Both have become alarmingly prominent: a recent report found that one-fifth of account...

How credential stuffing attacks work, and how to prevent them
2019-11-29 17:03

Credential stuffing attacks pose a significant risk to consumers and businesses. Learn how they work and what you can do about them.

New 'Ginp' Android Trojan Targets Credentials, Payment Card Data
2019-11-26 11:48

A recently discovered Android banking Trojan that features a narrow target list and two-step overlays is capable of stealing both login credentials and credit card data, ThreatFabric reports. read more

Arctic Wolf augments portfolio with corporate credential exposure detection
2019-11-22 01:45

Arctic Wolf Networks, a leading security operations center (SOC)-as-a-service company, announced the addition of Account Takeover Risk Detection capabilities, allowing customers of the Arctic Wolf...

DopplePaymer Ransomware Spreads via Compromised Credentials: Microsoft
2019-11-21 12:21

The DopplePaymer ransomware spreads via existing Domain Admin credentials, not exploits targeting the BlueKeep vulnerability, Microsoft says. read more

Amazon Fixes Ring Video Doorbell Flaw That Leaked Wi-Fi Credentials
2019-11-08 12:11

Attackers could access Wi-Fi credentials due to a problem in initial configuration of the smart doorbell device.