Latest Hacking News
The popular password management solution 1Password has announced expanding its highest bounty reward limits. Onwards, 1Password bug bounty program on Bugcrowd will offer rewards of up to $1 million. 1Password $1 Million Bug Bounty According to a
DataBreaches
Jonathan Greig reports: Password manager 1Password and cybersecurity and networking giant Cloudflare were targeted by hackers following the breach affecting...
Ars Technica
1Password CTO says investigation found no compromise of user data or sensitive systems.
ZDNet
Users will be able to sync the information they store in Brex's vault with their 1Password account.
The Hacker News
1password detected suspicious activity following the Okta support system breach. After investigation, they determined no user data was accessed.
The Record
Password manager 1Password and cybersecurity and networking giant Cloudflare were targeted by hackers following the breach affecting single sign-on provider Okta, according to statements from both companies.
Cyber Security News
1Password detected suspicious activity on their Okta instance on September 29, but no user data or sensitive systems were compromised.
Bleeping Computer
1Password, a popular password management platform used by over 100,000 businesses, suffered a security breach after hackers gained access to its Okta ID management tenant.
Latest Hacking News
The password management service 1Password assured users of no security breach after accidentally sending “Secret key or password changed” alerts. As explained, the glitch happened due to technical database maintenance. 1Password Sent Erroneous “Password Changed” Alerts A
Bleeping Computer
1Password says a recent incident that caused customers to receive notifications about changed passwords was the result of service disruption and not a security breach.
SecurityWeek
Password management software vendor 1Password today announced that it is willing to pay up to $1 million to researchers able to steal secrets from its vault.
ZDNet
1Password doesn't support passkeys for logins yet, but it has a demo that lets users create a real WebAuthn credential that is stored and ready for when support arrives.
ZDNet
1Password offers Phantom users an easy and secure way to save credentials and ensure access to their cryptocurrency.
ZDNet
1Password is a password manager software offering a discounted value plan for teams of up to 10 people.
ZDNet
Password management made secure and easy.
CyberSecurity Dive
The password manager came forward after BeyondTrust and Cloudflare disclosed similar Okta environment breaches. All three victims claim no data was compromised.
ZDNet
The funding round raised the company's valuation to $6.8 billion.
ZDNet
You should be using a password manager. But which one?
The DFIR Report
In this intrusion, we will take a look at a Trickbot infection, where soon after gaining access, the threat actor started to enumerate the target network and dump credential information. A setup file, which attempted to masquerade as a legitimate software installer, was deployed on several systems to fetch additional Cobalt Strike beacons.
ZDNet
The password manager provider says it's moving towards a passwordless future.
ZDNet
1Password has paid out $103,000 to Bugcrowd researchers since 2017.
Cyber Security News
Android Password Manager : 1. Google Passwords 2. Bitwarden 3. Sticky password 4. Keeper 5. Dashlane 6. Enpass 7. 1Password 8. LastPass etc..
Bleeping Computer
A new version of the ViperSoftX information-stealing malware has been discovered with a broader range of targets, including targeting the KeePass and 1Password password managers.
Infosecurity News
1Password’s Steve Won discusses why modern security solutions, such as passkeys, can substantially reduce the risk of credential-based attacks
Computerworld
Not all Android password managers are created equal — so which one makes the most sense for you?
The Record
The identity management company said that from September 28, to October 17, a threat actor “gained unauthorized access to files inside Okta’s customer support system associated with 134 Okta customers.”
DarkReading
Users searching for Bitwarden and 1Password's Web vaults on Google have recently reported seeing paid ads with links to cleverly spoofed sites for stealing credentials to their password vaults.
SecurityWeek
Companies have addressed the impact of the exploited Libwebp vulnerability CVE-2023-4863 on their products.
SecurityWeek
Twenty-one cybersecurity-related merger and acquisition (M&A) deals were announced in the first half of November 2022.
The Hacker News
Okta discloses that the recent security breach has impacted 134 of its customers.
The Cyber Express
In today's digital age, the necessity of strong and unique passwords has never been more critical. With cyber threats looming
SecurityWeek
Thirty-five cybersecurity-related merger and acquisition (M&A) deals were announced in November 2022.
Security Affairs
Researchers discovered a sophisticated cybercriminal campaign by Russian-speaking threat actors that used GitHub to distribute malware.
CyberSecurity Dive
With details scant, worries remain about how the attacks might have played out for less security-focused businesses that were impacted.
The Hacker News
Google announces over 400 million accounts now use passkeys - the passwordless authentication solution.
HACKRead
The aftermath of the 2023 Okta breach continues to unfold, with Cloudflare disclosing the details of its security compromise.
Security Affairs
The Resecurity's HUNTER unit spotted a new version of the Meduza stealer (version (2.2)) that was released in the dark web.
ZDNet
Two years into the pandemic and the challenges around remote working are taking their toll. We're making bad tech security decisions as a result.
ZDNet
Want to avoid having your online accounts hacked? Enable two-factor authentication, a crucial security measure that requires an extra step when signing in to high-value services. In this post, I explain how to set up 2FA and which accounts to focus on first.
Ars Technica
If a transgression by a single employee breaches your network, you're doing it wrong.
Bleeping Computer
Security researchers developed a new attack, which they named AutoSpill, to steal account credentials on Android during the autofill operation.
SecurityWeek
OpenSSF announces that 19 more organizations have joined the initiative, which now has a total of 60 members.
Cyber Security News
Google Chrome is one of the most used browsers around the world due to its speed and performance. With its advanced features and sync methods, it has become one of the favorite browsers.
Bleeping Computer
Bitwarden and other password managers are being targeted in Google ads phishing campaigns to steal users' password vault credentials.
ZDNet
Okay, my friends, time for a little tough love.
The Hacker News
New analysis reveals the evolution of ViperSoftX infostealer malware: stronger encryption, anti-analysis techniques, and clever delivery methods.
The Hacker News
Say goodbye to passwords: Google is rolling out passkeys on its stable version of Chrome!
PCMag
One unexpected obstacle to passkey adoption: when an organization won’t use that word.
The Record
Almost 5,000 Okta employees were affected by a data breach following a cyberattack on a third-party provider used by the company for healthcare services.
ZDNet
Leaving LastPass? Our top password manager picks have strong security, easy-to-use features, and multiplatform support.
Bleeping Computer
Okta is warning nearly 5,000 current and former employees that their personal information was exposed after a third-party vendor was breached.
The Hacker News
A multi-faceted campaign is targeting Android, macOS, and Windows users with various stealer malware and banking trojans.
SecurityWeek
Russian-speaking threat actors are caught abusing a GitHub profile to distribute information stealers posing as legitimate software.
CyberSecurity Dive
The IAM provider says the attack was most likely linked to a compromised employee’s personal Google account or personal device.
ZDNet
The company's success with its iOS and Android browsers has led it to begin testing a macOS version of its browser, with plans for a Windows-compatible version down the road.
Ars Technica
This newly discovered vulnerability is real, but it's more nuanced than that.
Bleeping Computer
Google has assigned a new CVE ID (CVE-2023-5129) to a libwebp security vulnerability exploited as a zero-day in attacks and patched two weeks ago.
The Cyber Express
The culmination of Black Hat Europe 2023 gathered leading industry professionals and researchers, offering forefront cybersecurity insights. A standout briefing
Bleeping Computer
The Authy desktop apps for Windows, macOS, and Linux will be discontinued in August 2024, with the company recommending users switch to a mobile version of the two-factor authentication (2FA) app.
CyberNews
Okta data breach impacted all of its users.
Bleeping Computer
Microsoft released emergency security updates for Edge, Teams, and Skype to patch two zero-day vulnerabilities in open-source libraries used by the three products.
.webp)
Cyber Security News
A group of hackers has used safe websites like GitHub and FileZilla to spread banking malware, which is very dangerous for both personal and business security.
SecurityWeek
The October 2023 security update for Android patches two vulnerabilities exploited in attacks, both likely linked to spyware vendors.
Bleeping Computer
Okta is warning nearly 5,000 current and former employees that their personal information was exposed after a third-party vendor was breached.
Bleeping Computer
Google Chrome is getting new security-enhancing features for the built-in Password Manager, making it easier for users to manage their passwords and stay safe from account hijacking attacks.
.webp)
Cyber Security News
Cybercriminals have been exploiting GitHub, a platform widely trusted by developers, to host malicious infrastructure.
Bleeping Computer
Google has patched the fifth Chrome zero-day vulnerability exploited in attacks since the start of the year in emergency security updates released today.
Ars Technica
Answering common questions about how passkeys work.
Bleeping Computer
An infostealing piece of malware called Jester Stealer has been gaining popularity in the underground cybercrime community for its functionality and affordable prices.
Ars Technica
Threat actor gained access to vendor's IT environment and exfiltrated personal data.
Infosecurity News
Several suffered follow-on session hijacking attacks
Bleeping Computer
Okta says attackers who breached its customer support system last month gained access to files belonging to 134 customers, five of them later being targeted in session hijacking attacks with the help of stolen session tokens.
Infosecurity News
Adversaries targeting EU-based victims increasingly leverage EU affairs in spear phishing attacks, CERT-EU found
ZDNet
This is really all you need to know.
Security Affairs
A new variant of the information-stealing malware ViperSoftX implements sophisticated techniques to avoid detection. Trend Micro researchers observed a new ViperSoftX malware campaign that unlike previous attacks relies on DLL sideloading for its arrival and execution technique. The variant employed in the campaign supports a more sophisticated encryption method of byte remapping and a monthly […]
Ars Technica
No one mentioned that libwebp, a library found in millions of apps, was a 0-day origin.
Ars Technica
The passkey ecosystem is far from complete, but Google's implementation is now ready to use.
The Record
Senior executives at networking giant Cloudflare said a suspected nation-state attacker used credentials stolen from Okta to breach the company’s systems in late November.
Security Affairs
Cloud identity and access management solutions provider Okta revealed additional threat actor activity linked to the October 2023 breach.
DarkReading
A newly discovered bug in the open source password manager, if exploited, lets attackers retrieve a target's master password — and proof-of-concept code is available.
The Record
A breach announced by Okta last month was far larger than previously understood.
Computerworld
Securely wiping an Android device isn't difficult, but there are some critical steps you don't want to overlook.
ZDNet
Now you can sign into your Google account using a fingerprint, a facial scan, or a PIN, eliminating the need to remember or use a password.
Bleeping Computer
SMBs are attractive targets for cybercriminals as they typically have fewer resources like IT support, and lack robust security procedures, like employee cybersecurity training. Learn more from Specops Software on how SMBs can protect themselves from cyberattacks.
Bleeping Computer
We store vast amounts of data — financial records, photos/videos, family schedules, freelance projects and more — on our personal computers and smartphones. Let's take a look at some of the most common threats to your data, and how you can step up your protection today.
Krebs on Security
Okta, a company that provides identity tools like multi-factor authentication and single sign-on to thousands of businesses, has suffered a security breach involving a compromise of its customer support unit, KrebsOnSecurity has learned. Okta says the incident affected a "very…
ZDNet
Using a password manager is an effective way to protect your passwords, but you also need to protect your password manager.
Cyber Security News
Top 10 Hacks of 2023. Malware. Phishing. Denial of Service (DoS). Distributed Denial of Service (DDoS). Man-in-the-Middle (MitM).
Computerworld
Big tech is making money hand over fist with your data. And while the states are picking up the slack on privacy legislation, Congress remains AWOL.
Infosecurity News
Recorded Future details a novel campaign that abuses legitimate internet services to deploy multiple malware variants for credential theft
CyberSecurity Dive
CSO David Bradbury detailed to Cybersecurity Dive what the identity and access management company got wrong and the security pledges it's making to customers.
Naked Security
Is it a vulnerability if someone with control over your account can mess with files that your account is allowed to access anyway?
Computerworld
Forget malware scanners or over-the-top security suites: These are the apps that'll actually improve your security and protect your privacy on Android.
ZDNet
You can get a Microsoft account for free, but that doesn't begin to describe its value, especially if you use that account for crucial email and cloud storage. Follow these seven steps to establish a solid baseline of security and protect that account from intruders.
The Record
Okta Chief Security Officer David Bradbury discusses lessons from the incident, how nation-state threats are evolving, and how AI is already influencing identity-based attacks.
ZDNet
In an exclusive interview with ZDNet, co-founder Tom Okman shares his five-year plan to make Nord Security - formerly known as NordSec - synonymous with digital privacy and cybersecurity.
Trend Micro
We observed cryptocurrency and information stealer ViperSoftX evading initial loader detection and making its lure more believable by making the initial package loader via cracks, keygens, activators, and packers non-malicious. We also noted more sophisticated encryption and basic anti-analysis techniques, such as byte remapping and web browser communication blocking.
ZDNet
Wondering if your information is posted online from a data breach? Here's how to check if your accounts are at risk and what to do next.
ThreatPost
Exploring what's next for public-cloud security, including top risks and how to implement better risk management.
Computerworld
Android security doesn't have to be a source of stress. These level-headed steps are all you need to keep the boogeyman at bay.
Loading more articles....