Malwarebytes

SEPTEMBER 20, 2021

In a recent blog Microsoft announced that as of September 15, 2021 you can completely remove the password from your Microsoft account and use the Microsoft Authenticator app, Windows Hello, a security key, or a verification code sent to your phone or email to sign in to Microsoft apps and services. Why get rid of passwords?

Passwords 83

Passwords Accountability Authentication Phishing 83

Google Security

APRIL 24, 2023

Christiaan Brand, Group Product Manager We are excited to announce an update to Google Authenticator , across both iOS and Android, which adds the ability to safely backup your one-time codes (also known as one-time passwords or OTPs) to your Google Account. It’s also the primary entry point for risks, making it important to protect.

Authentication 111

Authentication Accountability Password Management Passwords 111

SecureList

FEBRUARY 25, 2021

First, a network connection with a remote host was established using the command “net use” net use [IP address] IPC$ “ [password] ” /u:”[user name]” > $temp~tmp5936t.tmp 2>&1″ Next, the actor copied malware to the remote host using the Windows Management Instrumentation Command-line (WMIC).

Malware 138

Malware Phishing Passwords Encryption 138

Security Affairs

NOVEMBER 8, 2021

Threat actors exploited a critical vulnerability, tracked as CVE-2021-40539 , in the Zoho ManageEngine ADSelfService Plus software, which is self-service password management and single sign-on solution. KdcSponge allows capturing the domain name, username, and password.

Healthcare 103

Healthcare Password Management Financial Services Surveillance 103

Security Boulevard

JUNE 15, 2023

80:13219 Size ~249 KB Compiler: EP:Microsoft Visual C/C++ (2008-2010) [EXE32] Sample is packed fc4aa58229b6b2b948325f6630fe640c2527345ecb0e675592885a5fa6d26f03 Imphash: baa93d47220682c04d92f7797d9224ce Mystic Stealer (2023-05-25) Communicates with 167.235.34[.]144:13219 Trojan.Mystic.KV 123:13219 185.252.179[.]18:13219 18:13219 142.132.201[.]228:13219

Cryptocurrency 52

Cryptocurrency Password Management Malware DNS 52

Troy Hunt

JANUARY 10, 2018

I ended up moving this section after the miscellaneous one simply because of this: We've seen a 2016 copyright, a 2010 copyright and now a 2013 copyright published on a 2014 page! This is poor form as it can break tools that encourage good security practices such as password managers. Let them paste passwords!

Hacking 279

Hacking Government Risk Encryption 279