article thumbnail

LastPass updates security notice with information about a recent incident

Malwarebytes

The password management company LastPasss notified customers in late December about a recent security incident. LastPass states that users that followed their best password practices have nothing to worry about. It is recommended that you never reuse your master password on other websites.

article thumbnail

Banks, Arbitrary Password Restrictions and Why They Don't Matter

Troy Hunt

That said, Westpac down in Australia certainly appears to be 6 characters: Finally thought @Westpac had upped their password game, moving from the long pointless on-screen keyboard (OSK) with a character count limit, to 'normal' password entry. troyhunt pic.twitter.com/9FMSdvVRiL — Hagen (@hagendittmer) June 3, 2018.

Banking 239
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Discord.io confirms theft of 760,000 members' data

Malwarebytes

username and your Discord ID, your email-address, your billing address, and a salted and hashed password if you signed up in 2018 or earlier. (In In 2018 discord.io Change your password. You can make a stolen password useless to thieves by changing it. Choose a strong password that you don't use for anything else.

article thumbnail

The Effectiveness of Publicly Shaming Bad Security

Troy Hunt

[link] — Troy Hunt (@troyhunt) April 18, 2018. Third party password managers are precisely what we need to address the scourge of account takeover attacks driven by sloppy password management on behalf of individuals. AjaxStudy) April 18, 2018. Käthe — T-Mobile Austria (@tmobileat) April 6, 2018.

Media 261
article thumbnail

Why (almost) everything we told you about passwords was wrong

Malwarebytes

I have an embarrassing confession to make: I reuse passwords. I am not a heavy re-user, nothing crazy, I use a password manager to handle most of my credentials but I still reuse the odd password from time to time. passwords each. One weird trick to improve your passwords.

article thumbnail

CryptoCore hacker group stole over $200M from cryptocurrency exchanges

Security Affairs

The CryptoCore group, aks Crypto-gang, “Dangerous Password”, and “Leery Turtle” has been active since 2018. The spear-phishing messages attempt to trick the victims into installing malware on their computer that allows attacker to steal or obtain access to a password manager account. Pierluigi Paganini.

article thumbnail

How to Stop Phishing Attacks in Their Tracks

SiteLock

Microsoft’s “ Security Intelligence Report, Volume 24 ” shows a 250% increase in the number of phishing emails and attacks since 2018. Pick a Strong Password Manager. Employees inevitably rely on a few identical or similar passwords for multiple accounts.