Remove Accountability Remove Blog Remove Password Management
article thumbnail

Security expert Troy Hunt hit by phishing attack

Malwarebytes

Through an automated attack disguised as a notice from Hunts chosen newsletter provider Mailchimp, scammers stole roughly 16,000 records belonging to current and past subscribers of Hunts blog. The email claimed that Mailchimp was temporarily cutting service to Hunt because his blog had allegedly received a spam complaint.

Phishing 127
article thumbnail

I've Joined the 1Password Board of Advisers

Troy Hunt

Almost a decade ago now, I wrote what would become one of my most career-defining blog posts: The Only Secure Password is the One You Can't Remember. I had come to the realisation that I simply had too many accounts across too many systems to ever have any chance of creating decent unique passwords I could remember.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Threat Modeling Password Managers

Adam Shostack

Here's my model of what we're working on: Let me walk you through this: There's a password manager, which talks to a website. The two boundaries displayed are where the data and the "password manager.exe" live. If your computer is not compromised, and your passwords are nowhere else, then you're safe.

article thumbnail

Threat Modeling and Logins

Adam Shostack

Recently, I was opening a new bank account. The bank unexpectedly sent me a temporary password to sign up, and when I did, the temporary password had expired. But then, after I went to reset the password, the bank emailed me a one time code. Theyre checking live access to the email account with the one time code.

Banking 130
article thumbnail

On world password day, Microsoft says fewer passwords, more passkeys

Malwarebytes

But over time, the number of passwords we use, and the necessary strengths have grown so much that the system has become practically unusable without a password manager. So, only a few years later, Microsoft introduced Windows Hello , a new way for users to securely sign in to their accounts with their face, fingerprint, or PIN.

article thumbnail

National Consumer Protection Week: Keeping your personal data safe in a digitally connected world

Webroot

Common attacks to consumer protection Identity theft and fraud Some common types of identity theft and fraud include account takeover fraud , when criminals use stolen personal information such as account numbers, usernames, or passwords to hijack bank accounts, credit cards, and even email and social media accounts.

article thumbnail

How BeerAdvocate Learned They'd Been Pwned

Troy Hunt

This comes as no surprise to regular followers, nor should it come as a surprise that I maintain an Untappd account, logging my beer experiences as I (used to ??) Someone had registered a new Netflix account with my email / password associated with my BeerAdvocate account. Not even a password manager.

Passwords 359