Zero Day

JUNE 20, 2025

We gather data from the best available sources, including vendor and retailer listings as well as other relevant and independent reviews sites. When you click through from our site to a retailer and buy a product or service, we may earn affiliate commissions. Close Home Tech Security Heard about the 16 billion passwords leak?

Passwords 86

Passwords Data breaches Password Management Identity Theft 86

CSO Magazine

SEPTEMBER 30, 2021

CISOs looking to beef up their customer-facing authentication procedures to thwart cyberattacks need to walk a fine line. Selecting the most appropriate authentication method for your customers is something of a moving target because consumer attitudes are always changing.

Authentication 128

Authentication Passwords Retail CISO 128

Duo's Security Blog

DECEMBER 12, 2022

The Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) just released the 2022 Holiday Season Cyber Threat Trends report that reveals the most prevalent malware tools leveraged by cyber criminals this year, with phishing and fraud dominating the list.

Retail 121

Retail Cyber threats Social Engineering Data breaches 121

Krebs on Security

JULY 29, 2021

Every time there is another data breach, we are asked to change our password at the breached entity. Our continued reliance on passwords for authentication has contributed to one toxic data spill or hack after another.

Passwords 363

Passwords Password Management Phishing Scams 363

Security Affairs

NOVEMBER 25, 2020

Retail giant Home Depot has agreed to a $17.5 The US largest home improvement retailer giant Home Depot agrees to $17.5 According to the US retailer the payment card information of approximately 40 million Home Depot consumers nationwide. The post Retail giant Home Depot agrees to a $17.5 ” . . Pierluigi Paganini.

Retail 137

Retail Data breaches Penetration Testing Information Security 137

Krebs on Security

JULY 23, 2018

Google has not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical Security Keys in place of passwords and one-time codes, the company told KrebsOnSecurity. The basic model featured here retails for $20. a mobile device).

Phishing 241

Phishing Authentication Mobile Passwords 241

Duo's Security Blog

FEBRUARY 16, 2022

With growing concerns around security, ransomware and retail breaches, there are a few key considerations that retailers should keep in mind when it comes to protecting their organizations. Retail’s great “digital transformation” sped up, as did the number of data breaches impacting retail. Data breach costs rose from $3.86

Retail 105

Retail Cybersecurity Data breaches Passwords 105

The Last Watchdog

APRIL 7, 2021

Passwordless authentication as a default parameter can’t arrive too soon. That’s the upshot of a new report, The State of Passwordless Security 2021 , put out by HYPR , a New York City-based supplier of advanced authentication systems. Related: Top execs call for facial recognition to be regulated. 1 use case is remote access.”.

Authentication 147

Authentication Digital transformation Passwords Password Management 147

Adam Levin

NOVEMBER 17, 2020

Mobile payment platforms, like Apple Pay and Google Pay, use advanced technology, like fingerprint authentication and tokenization (in which credit card account numbers are replaced by randomly generated numbers) to provide brick-and-mortar shoppers with an added layer of security. Shop at reputable and recognizable retailers.

Scams 243

Scams Retail Banking Passwords 243

Security Affairs

APRIL 15, 2023

The Brazilian retail arm of car manufacturing giant Volvo leaked sensitive files, putting its clientele in the vast South American country in peril. Volvo’s retailer in Brazil, Dimas Volvo, leaked sensitive files through its website. website, belonging to an independent Volvo retailer in the Santa Catarina region of Brazil.

Retail 98

Retail Manufacturing Passwords Accountability 98

CyberSecurity Insiders

NOVEMBER 4, 2021

Competition has never been fiercer for online retailers, which means it’s not just quality products and customer service that companies must focus on. While retailers still need to focus on protecting employees and the systems and databases they utilize, there must also be a renewed focus on protecting customer data.

Retail 111

Retail eCommerce Cyber Attacks Authentication 111

Krebs on Security

SEPTEMBER 12, 2018

wireless carriers today detailed a new initiative that may soon let Web sites eschew passwords and instead authenticate visitors by leveraging data elements unique to each customer’s phone and mobile subscriber account, such as location, customer reputation, and physical attributes of the device. The four major U.S.

Mobile 259

Mobile Authentication Wireless Scams 259

Security Boulevard

NOVEMBER 18, 2024

As Black Friday 2024 nears, online retailers are preparing for a surge in demand, particularly for deals, discounts, and bundles on popular gaming consoles like the PS5, Xbox, and Nintendo Switch, along with their accessories. Weak Authentication Practices Half of the websites allowed a bot to login to an account without advanced techniques.

Accountability 59

Accountability Retail Authentication Risk 59

CyberSecurity Insiders

MARCH 23, 2022

As bots are buying all the Raspberry Pi systems available in the market, Adafruit, an online retailer of Raspberry Pi single-board computers, has implemented a 2-factor authentication for all the purchases made for the new hardware from this Monday. And if the users do not change such credentials, then they can be hacked at any moment.

Authentication 113

Authentication Retail Marketing Media 113

IT Security Guru

JANUARY 22, 2024

Password managers have become integral tools for individuals and businesses alike. However, these digital guardians can offer more than just a secure vault for passwords. In fact, a good password manager can play a crucial role in enhancing both the personal and professional aspects of a user’s digital life.

Password Management 133

Password Management Passwords Banking Accountability 133

The Hacker News

JULY 15, 2024

Retail banking institutions in Singapore have three months to phase out the use of one-time passwords (OTPs) for authentication purposes when signing into online accounts to mitigate the risk of phishing attacks. Customers who have activated their digital

Banking 123

Banking Retail Phishing Authentication 123

Jane Frankland

MAY 3, 2025

While details remain sparse, reports suggest social engineering tactics like phishing, SIM swapping, and multi-factor authentication (MFA) fatigue attacks may have been used to infiltrate systems. Then, the focus of cyber attacks on retailers, and what lessons must be learned by business leaders and customers.

Cyber Attacks 100

Cyber Attacks Retail Cyber threats Backups 100

Security Boulevard

OCTOBER 11, 2024

Passwordless Authentication without Secrets! divya Fri, 10/11/2024 - 08:54 As user expectations for secure and seamless access continue to grow, the 2024 Thales Consumer Digital Trust Index (DTI) research revealed that 65% of users feel frustrated with frequent password resets.

Authentication 69

Authentication Retail Healthcare Manufacturing 69

Krebs on Security

AUGUST 7, 2018

Unauthorized SIM swaps often are perpetrated by fraudsters who have already stolen or phished a target’s password, as many banks and online services rely on text messages to send users a one-time code that needs to be entered in addition to a password for online authentication. All four major U.S.

Mobile 251

Mobile Cryptocurrency Computers and Electronics Scams 251

Webroot

APRIL 22, 2025

Retail and e-commerce: Retail and ecommerce businesses are vulnerable to breaches because they handle and store vast amounts of customer payment information, including addresses, credit card numbers and more. Use strong, unique passwords: Strong, unique passwords are a simple, yet powerful security tool.

Data breaches 72

Data breaches Identity Theft Passwords eCommerce 72

SecureWorld News

MAY 28, 2025

Victoria's Secret has taken its website offline and disabled some in-store services after experiencing a cybersecurity incident, marking the latest disturbing trend of high-profile attacks targeting global retailers. retailers such as Harrods, Co-op, and Marks & Spencer. companies."

Retail 60

Retail Password Management Cybercrime Passwords 60

Troy Hunt

MARCH 29, 2018

The penny first dropped for me just over 7 years ago to the day: The only secure password is the one you can't remember. In an era well before the birth of Have I Been Pwned (HIBP), I was doing a bunch of password analysis on data breaches and wouldn't you know it - people are terrible at creating passwords! Everywhere.

Password Management 279

Password Management Passwords Data breaches Retail 279

Malwarebytes

FEBRUARY 5, 2025

And its not as if using a platform that is used by major retailers makes it safe. Brute force attacks, where the criminals try a whole bunch of passwords they obtained from other breaches. Make it harder to log in by using multi-factor authentication (MFA) and by not re-using passwords. Keep your software up to date.

Small Business 80

Small Business Data breaches Phishing Malware 80

IT Security Guru

DECEMBER 18, 2020

But, while this may be good news for embattled retailers, it’s even better news for opportunistic cybercriminals. It’s vital, then, that retailers do what they can to prevent such attacks and protect their profits – and their reputations – in these challenging times. Upsetting experience. Minimising risks.

Retail 94

Retail eCommerce Risk Data breaches 94

Troy Hunt

MARCH 27, 2018

It began with a visit to the local Telstra store earlier this month to upgrade a couple of phone plans which resulted in me sitting alone by this screen whilst the Telstra staffer disappeared into the back room for a few minutes: Is it normal for @Telstra to display customer passwords on publicly facing terminals in their stores?

Passwords 199

Passwords Banking Mobile Telecommunications 199

Approachable Cyber Threats

SEPTEMBER 30, 2021

It could mean that even though it was an online retailer who got hacked, your bank account could ultimately be emptied. Let’s first look at how companies store passwords. When you set a password on a website, the company puts it through an encryption algorithm. But how does that happen and what does that mean for you?

Passwords 98

Passwords Password Management Hacking Accountability 98

CyberSecurity Insiders

MARCH 22, 2022

American Online Retailing Giant CafePress has been pressed with a $500,000 penalty for failing to protect the data of its customers. This includes usage of multi-factor authentication, encrypting sensitive details such as social security numbers, and not storing any critical information on the retail servers.

Data breaches 127

Data breaches Retail Identity Theft Authentication 127

The Last Watchdog

MARCH 7, 2024

The new Badge Partner Program further accelerates the adoption and integration of Badge’s privacy-preserving authentication, enabling even more users to benefit from seamless MFA experiences across any device or application without storing user secrets or private keys. “We

Authentication 100

Authentication Software Digital transformation Marketing 100

Krebs on Security

JANUARY 19, 2022

was originally launched in 2010 with the goal of helping e-commerce sites validate the identities of customers who might be eligible for discounts at various retail establishments, such as veterans, teachers, students, nurses and first responders. prompts users to choose a multi-factor authentication (MFA) option. McLean, Va.-based

Mobile 364

Mobile Accountability Insurance Government 364

The Last Watchdog

JULY 7, 2021

Credential stuffing is a type of advanced brute force hacking that leverages software automation to insert stolen usernames and passwords into web page forms, at scale, until the attacker gains access to a targeted account. The big takeaway, to me, is how they accomplished this – by refining and advancing credential stuffing.

Accountability 257

Accountability Mobile Passwords Authentication 257

Webroot

MAY 9, 2025

Youre asked for sensitive information like bank logins and passwords, which can be used to drain your bank account. These messages appear to be from legitimate retailers like Amazon, Walmart or Target. Use strong passwords: Long, complex and unique passwords are a cornerstone of mobile security.

Scams 72

Scams Mobile Banking VPN 72

Krebs on Security

AUGUST 12, 2018

. “The cyber criminals typically create fraudulent copies of legitimate cards by sending stolen card data to co-conspirators who imprint the data on reusable magnetic strip cards, such as gift cards purchased at retail stores,” the FBI warned.

Banking 228

Banking Accountability Phishing Authentication 228

Malwarebytes

APRIL 16, 2024

million records to a hacker forum, claiming they originated from a March 2024 hack at Canadian retail chain Giant Tiger. The retailer first learned of the security incident on March 4, 2024, and concluded that customer information was involved by March 15, according to an email the company wrote to customers. Change your password.

Data breaches 136

Data breaches Passwords Retail Phishing 136

Duo's Security Blog

JANUARY 27, 2022

Not all multi-factor authentication (MFA) solutions are equal. For a two-factor authentication solution, that may include hidden costs, such as upfront, capital, licensing, support, maintenance, and operating costs. Estimate and plan for how much it will cost to deploy multi-factor authentication to all of your apps and users.

Authentication 104

Authentication Software Mobile Passwords 104

Duo's Security Blog

SEPTEMBER 4, 2023

And when it comes to managing access for this plethora of devices, password security just isn’t cutting it anymore. In our recent passkey blog series , we’ve been unpacking the difference between new passkey technology and more conventional password security in light of some of the most critical authentication scenarios.

Passwords 81

Passwords Authentication Accountability Password Management 81

Security Affairs

JUNE 12, 2025

The researchers pointed out that even if a camera appears protected, knowing the right URI can bypass authentication and retrieve real-time screenshots. Exposed feeds include private residences, retail shops, public transport, and patient areas—revealing a wide-scale risk from improperly configured surveillance systems across all sectors.

Hacking 66

Hacking Telecommunications Internet Internet 66

The Last Watchdog

FEBRUARY 3, 2021

The intruders got in by tricking UScellular retail store employees into downloading malicious software on store computers. Chloé Messdaghi, VP of Strategy, Point3 Security : As this breach shows us, it’s possible for someone to gain access to an individual’s 2FA, so it’s important to use a verification app, such as Google Authenticator.

Phishing 252

Phishing Hacking Accountability Social Engineering 252