Troy Hunt

MARCH 29, 2018

The penny first dropped for me just over 7 years ago to the day: The only secure password is the one you can't remember. In an era well before the birth of Have I Been Pwned (HIBP), I was doing a bunch of password analysis on data breaches and wouldn't you know it - people are terrible at creating passwords!

Password Management 279

Password Management Passwords Data breaches Accountability 279

Krebs on Security

SEPTEMBER 22, 2023

The password manager service LastPass is now forcing some of its users to pick longer master passwords. But critics say the move is little more than a public relations stunt that will do nothing to help countless early adopters whose password vaults were exposed in a 2022 breach at LastPass. . ”

Passwords 332

Passwords Encryption Password Management Cryptocurrency 332

Adam Levin

FEBRUARY 10, 2020

There is little you can do in the event we experience widespread DDoS attacks, but one tip is to buy a good book series or a few board games since it might take a while to get the internet working again. Consider using a password manager. Or use a password manager.). Back Up Your Files.

Passwords 245

Passwords Phishing Password Management Accountability 245

Webroot

JUNE 17, 2025

Research shows that the travel and tourism sector ranked third in cyberattacks, with nearly 31% of hospitality organizations experiencing a data breach and a record 340 million people affected by cybercrimes. Fewer than 1 in 3 travelers (31%) protect their data with a virtual private network (VPN) when traveling internationally.

VPN 82

VPN Scams Computers and Electronics Phishing 82

SecureWorld News

MAY 10, 2022

Even though World Password Day is over, it's never too late to remind your end-users that weak, unimaginative, and easy-to-guess passwords—like "123456," "qwerty," and, well… "password"—are poor options for securing accounts and devices. Improving password best practices matters. Get started with these helpful resources.

Passwords 98

Passwords Education Password Management Computers and Electronics 98

Troy Hunt

NOVEMBER 7, 2018

The first one was about HSBC disclosing a "security incident" which, upon closer inspection, boiled down to this: The security incident that HSBC described in its letter seems to fit the characteristics of brute-force password-guessing attempts, also known as a credentials stuffing attack.

Passwords 274

Passwords Accountability Hacking Education 274

Malwarebytes

MAY 5, 2022

On top of that, some websites still insist on forcing users to have very short passwords, or perhaps prevent password managers filling data into the password box. Shoring up your passwords. Sign up for breach alerts. Whenever your email shows up in a breach, you’ll be alerted.

Passwords 96

Passwords Password Management Authentication Accountability 96

Krebs on Security

JANUARY 30, 2024

Those who submitted credentials were then prompted to provide the one-time password needed for multi-factor authentication. A booking photo of Noah Michael Urban released by the Volusia County Sheriff. As it happens, Plex announced its own data breach one day before LastPass disclosed its initial August intrusion.

Social Engineering 360

Social Engineering Mobile Cybercrime Passwords 360

CSO Magazine

OCTOBER 6, 2022

Password manager vendor Dashlane has announced updates to its suite of enterprise offerings. These include a new Dark Web Insights tool that provides a breakdown of compromised passwords, a standalone authenticator app for enabling account multi-factor authentication (MFA), and a low-cost starter plan for small businesses.

Authentication 75

Authentication Small Business Password Management Passwords 75

Security Affairs

SEPTEMBER 22, 2019

A flaw in LastPass password manager leaks credentials from previous site. Data leak exposes sensitive data of all Ecuador ‘citizens. Magecart attackers target mobile users of hotel chain booking websites. A bug in Instagram exposed user accounts and phone numbers.

Adware 82

Adware Password Management Advertising Hacking 82

Krebs on Security

FEBRUARY 18, 2019

” The DNS part of that moniker refers to the global “ D omain N ame S ystem ,” which serves as a kind of phone book for the Internet by translating human-friendly Web site names (example.com) into numeric Internet address that are easier for computers to manage. Review accounts with registrars and other providers.

DNS 279

DNS Internet Internet Government 279

Malwarebytes

SEPTEMBER 21, 2021

After a breach, cybercriminals often sell and re-sell the stolen data. And if your child uses the same password across multiple accounts, when one gets breached they are all vulnerable. This is where a password manager comes in. Your password manager can help with this. Far from it.

Internet 125

Internet Internet Passwords Password Management 125

Malwarebytes

MARCH 17, 2021

From an optional password manager feature in Safari that looks out for saved passwords involved in data breaches to new digital security for car keys on Apple Watches and the iPhone, the security sweep appears to be comprehensive. Actual malware designed for Macs is but a small slice of the apple.

Malware 119

Malware Adware Software Passwords 119

Troy Hunt

JANUARY 16, 2019

Many people will land on this page after learning that their email address has appeared in a data breach I've called "Collection #1". Collection #1 is a set of email addresses and passwords totalling 2,692,818,238 rows. It's made up of many different individual data breaches from literally thousands of different sources.

Data breaches 280

Data breaches Passwords Password Management Accountability 280

eSecurity Planet

FEBRUARY 8, 2022

Single sign-on can be part of a password management tool if the tool acts as a central trust broker for a system or organization, as opposed to simply “vaulting,” or storing, multiple passwords. Users can add their own personal apps like LinkedIn, Twitter, and travel booking sites.

Authentication 98

Authentication Passwords Risk Digital transformation 98

CyberSecurity Insiders

OCTOBER 11, 2022

But errors resulting in cybersecurity breaches can have disastrous consequences for all involved. Verizon’s 2022 Data Breaches Investigations Report concluded that 82% of data breaches involved a human element. Using weak passwords. Passwords are the front line of cybersecurity defense.

Cybersecurity 52

Cybersecurity Passwords Scams Phishing 52

Zigrin Security

OCTOBER 11, 2023

In today’s digital age, the threat of data breaches is a constant concern. Therefore, it is crucial to understand what hackers are planning to do with your data and take proactive measures to protect it. This kind of data breach could lead to two main scenarios. The first one is selling it on the dark web.

Cyber threats 52

Cyber threats Penetration Testing Passwords Backups 52

ForAllSecure

JANUARY 19, 2022

One of the eight required domains in the current CISSP certification process is Identity and Access Management, or IAM. You might not think of it as a major aspect of security and yet, stolen credentials are really the key to data breaches today. He loves password managers. I use a password manager.

Passwords 52

Passwords Authentication Mobile Password Management 52

Spinone

NOVEMBER 21, 2019

To train your employees and protect company data from human mistakes and, therefore, costly data breaches; 3. 3 Basic Cyber Security Training Courses For Everybody The best cyber security courses online listed below contain the information everybody must know to keep their data safe in the high-risk online environment.

Social Engineering 40

Social Engineering Accountability Phishing Cybersecurity 40

ForAllSecure

MARCH 24, 2021

Anyway I was testing this suite when I happened to randomly strike two keys -- I think it was control and B -- and up popped the password manager, displaying all my test passwords in the clear. Thing was, the manager required its own password, which I had not entered; remember, I had hit only two keys.

Software 52

Software Passwords Internet Internet 52

ForAllSecure

MARCH 24, 2021

Anyway I was testing this suite when I happened to randomly strike two keys -- I think it was control and B -- and up popped the password manager, displaying all my test passwords in the clear. Thing was, the manager required its own password, which I had not entered; remember, I had hit only two keys.

Software 52

Software Passwords Internet Internet 52

Responsible Cyber

JULY 13, 2024

Encouraging Self-Initiated Learning : Empower employees to take charge of their own learning by providing resources such as e-books, webinars, and access to cybersecurity forums and communities. These sessions should cover fundamental cybersecurity practices, phishing detection, password management, and incident response.

Education 52

Education Cybersecurity Cyber threats Technology 52

Troy Hunt

JUNE 3, 2024

As Telegram describes the service, it's simple, private and secure and as such, has become very popular with those wishing to share content anonymously, including content related to data breaches. In reaching out to existing subscribers, I expected some repetition in terms of them already appearing in existing data breaches.

Passwords 364

Passwords Data breaches Accountability Authentication 364

eSecurity Planet

DECEMBER 3, 2021

Brian Krebs is an independent investigative reporter known for his coverage of technology, malware , data breaches , and cybercrime developments. ICYMI, Equifax forced to pull offline a huge database of consumer data guarded only by credentials "admin/admin" [link] — briankrebs (@briankrebs) September 13, 2017.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

The Last Watchdog

MAY 30, 2023

LW: Catastrophic infrastructure and supply chain breaches, not to mention spy balloons and Tik Tok exploits, have grabbed regulators’ attention. My book emphasizes the heightened responsibility of C-suite leaders, considering the increased public, media, and regulator scrutiny. How does your main theme of tie in?

Cloud Migration 188

Cloud Migration Passwords Cybersecurity Cyber threats 188

eSecurity Planet

MARCH 6, 2025

Data breaches can happen in an instant whether through a hacker infiltrating a network or an executive misplacing a laptop. 5 McAfee Endpoint Encryption stands out as one of the best overall encryption software on the market because it is designed for enterprises that need to secure sensitive data across managed devices.

Encryption 63

Encryption Software Authentication Threat Detection 63