Tag: password
-
Passwort-Bypass bei Check Point: Hacker greifen VPN-Systeme an
Eine Logiklücke in Check-Point-VPNs (CVE-2026-50751) erlaubt Passwörter zu umgehen. Die Schwachstelle wird aktiv für Ransomware-Angriffe ausgenutzt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/passwort-bypass-bei-check-point
-
Apple Intelligence can now replace weak passwords without user intervention
Apple’s next generation of Apple Intelligence, the company’s personal intelligence system, expands its capabilities and introduces new security features in Passwords. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/09/apple-intelligence-automated-passwords-security-updates/
-
Datenpanne bei Instagram: Mark Zuckerbergs Handynummer plötzlich im Netz
Tags: passwordDurch einen Bug beim Passwort-Reset von Instagram ließen sich zeitweise Rufnummern anderer Nutzer abgreifen. Auch Zuckerberg blieb nicht verschont. First seen on golem.de Jump to article: www.golem.de/news/datenpanne-bei-instagram-mark-zuckerbergs-handynummer-ploetzlich-im-netz-2606-209563.html
-
Infosecurity Europe: Why JLR’s CISO Enforced In-Person Password Resets Following Cyber-Attack
Speaking at Infosecurity Europe, Ashish Shrestha, former CISO at Jaguar Land Rover revealed why he wanted over 30,000 employees to change their passwords in the immediate aftermath of the incident First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/jlr-cyberattack-ciso-inperson/
-
New Apple feature automatically changes your compromised passwords
At WWDC 26, Apple announced an Apple Intelligence-powered feature that can automatically fix weak and compromised passwords. This works in Safari, and it’s rolling out with iOS 27. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/apple/new-apple-feature-automatically-changes-your-compromised-passwords/
-
Microsoft’s open source tools were hacked to steal passwords of AI developers
Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack. First seen on techcrunch.com Jump to article: techcrunch.com/2026/06/08/microsofts-open-source-tools-were-hacked-to-steal-passwords-of-ai-developers/
-
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol.The vulnerability, tracked as CVE-2026-50751 (CVSS score: 9.3), is a case of a logic flow weakness in certificate validation that allows an unauthenticated remote attacker to…
-
Instagram Recovery Tool Bug Exposed 20,225 Accounts to Password Reset Abuse
Meta says an Instagram recovery tool bug allowed attackers to abuse password resets, affecting 20,225 accounts and exposing users without 2FA to account takeover risk. First seen on hackread.com Jump to article: hackread.com/instagram-recovery-tool-bug-accounts-password-reset/
-
Meta AI Recovery Tool Flaw Exposed 20,000+ Instagram Accounts
A flaw in Meta’s AI-powered Instagram recovery tool exposed over 20,000 accounts, letting attackers reset passwords and take over profiles. Meta’s High Touch Support tool, known as HTS, was designed to help Instagram users recover locked accounts: you provide an email address, you get a password reset link. The flaw was equally simple: the tool…
-
Instagram Glitch Reportedly Exposed Contact Info of Zuckerberg and Other Users
Instagram glitch exposed Mark Zuckerberg’s email addresses and phone number, plus contact details of other top users, through a password reset flaw. First seen on hackread.com Jump to article: hackread.com/instagram-glitch-leaks-contact-info-mark-zuckerberg-users/
-
Instagram Patches Account Recovery Flaw Leaking User Contact Information
A critical logic flaw in Instagram’s web-based account recovery workflow exposed unredacted user contact information, including full email addresses and phone numbers, before Meta rapidly patched it on June 6, 2026. The vulnerability, which affected the platform’s password reset interface, allowed any unauthenticated user to initiate a standard recovery request for a target username and…
-
Experts say we should use passkeys, but can a smartphone PIN really be safer than a password?
The long-running series in which readers answer other readers’ questions explores a topical issue of personal cybersecurity<ul><li>Readers reply: <a href=”https://www.theguardian.com/lifeandstyle/2026/jun/07/readers-reply-alien-music-playlist-first-contact”>If an alien asked you: ‘What is music?’ what would you play for them?</li></ul>I’ve been struggling to get my head around the idea that a passkey, which can be a PIN on your phone, or facial…
-
Reaper macOS Infostealer Abuses Script Editor to Steal Crypto and Passwords
Threat actors are deploying an updated SHub Stealer variant named Reaper that exploits the native macOS Script Editor to bypass OS-level protections and compromise cryptocurrency assets. First seen on hackread.com Jump to article: hackread.com/reaper-macos-infostealer-script-editor-crypto-passwords/
-
Scheinverschlüsselung: Fedora-Update deckt uralte Security-Panne bei Outlook auf
Einige Outlook-Nutzer haben offenbar jahrelang unwissentlich Passwörter im Klartext an E-Mail-Server übermittelt, obwohl die SSL/TLS-Option aktiv war. First seen on golem.de Jump to article: www.golem.de/news/scheinverschluesselung-fedora-update-deckt-uralte-security-panne-bei-outlook-auf-2606-209448.html
-
Attackers obtained encrypted password vaults from some Dashlane user accounts
Dashlane has disclosed new details about a brute-force attack that let a threat actor access some customer accounts and copy encrypted vaults. Dashlane said it found no … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/05/dashlane-brute-force-attack-vaults-customer-accounts/
-
Dashlane Reveals How Hackers Downloaded Encrypted Password Vaults
Dashlane has disclosed the findings of a recent security investigation, confirming that a limited number of users were impacted by a targeted brute-force attack against its device registration system. The company emphasized that its internal infrastructure was not breached and that no evidence suggests a broader compromise beyond a small subset of accounts. Device Registration…
-
Dashlane explains how attackers managed to download encrypted password vaults
Tags: passwordBy targeting large numbers of users, attackers increased their chances of success. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/
-
Microsoft Edge retires master password feature, adopts passkeys and biometrics
First seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-edge-retires-master-password-feature-adopts-passkeys-and-biometrics
-
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
A development flag left switched on in production builds of several Microsoft 365 Android apps disabled the check that limits account-token sharing to trusted Microsoft apps.Any other app on the same phone could ask for the signed-in user’s token and get it, then read email, open files, browse the calendar, and send messages as that…
-
Quantensicherheit Passkeys sind gut. Vor allem aber hilft eine dynamische, kontextbasierte und souveräne Authentifizierung
Wir sind im Quantum-Zeitalter angekommen. Das belegt nicht nur die intensive öffentliche Diskussion über Passwortsicherheit, sondern auch die Tatsache, dass 80 Prozent aller Datenpannen, laut Verizon-DBIR 2025 auf gestohlene oder schwache Passwörter zurückzuführen sind. Die Diskussion allein ist aber nicht genug. Unternehmen müssen handeln und ihre Systeme mit sicheren Zugangsmechanismen, wie Single-Sign-On, sowie einer proaktiven,…
-
Tankfüllstandsmesser in Tankstellen öffentlich über das Internet erreichbar
Mitte Mai hat CNN über einen Verdacht von US-Behörden berichtet. Demnach sollen Akteure, die mit dem Iran in Verbindung stehen, automatische Tankfüllstandsmesser (Automatic-Tank-Gauges, ATGs) an Tankstellen in den USA angegriffen haben. Dadurch konnten die Angreifer auf Geräte zugreifen, die über das Internet erreichbar und nicht durch Passwörter geschützt waren, und angezeigte Werte verändern. Zwar konnten…
-
Meta AI customer support tricked into forwarding password reset codes
First seen on scworld.com Jump to article: www.scworld.com/brief/meta-ai-customer-support-tricked-into-forwarding-password-reset-codes
-
Fake ChatGPT Desktop App Ads Used to Push Password-Stealing Malware
Fake ChatGPT desktop app ads pushed password-stealing malware by abusing trusted AI links, hiding from scanners, and tricking users into downloads. First seen on hackread.com Jump to article: hackread.com/fake-chatgpt-desktop-app-ads-password-stealer-malware/
-
Instagram Account Hijacks Expose the Security Risks of AI-Powered Support
Attackers exploited Meta’s AI support chatbot to reset Instagram passwords and hijack accounts without accessing victims’ email inboxes. Attackers abused Meta’s AI-powered support chatbot to reset Instagram passwords and hijack accounts without accessing victims’ email inboxes. The issue affected several users, including high-profile accounts, before Instagram fixed the flaw. Security researcher Jane Wong and other…
-
Password manager Dashlane says hackers stole some customers’ password vaults
The password manager giant said hackers were able to ‘brute-force’ its two-factor system, allowing them to access customer accounts and download their password vaults. First seen on techcrunch.com Jump to article: techcrunch.com/2026/06/02/password-manager-dashlane-says-hackers-stole-some-customers-password-vaults/
-
Passwortmanager: Hacker erbeuten Passwort-Tresore von Dashlane-Nutzern
Infolge eines Brute-Force-Angriffs wurden einige Dashlane-Nutzer temporär gesperrt. Die Angreifer sollen zudem an Passwort-Tresore gelangt sein. First seen on golem.de Jump to article: www.golem.de/news/brute-force-attacke-angreifer-erbeuten-passwort-tresore-von-dashlane-2606-209302.html
-
Brute-Force-Attacke: Angreifer erbeuten Passwort-Tresore von Dashlane
Infolge eines Brute-Force-Angriffs auf Dashlane wurden einige Nutzer temporär gesperrt. Die Angreifer sollen zudem an Passwort-Tresore gelangt sein. First seen on golem.de Jump to article: www.golem.de/news/brute-force-attacke-angreifer-erbeuten-passwort-tresore-von-dashlane-2606-209302.html
-
KI-Panne bei Instagram: Support-Chatbot hilft bei Passwort-Reset für fremde Konten
Der Meta AI Supportassistent hilft Angreifern offenbar bereitwillig dabei, fremde Instagram-Konten zu übernehmen. Beschwerden im Netz häufen sich. First seen on golem.de Jump to article: www.golem.de/news/support-panne-instagram-konten-ueber-metas-ki-chatbot-gekapert-2606-209284.html