HeadFlash

Topic · 22 stories

Password security: breaches, passkeys and news

Edited by Marcin Rybak

This edition was produced with artificial intelligence. Text and voice are generated automatically.

Timeline

  1. FBI and Secret Service: FortiBleed still active, locks users out and feeds ransomware Security
  2. 474 leaked GitHub App private keys still authenticate, GitGuardian finds Security
  3. SpyCloud: stolen credentials expose 1,787 US water providers Security
  4. European password manager shares codebase with Russian firm Security
  5. Passkey-themed phishing campaign hits Microsoft 365 and steals corporate data Security
  6. Dropbox Breach Hits 5,000 Accounts via Lenovo ID Integration Flaw Security
  7. Dropbox Breach Traced to Lenovo SSO Authentication Flaw Security
  8. Dropbox SSO Flaw: Attack Chain and Fix Security
  9. Anthropic Warns Infostealer Malware Is Hijacking Claude Sessions to Drain Usage Security
  10. Three Studies Show Passkey Bypass Attacks on Windows Security
Show older (12 stories)
  1. Connective eID Extension Flaws Allow Drive-By RCE and PIN Theft Security
  2. Google synced passkey flaws allow silent account takeover Security
  3. Pass-ta-key attacks let malware hijack Google-synced passkeys in Chrome Security
  4. US Prosecutes American for Using Duress Password to Wipe Phone at Border Privacy
  5. Google Introduces Selfie Video as a New Account Recovery Method Privacy
  6. Microsoft Mandates Passkeys in Entra by February 2027, Retires SMS and Voice MFA Security
  7. Cybercriminals Released 802,000 Stolen Accounts in One Day During World Cup Group Stage Security
  8. Google OAuth Device Code Flow Hijack Allows Universal Account Takeover Security
  9. LastPass Breached via Klue Supply-Chain Attack: Customer Data Stolen, Vaults Intact Privacy
  10. LastPass Breached via Klue Supply-Chain Attack Security
  11. Canadians Have Days Left to Claim Up to $500 in LastPass Data Breach Settlement Privacy
  12. Apple’s iOS 27 Passwords App Gains AI-Powered Weak Password Updater Privacy