Data Protection Meta Hit With $102 Million Privacy Fine From European Union Over 2019 Password Security Lapse Meta fined more than $100 million by a European Union privacy regulator over a security lapse involving Facebook passwords. Associated PressSeptember 27, 2024
Data Breaches HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts HubSpot is "actively investigating and blocking attempts” to hack into customer accounts but some targets have already been compromised. Ryan NaraineJuly 1, 2024
ICS/OT Prevalence and Impact of Password Exposure Vulnerabilities in ICS/OT Analysis and insights on the prevalence and impact of password exposure vulnerabilities in ICS and other OT products. Eduard KovacsJune 13, 2024
Data Protection New Password Cracking Analysis Targets Bcrypt Hive Systems conducts another study on cracking passwords via brute-force attacks, but it’s no longer targeting MD5. Eduard KovacsApril 24, 2024
ICS/OT CISA Urges Manufacturers to Eliminate Default Passwords After Recent ICS Attacks CISA is advising device makers to stop relying on customers to change default passwords following attacks targeting water sector ICS. Eduard KovacsDecember 18, 2023
Identity & Access Proton Launches Open Source Password Manager Proton makes its open source Proton Pass password manager globally available for major browsers and mobile devices. Ionut ArghireJune 30, 2023
Vulnerabilities KeePass Update Patches Vulnerability Exposing Master Password KeePass 2.54 patches a vulnerability allowing attackers to retrieve the cleartext master password from a memory dump. Ionut ArghireJune 6, 2023
Vulnerabilities PoC Tool Exploits Unpatched KeePass Vulnerability to Retrieve Master Passwords Researcher publishes PoC tool that exploits unpatched KeePass vulnerability to retrieve the master password from memory. Ionut ArghireMay 18, 2023