Click any tag below to further narrow down your results
Links
Instagram recently addressed a problem where users received unsolicited password reset emails triggered by an external party. The company insists there was no breach, despite reports of personal data from millions of accounts being available on the dark web.
Localmind's software, used by over 150 organizations, suffered a serious data breach due to a flaw allowing demo accounts full root access. The compromised data includes sensitive information from banks, hotels, and energy companies, with passwords stored in plain text. A security researcher uncovered these vulnerabilities and the extent of the breach.
The UK ICO fined LastPass £1.2 million after a 2022 breach exposed personal data of 1.6 million users. The breach resulted from a series of security failures, including a compromised employee device and weak password practices, allowing attackers to access sensitive customer information.
The FBI has shared 630 million passwords with Troy Hunt to help organizations block potential account takeovers. This data, some of which is newly identified, adds to the existing database and enhances security measures against cybercrime. Hunt emphasizes the importance of using this information to protect accounts effectively.
Plex has notified its users to change their passwords following a recent data breach that may have compromised user account information. The company is taking steps to enhance security and protect user data in light of the incident.
Pakistanis are being urged to change all their passwords immediately following a significant global data breach that has compromised numerous accounts. Authorities recommend enhancing security measures to protect personal information from potential exploitation.
Security researchers discovered that a weak password used by Paradox.ai allowed access to sensitive personal information of millions of job applicants for McDonald's, exposing 64 million records. Additionally, a malware infection on a Paradox developer's device compromised various internal and third-party credentials, raising concerns about the company's security practices despite previous audits.
A security incident at a startup revealed vulnerabilities in their admin panel due to weak password usage and inadequate access controls, allowing an attacker to exfiltrate sensitive customer data. The experience highlighted the importance of robust authorization systems and the significant fallout that can occur from neglecting security measures. The aftermath involved extensive remediation efforts and a reevaluation of the company's security posture.
A massive leak of 16 billion login credentials from various online services has been confirmed, marking one of the largest data breaches in history. Cybersecurity experts warn that these compromised credentials pose a significant risk for account takeovers and phishing attacks, emphasizing the importance of switching to secure passkeys and maintaining strong password hygiene. Users are urged to change passwords, utilize password managers, and adopt multi-factor authentication to protect their accounts.