Password Management
Password Management Solutions
According to the Danish newspaper Politiken, at least three user accounts of the Danish IT company Pays used the password “123456” at the time a hacker gained access to the Danish Civil Registration System (CPR). One of these accounts was the company’s administrator account. The incident demonstrates how a weak basic security measure can have […]
Researchers have uncovered new attack vectors that can undermine passkey authentication, challenging the idea that passwordless automatically means attack-proof. The attacks focus on weaknesses around the authentication flow and implementation, rather than breaking the underlying cryptography. Manipulation of WebAuthn processes, fallback mechanisms and compromised environments can potentially allow attackers to bypass or weaken passkey protection. […]
Research by OCCRP, Investico, and NU reveals that the password manager Passwork, presented as European, was originally developed in Russia. The company reportedly deliberately shielded its Russian origins through structures in Finland, Spain, and the UAE. Cybersecurity experts warn that ties to the Russian state and defence sector pose additional risks, particularly for critical infrastructure. […]
The AIVD and MIVD warn that Russian state hackers are exploiting vulnerable IP cameras for espionage, including a small number in the Netherlands. The primary recommendations are: disable UPnP, avoid port forwarding, use a VPN, and restrict internet access to the camera. Replace default passwords, install firmware updates, and disable unnecessary protocols such as Telnet […]
The UK’s National Cyber Security Center (NCSC) has called on law firms in the country to arm themselves against ransomware. In 2021, eighteen law firms informed the British regulator SRA that they had fallen victim to a ransomware attack. Documents from 60 court cases were stolen from one law firm and then published on the […]
Cybercriminals have employed a sophisticated attack method by infecting TP-Link router firmware to target European Union (EU) entities, as reported by Bleeping Computer.The attackers have compromised the firmware of TP-Link routers, a popular brand used widely across Europe, to gain unauthorized access and launch cyberattacks.The infected firmware allows hackers to control the compromised routers remotely, […]
Terravision, a company that arranges bus transport to and from European airports, has leaked the data of more than two million customers. This concerns names, telephone numbers, e-mail addresses, salted password hashes and in some cases dates of birth and country of origin. Details about the data breach are not yet known. Via ID Control […]
Active Directory (AD) is a powerful authentication and directory service used by organizations worldwide. With this ubiquity and power comes the potential for abuse. Insider threats offer some of the most potentials for destruction. Many internal users have over-provisioned access and visibility into the internal network. Insiders’ level of access and trust in a network […]
How did the crooks get in given that the needed access credentials of 4 developers at LastPass were locked up in a secure password vault to which only they had access? Access to the vault password was accomplished by targeting the DevOps engineer’s home computer and exploiting a vulnerable third-party media software package, which enabled […]
T-Mobile said a “bad actor” abused an application programming interface (API) to hoover up data on roughly 37 million current postpaid and prepaid customer accounts. The data stolen included customer name, billing address, email, phone number, date of birth, T-Mobile account number, as well as information on the number of customer lines and plan features. […]