NewsThe Register — Security
UK.gov begins killing off passwords for 23 million users
Teaser from the source
Passkeys promise fewer phishing headaches – and £600 a day off Whitehall's SMS bill
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on passwords
Other advisories
- Not ratedosv:CVE-2026-125362Seahub through 14.0.10 Predictable Share Link Passwords via Batch Endpoint
- LowCVE-2026-125362Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch share link passwords using Python's non-c…
- MediumCVE-2026-16699IBM Netezza Appliance 11.3.0.2 Interim Fix 002 through 11.3.1.3 Interim Fix 006 could allow a remote authenticated attacker to change the passwords of other …
- MediumCVE-2026-123553OpenAM before 16.1.4 ships built-in identities in the Top Level Realm (demo, anonymous, wsc, wsp, SecurityTokenService and agentAuth) with passwords that are…
- MediumCVE-2026-60083SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files in github.com/siyuan-note/siyuan/kernel
- HighCVE-2026-116683CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values in github.com/ctfer-io/terraform-provider-ctfd
- HighCVE-2026-123047In Eclipse BaSyx Helm Charts versions 3.0.0-rc.1 to 3.12.1 of the `basyx` chart, deployments with the bundled Keycloak enabled store the passwords of the Key…
- Highpwn_watch:claude-code-settings-local-json-secrets-exposure-nov-2026Claude Code "don't ask again" file leaks passwords and keys: 1,122 public copies of .claude/settings.local.json on GitHub hold secrets
Other news entries
- Claude Code is accidentally exposing secrets all over GitHubNewsArs Technica — Security
- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubNewsThe Hacker News
- Technical University of Munich (TUM) IT security incident: myTUM passwords stolen, TUMonline taken offlineBreachpwn.watch
- OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine LinuxNewsThe Hacker News
- Closing the Identity Gap at the Service DeskNewsBleepingComputer
- DreamHost confirms data breach exposed FTP logins and webmail sessionsNewsBleepingComputer
- mSecure password manager hack prompts password reset warningsNewsBleepingComputer
- Maru-Jan online mahjong leaks email addresses and passwords of all 1.86 million membersBreachpwn.watch
ID