Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched
More on Passwords
Other advisories
- HighCVE-2026-19877INFINITT ULite share-link passwords are brute-forceable; pre-auth XSS fixed in BN50
- Not ratedosv:CVE-2026-74846Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier
- Not ratedosv:CLEANSTART-2024-YV49525When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog
- Not ratedosv:CLEANSTART-2024-TJ47241It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords
- Not ratedosv:CLEANSTART-2024-UP63455design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers (RODCs)
- Not ratedosv:CLEANSTART-2025-PI21590LibreOffice supports the storage of passwords for web connections in the user’s configuration database
- Not ratedosv:CLEANSTART-2025-VT81518LibreOffice supports the storage of passwords for web connections in the user’s configuration database
- Not ratedosv:CVE-2026-62347Element Call exposes shared passwords in logs
Other news entries
- OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine LinuxNewsThe Hacker News
- Closing the Identity Gap at the Service DeskNewsBleepingComputer
- DreamHost confirms data breach exposed FTP logins and webmail sessionsNewsBleepingComputer
- mSecure password manager hack prompts password reset warningsNewsBleepingComputer
- mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious ActivityNewsThe Hacker News
- Password manager mSecure tells users to change passwords, won't say whyNewsThe Register — Security
- mSecure password manager hack: encrypted mSecure Cloud vault database reportedly stolen, users told to change passwordsBreachpwn.watch
- GitBook breach: SSO flaw led to production access; all API tokens revoked, rotate integration secretsBreachpwn.watch
Source: https://thehackernews.com/2026/07/laser-attack-resets-tangem-wallet.html
ID