NewsThe Register — Security
Admin dropped the F-bomb in a password to show hackers who was really 1337
Teaser from the source
Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on password
Other advisories
- Not ratedCVE-2026-55186MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow
- MediumCVE-2026-55186MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow
- Mediumghsa:GHSA-473q-m89c-ghf8MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)
- Not ratedosv:GHSA-473q-m89c-ghf8MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)
- Not ratedosv:CVE-2026-118686EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex
- Not ratedosv:CLEANSTART-2026-UC16830In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes
- HighCVE-2026-116683CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
- HighCVE-2026-116683CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
Other news entries
- ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesNewsThe Hacker News
- Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-netNewsSecurityWeek
- Unexplained DreamHost Incident Prompts Email, FTP Password ResetsNewsSecurityWeek
- DreamHost forces password resets in ongoing "incident"NewsBleepingComputer
- uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat AccountsNewsThe Hacker News
- US Federal Election Commission shuts down its e-filing system after attempted intrusion a week before the midtermsBreachpwn.watch
- Blockchain data provider Allium discloses unauthorized access, revokes all API keysBreachpwn.watch
- Dual BIOS: The laptop security feature SMBs don’t know they needNewsCSO Online
ID