NewsThe Register — Security
Admin dropped the F-bomb in a password to show hackers who was really 1337
Teaser from the source
Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on password
Other advisories
- Not ratedosv:CLEANSTART-2024-YV49525When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog
- Not ratedosv:CLEANSTART-2024-VZ65902attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, passwo...
- Not ratedosv:CLEANSTART-2024-TJ47241It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords
- Not ratedosv:CLEANSTART-2024-BK15179In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue
- Not ratedosv:CLEANSTART-2024-VN57998slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash
- Not ratedosv:CLEANSTART-2024-DH33215use of hard-coded password vulnerability may allow authentication abuse
- Not ratedosv:CLEANSTART-2024-UP63455design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers (RODCs)
- Not ratedosv:CLEANSTART-2025-PI21590LibreOffice supports the storage of passwords for web connections in the user’s configuration database
Other news entries
- Passkeys Are Better Than Passwords. But They Are Not Enough.NewsSecurityWeek
- Chainalysis says an attacker using agentic techniques accessed its systems; customer user names, emails and roles exposedBreachpwn.watch
- ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesNewsThe Hacker News
- Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-netNewsSecurityWeek
- AO3 (Archive of Our Own) down for 2-4 weeks after security incident; user database theft not ruled outBreachpwn.watch
- Unexplained DreamHost Incident Prompts Email, FTP Password ResetsNewsSecurityWeek
- DreamHost forces password resets in ongoing "incident"NewsBleepingComputer
- uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat AccountsNewsThe Hacker News
ID