The FIDO Alliance has released draft specifications for a new standard that will allow users to transfer passkeys securely.
Credentials RSS
According to an alarming research, over 100,000 ChatGPT accounts have been compromised and are being traded on illicit dark web marketplaces. Affected regions include the U.S., India, and more.
Google is working on a feature that will add another layer of security associated to autofilling of passwords. Microsoft Edge already has this functionality but it's not the default configuration.
Atlassian has disclosed yet another critical severity flaw in Confluence. The latest issue is very trivial to exploit as it involves leveraging hardcoded credentials to get wide access to Confluence.
The SolarWinds attack may have compromised accounts of nearly 30 US prosecutors, the details of which have been made public now. The cover of several informants could be at risk of being blown.
Microsoft has concluded that the Solorigate attacker was only able to get access to a small number of code files for Azure, Exchange, and Intune, and those did not contain live customer data.
Having operated for around eighteen months, Leakbase, a subscription-supported index of leaked usernames and passwords, wound down over the weekend and began redirecting visitors to Have I Been Pwned.
If you've been a Dropbox customer since 2012 and haven't changed your password since then the service will notify you to reset your credentials. The company is adamant this is purely precautionary.
According to German media sites, more than 1800 user names and passwords of Minecraft players have been leaked online via Pastebin, most of them used by German players.
Usernames and passwords of eBay users are being sold online to fraudsters and scammers by the hackers who attacked the site earlier this year and stole databases containing user details.