Password

Amazon has quietly rolled out support for passkeys as it becomes the latest tech giant to join the passwordless future. But you still might have to hold onto your Amazon…

Amazon quietly rolls out support for passkeys, with a catch

After a cybersecurity audit mistakenly reset everyone’s password, a high school changed every student’s password to “Ch@ngeme!” giving every student the chance to hack into any other student’s account, according…

High school changes every student’s password to ‘Ch@ngeme!’

As Apple is rolling out its iOS 16 update today, one of the key security-facing features that will be available to users is Passkey. This feature will allow users to…

What is Apple Passkey, and how will it help you go passwordless?

Streaming media platform Plex has confirmed a data breach and is warning users to change their passwords. Plex said it discovered the compromise on Tuesday and found the intruder had…

Plex warns users to reset passwords after data breach

Crowdfunding website Kickstarter sparked fears overnight of a possible security incident after the company sent unsolicited password reset emails to millions of users without prior explanation. The emails, seen by…

Kickstarter sent password reset emails to millions of users, but didn’t tell anyone why

Cloud giant DigitalOcean says that some customers’ email addresses were exposed because of a recent “security incident” at email marketing company Mailchimp. In a scant blog post dated August 12,…

DigitalOcean says customer email addresses were exposed after latest Mailchimp breach

Google today announced an update to its password manager that will finally introduce a consistent look-and-feel across the service’s Chrome and Android implementations. Users will soon see a new unified…

Google consolidates its Chrome and Android password managers

Apple demonstrated “passkeys” at WWDC 2022, a new biometric sign-in standard that could finally kill off the password for good. It’s no secret that passwords are insecure, with easily guessable…

Apple ‘passkeys’ could finally kill off the password for good

It’s been a bumpy ride for Netflix recently, and the announcement that it will be charging for password sharing hasn’t gone as smoothly as it might have hoped, a new…

Netflix’s password-sharing test in Peru is confusing subscribers, report suggests

In a rare show of alliance, Apple, Google and Microsoft have joined forces to expand support for passwordless logins across mobile, desktop and browsers. Passwords are notoriously insecure, with weak…

Apple, Google and Microsoft team up on passwordless logins

Just days after police in the U.K. arrested seven people over suspected connections to the now-infamous hacking and extortion group, Lapsus$ is claiming its latest victim. Lapsus$, whose recent victims…

Lapsus$ hacking group claims software consultancy giant Globant as its latest breach victim

Cloaked, a Boston-based startup that allows users to generate unique email addresses and phone numbers when creating online accounts, has secured $25 million in Series A funding. Founded in 2020…

Cloaked raises $25M Series A to generate privacy-friendly identities on the fly

The Lapsus$ hackers used compromised credentials to break into the network of customer service giant Sitel in January, days before subsequently accessing the internal systems of authentication giant Okta, according…

Lapsus$ found a spreadsheet of accounts as they breached Okta, documents show

Gaming giant Ubisoft has confirmed a cybersecurity incident that led to the mass-reset of company passwords, but has declined to say what the incident actually was. In a brief statement,…

Ubisoft won’t say why it reset employee passwords after ‘cyber incident’

Featured Article

Is the UK government’s new IoT cybersecurity bill fit for purpose?

Internet of Things (IoT) devices — essentially, electronics like fitness trackers and smart lightbulbs that connect to the internet — are now part of everyday life for most. However, cybersecurity remains a problem, and according to Kaspersky, it’s only getting worse: there were 1.5 billion breaches of IoT devices during…

Is the UK government’s new IoT cybersecurity bill fit for purpose?

Web hosting giant GoDaddy has reported a data breach, and warns that data on 1.2 million customers may have been accessed. In a filing with the Securities and Exchange Commission,…

GoDaddy says data breach exposed over a million user accounts

Visible, a budget cellular carrier owned by Verizon, has confirmed that hackers accessed and charged user accounts. The incident, first reported by The Verge, came to light earlier this week after…

Verizon-owned cell network Visible confirms hackers accessed user accounts

A cybersecurity company says a popular smart home security system has a pair of vulnerabilities that can be exploited to disarm the system altogether. Rapid7 found the vulnerabilities in the…

A popular smart home security system can be remotely disarmed, researchers say

Apple has encountered monumental backlash to a new child sexual abuse material (CSAM) detection technology it announced earlier this month. The system, which Apple calls NeuralHash, has yet to be…

Apple’s CSAM detection tech is under fire — again

The FBI argued that compelling Guy Reffitt to unlock his computer by sitting in front of it ‘would not run afoul of the defendant’s Fifth Amendment right against self-incrimination.’

Court orders US Capitol rioter to unlock his laptop ‘with his face’

Magic, a San Francisco-based startup that builds “plug and play” passwordless authentication technology, has raised $27 million in Series A funding. The round, led by Northzone and with participation from…

Magic lands $27M Series A for its ‘plug and play’ passwordless tech

There are far fewer annoying things than managing one’s passwords. There are a bunch of companies out there to help you attempt to do that. And there’s also a number…

Ex-Plaid employees raise $30M for Stytch, an API-first passwordless authentication platform

Ring, the video doorbell maker dubbed the “largest civilian surveillance network the U.S. has ever seen,” is rolling out new but long overdue security and privacy features. The Amazon-owned company’s reputation…

Ring’s latest security updates are good, but still opt-in

A code repository used by the New York state government’s IT department was left exposed on the internet, allowing anyone to access the projects inside, some of which contained secret…

An internal code repo used by New York State’s IT office was exposed online

Transmit Security, a Boston-based startup that’s on a mission to rid the world of passwords, has raised a massive $543 million in Series A funding. The funding round, said to…

Transmit Security raises $543M Series A to kill off the password

Zocdoc says it has fixed a bug that allowed current and former staff at doctor’s offices and dental practices to access patient data because their user accounts weren’t properly decommissioned.…

Zocdoc says ‘programming errors’ exposed access to patients’ data

Google announced a new feature for its Chrome browser today that alerts you when one of your passwords has been compromised and then helps you automatically change your password with…

Chrome now uses Duplex to fix your stolen passwords

Australian security software house Click Studios has told customers not to post emails sent by the company about its data breach, which allowed malicious hackers to push a malicious update to…

Click Studios asks customers to stop tweeting about its Passwordstate data breach

Click Studios, the Australian software house that develops the enterprise password manager Passwordstate, has warned customers to reset passwords across their organizations after a cyberattack on the password manager. An…

Passwordstate users warned to ‘reset all passwords’ after attackers plant malicious update

Some of the most popular running apps are still lagging behind on security and privacy. That’s the verdict from security researchers who examined the leading running apps five years apart…

Running apps still lag behind on privacy and security